last executing test programs: 2.911170538s ago: executing program 3 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) 2.911035714s ago: executing program 3 (id=65): prctl$PR_SET_IO_FLUSHER(0x59616d61, 0x4) 2.821162191s ago: executing program 3 (id=66): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0xee01, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) 2.680842794s ago: executing program 1 (id=69): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4106, 0x100a}], 0x1) 2.271184675s ago: executing program 1 (id=71): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) rmdir(&(0x7f0000000280)='./control\x00') 2.037628951s ago: executing program 2 (id=72): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100002dc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020000ab9b6c2f2e369fb46a6aceb448bbb54068e52831c24e45af27ff6b5c8b8b04f2ab6d56ba446cdbc9dd880e10eeba95731b1d2ee387fe"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.9238493s ago: executing program 3 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 1.745426716s ago: executing program 3 (id=74): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000000)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000a40)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x1) fspick(0xffffffffffffffff, 0x0, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sysinfo(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1.320757817s ago: executing program 1 (id=77): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x4c, 0xd, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB="b2e61743d778e9050000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_DELETE_BATCH(0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 651.068099ms ago: executing program 3 (id=78): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x2, 0x0) 490.893687ms ago: executing program 0 (id=81): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) write$P9_RVERSION(r0, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x4bf, 0x8, '9P2000.L'}, 0x15) 410.743969ms ago: executing program 1 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff0000000001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 410.618967ms ago: executing program 0 (id=83): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x5d2dd0c54751f8e3) 409.433941ms ago: executing program 1 (id=84): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbc3}, 0x18) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 350.431053ms ago: executing program 2 (id=85): socket$nl_rdma(0x10, 0x3, 0x14) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYRES32=0x0], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 350.253269ms ago: executing program 0 (id=86): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x24) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000000)=0xc) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x10, 0x6}, {0x454, 0x1000}], r2}, 0x18, 0x1) 288.08852ms ago: executing program 1 (id=87): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x4, 0x1cb, 0x12d61, 0x12d54}}, 0x44) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0303ea00000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 287.836336ms ago: executing program 0 (id=88): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x40}}], 0x1, 0x4000800) 287.706354ms ago: executing program 2 (id=89): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002600)={&(0x7f0000002580)=[{0x1, 0xa800, 0x0, 0x0}, {0x0, 0xc600, 0x587, &(0x7f0000001580)="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"}], 0x2}) syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="040e04042d20"], 0x7) 230.949644ms ago: executing program 2 (id=90): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e"], 0x22) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) 153.593438ms ago: executing program 2 (id=91): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getpgid(0x0) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) 153.22536ms ago: executing program 0 (id=92): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x40000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x10, 0x3, 0x400d, 0x0}) 153.001222ms ago: executing program 0 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=94): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r5, r5, 0x0, 0x200000) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/152, 0x98) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9060' (ED25519) to the list of known hosts. [ 56.215204][ T40] audit: type=1400 audit(1765069161.225:62): avc: denied { name_bind } for pid=5931 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.250826][ T40] audit: type=1400 audit(1765069161.255:63): avc: denied { execute } for pid=5932 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.258733][ T40] audit: type=1400 audit(1765069161.255:64): avc: denied { execute_no_trans } for pid=5932 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.488859][ T40] audit: type=1400 audit(1765069163.495:65): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.497546][ T40] audit: type=1400 audit(1765069163.515:66): avc: denied { mount } for pid=5932 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.499996][ T5932] cgroup: Unknown subsys name 'net' [ 58.508635][ T40] audit: type=1400 audit(1765069163.515:67): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.654233][ T5932] cgroup: Unknown subsys name 'cpuset' [ 58.658416][ T5932] cgroup: Unknown subsys name 'rlimit' [ 58.835618][ T40] audit: type=1400 audit(1765069163.845:68): avc: denied { setattr } for pid=5932 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.846530][ T40] audit: type=1400 audit(1765069163.845:69): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.853789][ T40] audit: type=1400 audit(1765069163.845:70): avc: denied { write } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.866344][ T40] audit: type=1400 audit(1765069163.845:71): avc: denied { read } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.873853][ T40] audit: type=1400 audit(1765069163.855:72): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.882574][ T40] audit: type=1400 audit(1765069163.855:73): avc: denied { mount } for pid=5932 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.891947][ T40] audit: type=1400 audit(1765069163.865:74): avc: denied { read } for pid=5647 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.902786][ T5935] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.007718][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.308927][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.310371][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.312436][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.317866][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.317974][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.320610][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.323555][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.332120][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.332356][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.339295][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.342533][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.344628][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.345948][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.348963][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.349069][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.350148][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.350558][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.363965][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.368128][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.372269][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.693900][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 63.693918][ T40] audit: type=1400 audit(1765069168.705:90): avc: denied { module_request } for pid=5943 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.743606][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 63.758341][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 63.809623][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 64.050602][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.054379][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.057881][ T5953] bridge_slave_0: entered allmulticast mode [ 64.061849][ T5953] bridge_slave_0: entered promiscuous mode [ 64.067081][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 64.074015][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.077087][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.080120][ T5943] bridge_slave_0: entered allmulticast mode [ 64.084252][ T5943] bridge_slave_0: entered promiscuous mode [ 64.098588][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.100883][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.103220][ T5943] bridge_slave_1: entered allmulticast mode [ 64.105973][ T5943] bridge_slave_1: entered promiscuous mode [ 64.118076][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.121145][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.125032][ T5953] bridge_slave_1: entered allmulticast mode [ 64.128944][ T5953] bridge_slave_1: entered promiscuous mode [ 64.147927][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.150897][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.154435][ T5952] bridge_slave_0: entered allmulticast mode [ 64.158147][ T5952] bridge_slave_0: entered promiscuous mode [ 64.193319][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.196616][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.199562][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.202568][ T5952] bridge_slave_1: entered allmulticast mode [ 64.206214][ T5952] bridge_slave_1: entered promiscuous mode [ 64.212094][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.227192][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.232864][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.304786][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.316628][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.321595][ T5953] team0: Port device team_slave_0 added [ 64.325819][ T5943] team0: Port device team_slave_0 added [ 64.342180][ T5953] team0: Port device team_slave_1 added [ 64.346333][ T5943] team0: Port device team_slave_1 added [ 64.377907][ T5952] team0: Port device team_slave_0 added [ 64.379956][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.383290][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.386411][ T5946] bridge_slave_0: entered allmulticast mode [ 64.390416][ T5946] bridge_slave_0: entered promiscuous mode [ 64.404625][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.406985][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.409373][ T5946] bridge_slave_1: entered allmulticast mode [ 64.412253][ T5946] bridge_slave_1: entered promiscuous mode [ 64.426230][ T5952] team0: Port device team_slave_1 added [ 64.435225][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.438225][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.449204][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.460285][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.463609][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.473817][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.479174][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.481946][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.489912][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.500604][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.503885][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.513592][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.536179][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.539640][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.542125][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.550646][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.555475][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.557786][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.566305][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.576957][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.626020][ T5946] team0: Port device team_slave_0 added [ 64.645428][ T5953] hsr_slave_0: entered promiscuous mode [ 64.648687][ T5953] hsr_slave_1: entered promiscuous mode [ 64.653407][ T5946] team0: Port device team_slave_1 added [ 64.658143][ T5952] hsr_slave_0: entered promiscuous mode [ 64.660694][ T5952] hsr_slave_1: entered promiscuous mode [ 64.663102][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 64.665066][ T5952] Cannot create hsr debugfs directory [ 64.669856][ T5943] hsr_slave_0: entered promiscuous mode [ 64.672257][ T5943] hsr_slave_1: entered promiscuous mode [ 64.674332][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 64.676299][ T5943] Cannot create hsr debugfs directory [ 64.717970][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.720296][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.729213][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.741035][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.744123][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.753042][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.899314][ T5946] hsr_slave_0: entered promiscuous mode [ 64.902683][ T5946] hsr_slave_1: entered promiscuous mode [ 64.905868][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 64.908325][ T5946] Cannot create hsr debugfs directory [ 65.146473][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.158774][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.163370][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.175178][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.209430][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.215323][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.220311][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.224376][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.296936][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.306069][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.311132][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.316584][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.391166][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.396657][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.402465][ T5950] Bluetooth: hci0: command tx timeout [ 65.402755][ T5954] Bluetooth: hci2: command tx timeout [ 65.404585][ T5958] Bluetooth: hci1: command tx timeout [ 65.411006][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.413488][ T5950] Bluetooth: hci3: command tx timeout [ 65.419665][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.454634][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.478636][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.487852][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.500690][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.503165][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.516074][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.519168][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.546318][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.570077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.573224][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.581796][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.602522][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.605616][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.618810][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.637543][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.639889][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.644722][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.646963][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.689423][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.698690][ T40] audit: type=1400 audit(1765069170.705:91): avc: denied { sys_module } for pid=5953 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.724899][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.738030][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.741118][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.755307][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.758412][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.846138][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.855745][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.899504][ T5952] veth0_vlan: entered promiscuous mode [ 65.904416][ T5953] veth0_vlan: entered promiscuous mode [ 65.910599][ T5952] veth1_vlan: entered promiscuous mode [ 65.920977][ T5953] veth1_vlan: entered promiscuous mode [ 65.929881][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.960057][ T5952] veth0_macvtap: entered promiscuous mode [ 65.970317][ T5952] veth1_macvtap: entered promiscuous mode [ 65.989954][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.003939][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.021217][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.026742][ T5953] veth0_macvtap: entered promiscuous mode [ 66.036494][ T5943] veth0_vlan: entered promiscuous mode [ 66.048496][ T5953] veth1_macvtap: entered promiscuous mode [ 66.051028][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.058555][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.067425][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.076158][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.087279][ T5943] veth1_vlan: entered promiscuous mode [ 66.104618][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.134580][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.135627][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.138062][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.155745][ T5946] veth0_vlan: entered promiscuous mode [ 66.174838][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.178604][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.191893][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195692][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.201199][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.204563][ T5946] veth1_vlan: entered promiscuous mode [ 66.208770][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.209956][ T5943] veth0_macvtap: entered promiscuous mode [ 66.218599][ T5943] veth1_macvtap: entered promiscuous mode [ 66.220178][ T40] audit: type=1400 audit(1765069171.225:92): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.230019][ T40] audit: type=1400 audit(1765069171.225:93): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.VUQwzC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.238125][ T40] audit: type=1400 audit(1765069171.235:94): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.245980][ T40] audit: type=1400 audit(1765069171.235:95): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.VUQwzC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.254328][ T40] audit: type=1400 audit(1765069171.235:96): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.VUQwzC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.263513][ T40] audit: type=1400 audit(1765069171.235:97): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.269618][ T40] audit: type=1400 audit(1765069171.235:98): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.273536][ T5946] veth0_macvtap: entered promiscuous mode [ 66.277266][ T40] audit: type=1400 audit(1765069171.245:99): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="gadgetfs" ino=7698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.284030][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.285770][ T5946] veth1_macvtap: entered promiscuous mode [ 66.302247][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.305628][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.308045][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.318398][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.331164][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.341347][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.345777][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.346641][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.348282][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.351057][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.358598][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.359349][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.368824][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.378057][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.381136][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.392255][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.395412][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.470795][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.479333][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.495954][ T6035] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 66.512920][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.518044][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.520566][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.521868][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.580342][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.582918][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 66.583992][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.799788][ T6062] overlayfs: conflicting options: nfs_export=on,index=off [ 66.929799][ T6064] Bluetooth: MGMT ver 1.23 [ 66.971500][ T6044] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.131599][ T6044] usb 8-1: Using ep0 maxpacket: 8 [ 67.135106][ T6044] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 67.137637][ T6044] usb 8-1: config 0 has no interface number 0 [ 67.139580][ T6044] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.142942][ T6044] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 67.146456][ T6044] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.149839][ T6044] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.154830][ T6044] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 67.157643][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.163102][ T6044] usb 8-1: config 0 descriptor?? [ 67.175073][ T6044] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 67.432005][ T6032] usb 8-1: USB disconnect, device number 2 [ 67.437917][ T6032] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 67.492980][ T5958] Bluetooth: hci1: command tx timeout [ 67.493049][ T5954] Bluetooth: hci0: command tx timeout [ 67.495416][ T64] Bluetooth: hci2: command tx timeout [ 67.497075][ T6076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.502974][ T5950] Bluetooth: hci3: command tx timeout [ 67.691044][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 67.871749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.875421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.878961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.882800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.886721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.890723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.894724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 67.898250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 67.902192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.905619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.232055][ T29] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 68.418343][ T29] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 68.421708][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.424327][ T29] usb 6-1: Product: syz [ 68.425772][ T29] usb 6-1: Manufacturer: syz [ 68.427285][ T29] usb 6-1: SerialNumber: syz [ 68.433886][ T29] usb 6-1: config 0 descriptor?? [ 68.438654][ T29] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 69.004774][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 69.004791][ T40] audit: type=1400 audit(1765069174.015:162): avc: denied { mounton } for pid=6132 comm="syz.3.34" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.007817][ T6135] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 69.384841][ T40] audit: type=1400 audit(1765069174.395:163): avc: denied { read } for pid=6138 comm="syz.0.36" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.393805][ T40] audit: type=1400 audit(1765069174.405:164): avc: denied { open } for pid=6138 comm="syz.0.36" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.405317][ T40] audit: type=1400 audit(1765069174.405:165): avc: denied { ioctl } for pid=6138 comm="syz.0.36" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.415860][ T40] audit: type=1400 audit(1765069174.405:166): avc: denied { set_context_mgr } for pid=6138 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.424376][ T40] audit: type=1400 audit(1765069174.405:167): avc: denied { write } for pid=6138 comm="syz.0.36" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.434067][ T40] audit: type=1400 audit(1765069174.405:168): avc: denied { map } for pid=6138 comm="syz.0.36" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.444150][ T40] audit: type=1400 audit(1765069174.415:169): avc: denied { call } for pid=6138 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.563325][ T64] Bluetooth: hci0: command tx timeout [ 69.571262][ T40] audit: type=1400 audit(1765069174.575:170): avc: denied { watch } for pid=6145 comm="syz.2.39" path="/14/control" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.580929][ T64] Bluetooth: hci2: command tx timeout [ 69.580952][ T64] Bluetooth: hci1: command tx timeout [ 69.580967][ T64] Bluetooth: hci3: command tx timeout [ 69.714846][ T40] audit: type=1400 audit(1765069174.725:171): avc: denied { shutdown } for pid=6141 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.730059][ T6150] sctp: Trying to GSO but underlying device doesn't support it. [ 70.354339][ T6160] kvm: kvm [6159]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x6 [ 70.504228][ T29] gspca_stk1135: reg_w 0x203 err -71 [ 70.512179][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.516791][ T29] gspca_stk1135: Sensor write failed [ 70.518903][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.522531][ T29] gspca_stk1135: Sensor write failed [ 70.524893][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.527380][ T29] gspca_stk1135: Sensor read failed [ 70.529565][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.533050][ T29] gspca_stk1135: Sensor read failed [ 70.535123][ T29] gspca_stk1135: Detected sensor type unknown (0x0) [ 70.537758][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.540276][ T29] gspca_stk1135: Sensor read failed [ 70.546082][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.548736][ T29] gspca_stk1135: Sensor read failed [ 70.550859][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.553548][ T29] gspca_stk1135: Sensor write failed [ 70.555637][ T29] gspca_stk1135: serial bus timeout: status=0x00 [ 70.558179][ T29] gspca_stk1135: Sensor write failed [ 70.560326][ T29] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 70.578378][ T29] usb 6-1: USB disconnect, device number 2 [ 70.670131][ T6169] Zero length message leads to an empty skb [ 70.844778][ T5958] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 70.935444][ T6184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.642364][ T64] Bluetooth: hci1: command tx timeout [ 71.642428][ T5950] Bluetooth: hci2: command tx timeout [ 71.642526][ T5954] Bluetooth: hci0: command tx timeout [ 71.644688][ T5958] Bluetooth: hci3: command tx timeout [ 72.182745][ T5950] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 72.220145][ T6219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.951883][ T6232] overlayfs: conflicting options: userxattr,metacopy=on [ 73.097316][ T6238] process 'syz.0.70' launched './file1' with NULL argv: empty string added [ 73.973818][ T5950] Bluetooth: hci2: Malformed LE Event: 0x1b [ 74.051588][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.358213][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.372924][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.391486][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 74.391497][ T40] audit: type=1400 audit(1765069179.395:207): avc: denied { listen } for pid=6256 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.400136][ T40] audit: type=1400 audit(1765069179.395:208): avc: denied { accept } for pid=6256 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.403337][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 74.410314][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.501647][ T10] usb 7-1: config 0 descriptor?? [ 74.778717][ T10] ath6kl: Failed to submit usb control message: -71 [ 74.850219][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 74.852574][ T10] ath6kl: Unable to send get target info: -71 [ 74.855781][ T10] ath6kl: Failed to init ath6kl core: -71 [ 74.859440][ T10] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 74.871041][ T10] usb 7-1: USB disconnect, device number 2 [ 75.100845][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 75.273551][ T40] audit: type=1400 audit(1765069180.285:209): avc: denied { write } for pid=6280 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.359360][ T6290] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 75.404050][ T6290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.424909][ T6290] bond1: (slave ip6erspan0): making interface the new active one [ 75.432863][ T6290] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 75.547638][ T6068] IPVS: starting estimator thread 0... [ 75.635386][ T6304] IPVS: using max 42 ests per chain, 100800 per kthread [ 75.683589][ T6305] ------------[ cut here ]------------ [ 75.685566][ T6305] WARNING: arch/x86/kvm/vmx/vmx.c:5393 at handle_exception_nmi+0x14a2/0x1720, CPU#3: syz.0.93/6305 [ 75.689253][ T6305] Modules linked in: [ 75.690833][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.0.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.694473][ T6305] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.696002][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.699789][ T6305] RIP: 0010:handle_exception_nmi+0x14a2/0x1720 [ 75.702238][ T6305] Code: 1e fe ff 31 ff 89 c5 89 c6 e8 4a 76 6a 00 85 ed 0f 85 ea fd ff ff e8 9d 7b 6a 00 90 0f 0b 90 e9 dc fd ff ff e8 8f 7b 6a 00 90 <0f> 0b 90 e9 fd f2 ff ff e8 81 7b 6a 00 31 f6 48 89 df e8 b7 e6 ec [ 75.709155][ T6305] RSP: 0018:ffffc900045df9c0 EFLAGS: 00010283 [ 75.711716][ T6305] RAX: 0000000000014575 RBX: ffff888055f50000 RCX: ffffc9000d551000 [ 75.714556][ T6305] RDX: 0000000000080000 RSI: ffffffff815468e1 RDI: 0000000000000001 [ 75.717464][ T6305] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 75.720459][ T6305] R10: 0000000000000000 R11: ffff888032b7aff0 R12: 000000000f6632eb [ 75.723502][ T6305] R13: 0000000000000007 R14: 0000000080000300 R15: ffff888055f500d8 [ 75.726352][ T6305] FS: 00007f0c0c8bd6c0(0000) GS:ffff8880d6c0d000(0000) knlGS:0000000000000000 [ 75.729495][ T6305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.731946][ T6305] CR2: 000000000f6632eb CR3: 0000000058066000 CR4: 0000000000352ef0 [ 75.734782][ T6305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 75.737556][ T6305] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 75.740378][ T6305] Call Trace: [ 75.741642][ T6305] [ 75.742703][ T6305] ? __pfx_handle_exception_nmi+0x10/0x10 [ 75.744799][ T6305] vmx_handle_exit+0x129b/0x1a00 [ 75.746549][ T6305] vcpu_run+0x3468/0x5a80 [ 75.748086][ T6305] ? __pfx_vcpu_run+0x10/0x10 [ 75.749790][ T6305] ? rcu_is_watching+0x12/0xc0 [ 75.751564][ T6305] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 75.753595][ T6305] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 75.755792][ T6305] kvm_vcpu_ioctl+0x76d/0x16d0 [ 75.757527][ T6305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.759379][ T6305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.761560][ T6305] ? do_vfs_ioctl+0x128/0x14f0 [ 75.763323][ T6305] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.765190][ T6305] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.767616][ T6305] ? hook_file_ioctl_common+0x144/0x410 [ 75.769597][ T6305] ? selinux_file_ioctl+0x180/0x270 [ 75.771532][ T6305] ? selinux_file_ioctl+0xb4/0x270 [ 75.773387][ T6305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.775479][ T6305] __x64_sys_ioctl+0x18e/0x210 [ 75.777445][ T6305] do_syscall_64+0xcd/0xf80 [ 75.779623][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.782407][ T6305] RIP: 0033:0x7f0c0b98f7c9 [ 75.784104][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.792507][ T6305] RSP: 002b:00007f0c0c8bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.795822][ T6305] RAX: ffffffffffffffda RBX: 00007f0c0bbe6090 RCX: 00007f0c0b98f7c9 [ 75.798934][ T6305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 75.802063][ T6305] RBP: 00007f0c0ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.806156][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.809649][ T6305] R13: 00007f0c0bbe6128 R14: 00007f0c0bbe6090 R15: 00007ffca4c30978 [ 75.813130][ T6305] [ 75.814260][ T6305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.817513][ T6305] CPU: 3 UID: 0 PID: 6305 Comm: syz.0.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.822424][ T6305] Tainted: [L]=SOFTLOCKUP [ 75.824500][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.828477][ T6305] Call Trace: [ 75.830065][ T6305] [ 75.831463][ T6305] dump_stack_lvl+0x3d/0x1f0 [ 75.833647][ T6305] vpanic+0x640/0x6f0 [ 75.835442][ T6305] ? handle_exception_nmi+0x14a2/0x1720 [ 75.837512][ T6305] panic+0xca/0xd0 [ 75.839284][ T6305] ? __pfx_panic+0x10/0x10 [ 75.841390][ T6305] check_panic_on_warn+0xab/0xb0 [ 75.843241][ T6305] __warn+0x108/0x3c0 [ 75.844702][ T6305] __report_bug+0x2a0/0x520 [ 75.846826][ T6305] ? handle_exception_nmi+0x14a2/0x1720 [ 75.848886][ T6305] ? __pfx___report_bug+0x10/0x10 [ 75.850635][ T6305] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 75.853076][ T6305] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 75.855878][ T6305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.858622][ T6305] ? handle_exception_nmi+0x14a2/0x1720 [ 75.861120][ T6305] report_bug+0xb2/0x220 [ 75.862887][ T6305] ? handle_exception_nmi+0x14a2/0x1720 [ 75.864947][ T6305] handle_bug+0x127/0x260 [ 75.866716][ T6305] exc_invalid_op+0x17/0x50 [ 75.868420][ T6305] asm_exc_invalid_op+0x1a/0x20 [ 75.870697][ T6305] RIP: 0010:handle_exception_nmi+0x14a2/0x1720 [ 75.873565][ T6305] Code: 1e fe ff 31 ff 89 c5 89 c6 e8 4a 76 6a 00 85 ed 0f 85 ea fd ff ff e8 9d 7b 6a 00 90 0f 0b 90 e9 dc fd ff ff e8 8f 7b 6a 00 90 <0f> 0b 90 e9 fd f2 ff ff e8 81 7b 6a 00 31 f6 48 89 df e8 b7 e6 ec [ 75.881989][ T6305] RSP: 0018:ffffc900045df9c0 EFLAGS: 00010283 [ 75.884262][ T6305] RAX: 0000000000014575 RBX: ffff888055f50000 RCX: ffffc9000d551000 [ 75.887751][ T6305] RDX: 0000000000080000 RSI: ffffffff815468e1 RDI: 0000000000000001 [ 75.890871][ T6305] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 75.894497][ T6305] R10: 0000000000000000 R11: ffff888032b7aff0 R12: 000000000f6632eb [ 75.898151][ T6305] R13: 0000000000000007 R14: 0000000080000300 R15: ffff888055f500d8 [ 75.901792][ T6305] ? handle_exception_nmi+0x14a1/0x1720 [ 75.904356][ T6305] ? __pfx_handle_exception_nmi+0x10/0x10 [ 75.907000][ T6305] vmx_handle_exit+0x129b/0x1a00 [ 75.909267][ T6305] vcpu_run+0x3468/0x5a80 [ 75.911299][ T6305] ? __pfx_vcpu_run+0x10/0x10 [ 75.913521][ T6305] ? rcu_is_watching+0x12/0xc0 [ 75.915782][ T6305] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 75.918439][ T6305] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 75.921026][ T6305] kvm_vcpu_ioctl+0x76d/0x16d0 [ 75.923259][ T6305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.925714][ T6305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.928493][ T6305] ? do_vfs_ioctl+0x128/0x14f0 [ 75.930293][ T6305] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.932083][ T6305] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.934832][ T6305] ? hook_file_ioctl_common+0x144/0x410 [ 75.937362][ T6305] ? selinux_file_ioctl+0x180/0x270 [ 75.939737][ T6305] ? selinux_file_ioctl+0xb4/0x270 [ 75.942032][ T6305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.944421][ T6305] __x64_sys_ioctl+0x18e/0x210 [ 75.946646][ T6305] do_syscall_64+0xcd/0xf80 [ 75.948790][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.951525][ T6305] RIP: 0033:0x7f0c0b98f7c9 [ 75.953624][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.962375][ T6305] RSP: 002b:00007f0c0c8bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.965659][ T6305] RAX: ffffffffffffffda RBX: 00007f0c0bbe6090 RCX: 00007f0c0b98f7c9 [ 75.968201][ T6305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 75.970862][ T6305] RBP: 00007f0c0ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.973609][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.976344][ T6305] R13: 00007f0c0bbe6128 R14: 00007f0c0bbe6090 R15: 00007ffca4c30978 [ 75.979093][ T6305] [ 75.980895][ T6305] Kernel Offset: disabled [ 75.982433][ T6305] Rebooting in 86400 seconds..