last executing test programs: 6.741800462s ago: executing program 4 (id=260): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000140)=0x27300000, 0x4) 6.241595446s ago: executing program 1 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 5.849878652s ago: executing program 4 (id=263): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) 5.0932732s ago: executing program 4 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46100) fallocate(r0, 0x8, 0x0, 0x1000) 4.989662699s ago: executing program 0 (id=268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="8f68688e6b000f41b900000100477d0f3232470f28c7765d2e650fe563277e410f67c9f5f5798c946b7b00000fc71fb8eda7d2e8ab", 0x35}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.989330947s ago: executing program 1 (id=269): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2, 0x0, 0x1000000}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.933784543s ago: executing program 3 (id=270): syz_io_uring_submit(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) close(r3) 4.799632849s ago: executing program 4 (id=271): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x19d1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB='<4\x00\x00\x00\x00\x00', @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 4.208741807s ago: executing program 2 (id=272): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x762d, &(0x7f00000002c0)={0x0, 0x85f5, 0x2, 0x1, 0x136}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.188105431s ago: executing program 4 (id=273): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x2, 0x8, "19224f", 0x4}) 4.185663277s ago: executing program 0 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='xprtrdma_marshal\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) 3.952661689s ago: executing program 1 (id=275): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0xc22f1000) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x24040050) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0xfffffffffffffffc, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.909805814s ago: executing program 3 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f3125bd7000fbdbdf254400000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x300089d4}, 0x0) 3.456224966s ago: executing program 3 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.376429896s ago: executing program 1 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 3.16969908s ago: executing program 0 (id=279): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x9, 0x8, 0x5, 0x3}, 0x10) 3.169275293s ago: executing program 2 (id=280): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) getgid() 3.082693645s ago: executing program 2 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x14, r1, 0x5, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.072181331s ago: executing program 4 (id=282): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x6625000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r4, r0, 0x0, 0x20000023893) 3.050863775s ago: executing program 3 (id=283): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.039557097s ago: executing program 1 (id=284): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff6]}, 0x8, 0x1000) readv(r2, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='rpcb_getport\x00', r2, 0x0, 0x4}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x9) r5 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rseq_ip_fixup\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)=""/118, 0x76) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000002b3ac5155f58e5d9a9049c10cacc1b76e1a5cccbb7dc496963cb63488851a91be0c0f850ba3ba523d46602a24ca4ee9c6bf5739d382e3534a649d59b99dfd6cf244c4d731b08364ab4b9d10f5cdc3d76060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x7f}, 0x2, r12}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) 2.913670324s ago: executing program 2 (id=285): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2, 0x0, 0x1000000}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.912927741s ago: executing program 0 (id=286): syz_io_uring_submit(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) close(r3) 1.48269526s ago: executing program 1 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8f) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8821, 0x0) 1.39308916s ago: executing program 2 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsuid(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200f381e0b000010000008500000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x40, 0x3, 0x17, 0xff81}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) 1.362870094s ago: executing program 3 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmmsg$inet(r2, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)="ea6ee1e277531c35c5228186accc256241c43de0", 0x14}], 0x2, &(0x7f0000000700)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0xaf, 0x0, 0xb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x38}}], 0x1, 0x4800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="f20f35b90fa605a6050c66b8fe6e4c8566efbafc0cb8d553ef2664670f01c4640f8de12d0f01c30f00d3bad0046766c7442400af0000006766c7442402620000006766c744240600000000670f011c24ee0f087005b27f", 0x57}], 0x1, 0x4, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="3e0f1cb40e000f217266b9800000c00f326635008000000f30f08195574a8700ba60bc000020ee660f10c567660f38828209000000baf80c66b8c972478466efbafc0cec660fc77459660f383b510a", 0x4f}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.362056749s ago: executing program 0 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 141.71249ms ago: executing program 2 (id=291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x83, &(0x7f00000000c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4c19051605ad364e6c824754d9f5d3969890522c77157d880100d026cd206ddc174a791b08ead36aa4eef28d5814ab2875fe381263faa8a11d6d6c8a7711428bb2fdd37193290e84b7a86cf6fbd63081a885d0468c2d43") 19.419799ms ago: executing program 3 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_LABELS_MASK={0x8, 0x17, [0x6]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x804}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x38f1}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x4, 0x1ff, 0x2a825a98, 0x400, 0x5, 0x1]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r7, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x10d}, {&(0x7f00000004c0)="d3e955810cc890ed04c8917c975b7617062049e4d95030c4e4293924fedf7de74876c6d350c0a534858dce18fc2264ada02a300f146da94b489da57913fed449b5e3b1d723edd45d94ccd7c2192590ae9c2731af6f782779a54184faf25dbff145eb6d7924b19fa4450be6ad522a44c920ef6908484c31fa1fee8f43bb05e17e1312ebb68fb6bb832d0ec84e85d55c0c1b6272d65de01ef8", 0x98}], 0x2}}], 0x1, 0x0) sendto$inet(r7, &(0x7f0000000700)="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", 0x131, 0x40040, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 0s ago: executing program 0 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r3, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)="f6fffdffffffff", 0x7}, {&(0x7f0000000000)="4821cd02", 0x4}], 0x2) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 54.087607][ T30] audit: type=1400 audit(1753751932.497:62): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.091014][ T5814] cgroup: Unknown subsys name 'net' [ 54.110353][ T30] audit: type=1400 audit(1753751932.497:63): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.138064][ T30] audit: type=1400 audit(1753751932.527:64): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.322797][ T5814] cgroup: Unknown subsys name 'cpuset' [ 54.330427][ T5814] cgroup: Unknown subsys name 'rlimit' [ 54.495734][ T30] audit: type=1400 audit(1753751932.907:65): avc: denied { setattr } for pid=5814 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.527237][ T30] audit: type=1400 audit(1753751932.907:66): avc: denied { create } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.548017][ T30] audit: type=1400 audit(1753751932.907:67): avc: denied { write } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.568609][ T30] audit: type=1400 audit(1753751932.907:68): avc: denied { read } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.589045][ T30] audit: type=1400 audit(1753751932.917:69): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 54.597551][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.622585][ T30] audit: type=1400 audit(1753751932.917:70): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.645899][ T30] audit: type=1400 audit(1753751932.947:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.504108][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.212753][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 59.212767][ T30] audit: type=1400 audit(1753751937.627:78): avc: denied { create } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.251593][ T30] audit: type=1400 audit(1753751937.657:79): avc: denied { read write } for pid=5826 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.275258][ T30] audit: type=1400 audit(1753751937.657:80): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.299778][ T30] audit: type=1400 audit(1753751937.657:81): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="socket:[4360]" dev="sockfs" ino=4360 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.367276][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.372793][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.381856][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.382224][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.396865][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.400221][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.404677][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.418572][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.421273][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.433565][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.441128][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.443718][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.448457][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.464953][ T30] audit: type=1400 audit(1753751937.847:82): avc: denied { read } for pid=5826 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.464967][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.465393][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.510313][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.517882][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.525056][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.532772][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.540910][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.548577][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.555616][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.555724][ T30] audit: type=1400 audit(1753751937.847:83): avc: denied { open } for pid=5826 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.591879][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.602865][ T30] audit: type=1400 audit(1753751937.847:84): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 59.625523][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.636793][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.844023][ T30] audit: type=1400 audit(1753751938.257:85): avc: denied { module_request } for pid=5826 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.959943][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 59.993999][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 60.029431][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 60.159464][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 60.192046][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 60.247841][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.256034][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.263621][ T5826] bridge_slave_0: entered allmulticast mode [ 60.270545][ T5826] bridge_slave_0: entered promiscuous mode [ 60.284538][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.291686][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.298757][ T5825] bridge_slave_0: entered allmulticast mode [ 60.305759][ T5825] bridge_slave_0: entered promiscuous mode [ 60.317484][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.324798][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.332068][ T5825] bridge_slave_1: entered allmulticast mode [ 60.338617][ T5825] bridge_slave_1: entered promiscuous mode [ 60.345366][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.352594][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.359657][ T5832] bridge_slave_0: entered allmulticast mode [ 60.366510][ T5832] bridge_slave_0: entered promiscuous mode [ 60.373927][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.381196][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.388279][ T5826] bridge_slave_1: entered allmulticast mode [ 60.394981][ T5826] bridge_slave_1: entered promiscuous mode [ 60.419603][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.426690][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.433931][ T5832] bridge_slave_1: entered allmulticast mode [ 60.440825][ T5832] bridge_slave_1: entered promiscuous mode [ 60.503575][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.514690][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.526008][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.550705][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.570733][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.582707][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.606594][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.613873][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.621182][ T5839] bridge_slave_0: entered allmulticast mode [ 60.627771][ T5839] bridge_slave_0: entered promiscuous mode [ 60.659135][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.666546][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.673843][ T5837] bridge_slave_0: entered allmulticast mode [ 60.680706][ T5837] bridge_slave_0: entered promiscuous mode [ 60.695711][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.703127][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.710490][ T5839] bridge_slave_1: entered allmulticast mode [ 60.717167][ T5839] bridge_slave_1: entered promiscuous mode [ 60.725669][ T5832] team0: Port device team_slave_0 added [ 60.733976][ T5832] team0: Port device team_slave_1 added [ 60.745779][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.752906][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.759960][ T5837] bridge_slave_1: entered allmulticast mode [ 60.767312][ T5837] bridge_slave_1: entered promiscuous mode [ 60.775595][ T5825] team0: Port device team_slave_0 added [ 60.783768][ T5825] team0: Port device team_slave_1 added [ 60.805635][ T5826] team0: Port device team_slave_0 added [ 60.842036][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.848993][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.874995][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.888805][ T5826] team0: Port device team_slave_1 added [ 60.911781][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.926708][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.933800][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.959798][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.984937][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.997102][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.006552][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.013620][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.039687][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.052230][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.082909][ T5839] team0: Port device team_slave_0 added [ 61.110991][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.117943][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.147987][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.160622][ T5839] team0: Port device team_slave_1 added [ 61.173513][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.180565][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.206546][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.219698][ T5837] team0: Port device team_slave_0 added [ 61.227779][ T5837] team0: Port device team_slave_1 added [ 61.252983][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.259922][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.286037][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.322444][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.329414][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.356170][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.372573][ T5832] hsr_slave_0: entered promiscuous mode [ 61.378590][ T5832] hsr_slave_1: entered promiscuous mode [ 61.389128][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.396230][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.422122][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.433803][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.440831][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.466753][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.477979][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.485064][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.511188][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.522040][ T5829] Bluetooth: hci0: command tx timeout [ 61.522044][ T5833] Bluetooth: hci1: command tx timeout [ 61.527585][ T5829] Bluetooth: hci2: command tx timeout [ 61.606541][ T5825] hsr_slave_0: entered promiscuous mode [ 61.610746][ T5829] Bluetooth: hci3: command tx timeout [ 61.613753][ T5825] hsr_slave_1: entered promiscuous mode [ 61.624157][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.632016][ T5825] Cannot create hsr debugfs directory [ 61.655111][ T5839] hsr_slave_0: entered promiscuous mode [ 61.661481][ T5839] hsr_slave_1: entered promiscuous mode [ 61.667434][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.675035][ T5839] Cannot create hsr debugfs directory [ 61.680467][ T5829] Bluetooth: hci4: command tx timeout [ 61.697203][ T5826] hsr_slave_0: entered promiscuous mode [ 61.703269][ T5826] hsr_slave_1: entered promiscuous mode [ 61.709088][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.716776][ T5826] Cannot create hsr debugfs directory [ 61.771292][ T5837] hsr_slave_0: entered promiscuous mode [ 61.777322][ T5837] hsr_slave_1: entered promiscuous mode [ 61.783848][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.791418][ T5837] Cannot create hsr debugfs directory [ 62.099386][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.109531][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.120712][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.130995][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.185667][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.196295][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.216122][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.234207][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.289685][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.306008][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.324705][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.334134][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.353720][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.397625][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.405311][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.414533][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.426449][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.436387][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.474065][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.481339][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.507613][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.514715][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.568558][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.588419][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.601109][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.610080][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.657252][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.677034][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.702819][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.709900][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.719135][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.726260][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.748718][ T30] audit: type=1400 audit(1753751941.157:86): avc: denied { sys_module } for pid=5832 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.783927][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.862173][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.894383][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.914242][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.935454][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.942591][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.958445][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.965819][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.004844][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.016963][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.034361][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.047122][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.054248][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.072173][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.079245][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.123158][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.152808][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.159895][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.179828][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.186930][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.217384][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.287495][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.305699][ T5832] veth0_vlan: entered promiscuous mode [ 63.346945][ T5832] veth1_vlan: entered promiscuous mode [ 63.497725][ T5832] veth0_macvtap: entered promiscuous mode [ 63.555546][ T5832] veth1_macvtap: entered promiscuous mode [ 63.606128][ T5829] Bluetooth: hci1: command tx timeout [ 63.606147][ T5153] Bluetooth: hci2: command tx timeout [ 63.618078][ T5833] Bluetooth: hci0: command tx timeout [ 63.638358][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.648318][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.658830][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.680532][ T5833] Bluetooth: hci3: command tx timeout [ 63.702134][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.717208][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.726738][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.737330][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.746052][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.764834][ T5833] Bluetooth: hci4: command tx timeout [ 63.826642][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.898521][ T5839] veth0_vlan: entered promiscuous mode [ 63.911858][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.919772][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.932207][ T5825] veth0_vlan: entered promiscuous mode [ 63.948887][ T5826] veth0_vlan: entered promiscuous mode [ 63.959688][ T5825] veth1_vlan: entered promiscuous mode [ 63.979339][ T5837] veth0_vlan: entered promiscuous mode [ 63.990061][ T5826] veth1_vlan: entered promiscuous mode [ 63.999973][ T5839] veth1_vlan: entered promiscuous mode [ 64.021561][ T5837] veth1_vlan: entered promiscuous mode [ 64.034798][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.045292][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.065096][ T5839] veth0_macvtap: entered promiscuous mode [ 64.075794][ T30] audit: type=1400 audit(1753751942.487:87): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/root/syzkaller.bsajDn/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.098270][ T5826] veth0_macvtap: entered promiscuous mode [ 64.116163][ T5839] veth1_macvtap: entered promiscuous mode [ 64.132586][ T5826] veth1_macvtap: entered promiscuous mode [ 64.143719][ T5825] veth0_macvtap: entered promiscuous mode [ 64.153096][ T5825] veth1_macvtap: entered promiscuous mode [ 64.178499][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.187908][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.215694][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.234298][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 64.234311][ T30] audit: type=1400 audit(1753751942.647:99): avc: denied { read write } for pid=5832 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.237088][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.247273][ T30] audit: type=1400 audit(1753751942.657:100): avc: denied { open } for pid=5832 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.268407][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.306850][ T30] audit: type=1400 audit(1753751942.687:101): avc: denied { ioctl } for pid=5832 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.345904][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.364245][ T5837] veth0_macvtap: entered promiscuous mode [ 64.382291][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.399381][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.409544][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.419304][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.431205][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.444481][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.453616][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.462718][ T5941] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 64.463252][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.470022][ T30] audit: type=1400 audit(1753751942.877:102): avc: denied { create } for pid=5939 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.479320][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.509748][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.519233][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.528606][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.528998][ T30] audit: type=1400 audit(1753751942.877:103): avc: denied { ioctl } for pid=5939 comm="syz.1.6" path="socket:[6540]" dev="sockfs" ino=6540 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.560141][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.589382][ T5837] veth1_macvtap: entered promiscuous mode [ 64.638343][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.655528][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.684771][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.700158][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.708851][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719190][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.809513][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.833841][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.855673][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.877801][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.895368][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.912534][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.926367][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.936190][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.023172][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.033811][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.072151][ T5946] process 'syz.1.7' launched './file1' with NULL argv: empty string added [ 65.072372][ T30] audit: type=1400 audit(1753751943.487:104): avc: denied { execute } for pid=5945 comm="syz.1.7" name="file1" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.107454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.109147][ T30] audit: type=1400 audit(1753751943.517:105): avc: denied { execute_no_trans } for pid=5945 comm="syz.1.7" path="/2/file1" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.133298][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.195830][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.205206][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.263691][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.304291][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.404486][ T5833] Bluetooth: hci0: command tx timeout [ 66.409918][ T5833] Bluetooth: hci1: command tx timeout [ 66.415593][ T5833] Bluetooth: hci2: command tx timeout [ 66.421136][ T5833] Bluetooth: hci3: command tx timeout [ 66.426528][ T5833] Bluetooth: hci4: command tx timeout [ 66.440267][ T30] audit: type=1400 audit(1753751944.257:106): avc: denied { bpf } for pid=5955 comm="syz.0.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.803725][ T5868] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.850763][ T30] audit: type=1400 audit(1753751944.257:107): avc: denied { prog_load } for pid=5954 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.903932][ T30] audit: type=1400 audit(1753751944.257:108): avc: denied { perfmon } for pid=5954 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.990562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.022004][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 67.040176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.050175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.062225][ T5868] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 67.098033][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.192511][ T5868] usb 4-1: Product: syz [ 67.223849][ T5868] usb 4-1: Manufacturer: syz [ 67.304222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.345352][ T5868] usb 4-1: SerialNumber: syz [ 67.377017][ T5868] usb 4-1: config 0 descriptor?? [ 67.423661][ T5868] gspca_main: sq905-2.14.0 probing 2770:9120 [ 67.492358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.550394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.580479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.589656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.670146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.681113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.186296][ T5868] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 68.254371][ T5993] Device name cannot be null; rc = [-22] [ 68.480255][ T5833] Bluetooth: hci3: command tx timeout [ 68.486136][ T5829] Bluetooth: hci2: command tx timeout [ 68.491572][ T5829] Bluetooth: hci4: command tx timeout [ 68.497273][ T5829] Bluetooth: hci1: command tx timeout [ 68.502880][ T5833] Bluetooth: hci0: command tx timeout [ 68.941447][ T5868] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 69.095040][ T5868] usb 4-1: USB disconnect, device number 2 [ 69.284418][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 69.284433][ T30] audit: type=1400 audit(1753751947.697:134): avc: denied { read write } for pid=5998 comm="syz.3.17" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.294483][ T6007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 69.405659][ T30] audit: type=1400 audit(1753751947.697:135): avc: denied { open } for pid=5998 comm="syz.3.17" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.438815][ T30] audit: type=1400 audit(1753751947.697:136): avc: denied { connect } for pid=6005 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.482643][ T30] audit: type=1400 audit(1753751947.887:137): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.507109][ T30] audit: type=1400 audit(1753751947.887:138): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.533837][ T30] audit: type=1400 audit(1753751947.887:139): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.564256][ T30] audit: type=1400 audit(1753751947.977:140): avc: denied { create } for pid=6005 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.590244][ T5868] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.657299][ T30] audit: type=1400 audit(1753751948.067:141): avc: denied { create } for pid=6009 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 69.677205][ T30] audit: type=1400 audit(1753751948.067:142): avc: denied { ioctl } for pid=6009 comm="syz.0.21" path="socket:[7710]" dev="sockfs" ino=7710 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 69.703610][ T30] audit: type=1400 audit(1753751948.067:143): avc: denied { create } for pid=6009 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.782073][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 69.803706][ T5868] usb 4-1: config 2 has an invalid interface number: 157 but max is 0 [ 69.919293][ T5868] usb 4-1: config 2 has no interface number 0 [ 69.945152][ T5868] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 70.390177][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.414298][ T5868] usb 4-1: Product: syz [ 70.430660][ T5868] usb 4-1: Manufacturer: syz [ 70.444484][ T5868] usb 4-1: SerialNumber: syz [ 70.524737][ T5868] imon 4-1:2.157: unable to register, err -19 [ 70.853766][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.884493][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.891222][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.902253][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.028798][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 71.043497][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 71.052493][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 71.254346][ T5912] usb 4-1: USB disconnect, device number 3 [ 71.365092][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.390526][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.580195][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 73.591501][ T5868] usb 2-1: config 0 has no interfaces? [ 73.599311][ T5868] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 73.613272][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.656788][ T5868] usb 2-1: Product: syz [ 73.661267][ T5868] usb 2-1: Manufacturer: syz [ 73.667047][ T5868] usb 2-1: SerialNumber: syz [ 73.678602][ T5868] usb 2-1: config 0 descriptor?? [ 73.901172][ T5912] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 73.911478][ T6073] Zero length message leads to an empty skb [ 73.918847][ T5868] usb 2-1: USB disconnect, device number 2 [ 74.121583][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.142436][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.181174][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.213793][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.329136][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 74.329220][ T30] audit: type=1400 audit(1753751952.737:175): avc: denied { read } for pid=6103 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.361156][ T6112] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 74.522760][ T5912] usb 3-1: GET_CAPABILITIES returned 0 [ 74.536419][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 74.686122][ T6119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.993439][ T30] audit: type=1400 audit(1753751952.807:176): avc: denied { create } for pid=6113 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 75.035545][ T30] audit: type=1400 audit(1753751953.047:177): avc: denied { ioctl } for pid=6113 comm="syz.4.57" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.077535][ T5912] usb 3-1: USB disconnect, device number 2 [ 75.101210][ T30] audit: type=1400 audit(1753751953.487:178): avc: denied { shutdown } for pid=6090 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.126834][ T30] audit: type=1400 audit(1753751953.487:179): avc: denied { setopt } for pid=6090 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.183978][ T30] audit: type=1400 audit(1753751953.597:180): avc: denied { shutdown } for pid=6103 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.807402][ T30] audit: type=1400 audit(1753751954.177:181): avc: denied { read } for pid=6128 comm="syz.4.62" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.892071][ T30] audit: type=1400 audit(1753751954.177:182): avc: denied { open } for pid=6128 comm="syz.4.62" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 76.028238][ T916] cfg80211: failed to load regulatory.db [ 76.187201][ T30] audit: type=1400 audit(1753751954.597:183): avc: denied { map } for pid=6144 comm="syz.4.67" path="socket:[8504]" dev="sockfs" ino=8504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 76.723614][ T30] audit: type=1400 audit(1753751955.127:184): avc: denied { ioctl } for pid=6156 comm="syz.0.72" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8595 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.130422][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 77.557477][ T6186] netlink: 56 bytes leftover after parsing attributes in process `syz.1.79'. [ 79.030281][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.203169][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 79.223994][ T5875] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 79.252126][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.271148][ T5875] usb 5-1: Product: syz [ 79.279766][ T5875] usb 5-1: Manufacturer: syz [ 79.361707][ T5875] usb 5-1: SerialNumber: syz [ 79.801603][ T5875] usb 5-1: config 0 descriptor?? [ 79.809314][ T5875] gspca_main: sq905-2.14.0 probing 2770:9120 [ 80.320601][ T5875] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 80.357601][ T5875] sq905 5-1:0.0: probe with driver sq905 failed with error -110 [ 81.188799][ T5875] usb 5-1: USB disconnect, device number 2 [ 81.325279][ T6230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 81.376737][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 81.390247][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 82.273111][ T6248] block device autoloading is deprecated and will be removed. [ 82.281835][ T6248] syz.3.100: attempt to access beyond end of device [ 82.281835][ T6248] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.649714][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 82.649727][ T30] audit: type=1400 audit(1753751961.057:186): avc: denied { mount } for pid=6244 comm="syz.1.101" name="/" dev="hugetlbfs" ino=8763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 83.752791][ T30] audit: type=1400 audit(1753751962.157:187): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 84.053861][ T30] audit: type=1400 audit(1753751962.447:188): avc: denied { getopt } for pid=6284 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.255060][ T6297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.255274][ T30] audit: type=1400 audit(1753751962.667:189): avc: denied { write } for pid=6298 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.287558][ T30] audit: type=1400 audit(1753751962.687:190): avc: denied { bind } for pid=6294 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.315500][ T30] audit: type=1400 audit(1753751962.687:191): avc: denied { name_bind } for pid=6294 comm="syz.1.119" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.342211][ T30] audit: type=1400 audit(1753751962.687:192): avc: denied { node_bind } for pid=6294 comm="syz.1.119" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.561923][ T5875] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.824915][ T30] audit: type=1400 audit(1753751963.237:193): avc: denied { create } for pid=6313 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.985802][ T30] audit: type=1400 audit(1753751963.317:194): avc: denied { write } for pid=6313 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.072032][ T5875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.086818][ T5875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.100437][ T5875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.109539][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.436795][ T30] audit: type=1400 audit(1753751963.817:195): avc: denied { read } for pid=6327 comm="syz.2.129" path="socket:[9155]" dev="sockfs" ino=9155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.462257][ T5875] usb 5-1: GET_CAPABILITIES returned 0 [ 85.471944][ T5875] usbtmc 5-1:16.0: can't read capabilities [ 86.067939][ T916] usb 5-1: USB disconnect, device number 3 [ 86.540324][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.552669][ T6352] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.723589][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.740240][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.766205][ T5900] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.777679][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.800266][ T5900] usb 3-1: SerialNumber: syz [ 87.015985][ T5900] usb 3-1: 0:2 : does not exist [ 87.052025][ T5900] usb 3-1: USB disconnect, device number 3 [ 87.345785][ T6371] veth0_vlan: entered allmulticast mode [ 87.978120][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.211298][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 89.211311][ T30] audit: type=1400 audit(1753751967.627:203): avc: denied { read } for pid=6384 comm="syz.1.147" path="socket:[10382]" dev="sockfs" ino=10382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.096266][ T30] audit: type=1400 audit(1753751968.177:204): avc: denied { unlink } for pid=6392 comm="syz.3.149" name="#1" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.144895][ T30] audit: type=1400 audit(1753751968.187:205): avc: denied { mount } for pid=6392 comm="syz.3.149" name="/" dev="overlay" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.960503][ T30] audit: type=1400 audit(1753751969.157:206): avc: denied { setopt } for pid=6402 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.669300][ T30] audit: type=1400 audit(1753751970.077:207): avc: denied { ioctl } for pid=6409 comm="syz.3.154" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.544418][ T30] audit: type=1400 audit(1753751970.957:208): avc: denied { create } for pid=6420 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.230226][ T30] audit: type=1400 audit(1753751972.607:209): avc: denied { create } for pid=6425 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.280375][ T30] audit: type=1400 audit(1753751972.607:210): avc: denied { bind } for pid=6425 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.300481][ T30] audit: type=1400 audit(1753751972.607:211): avc: denied { setopt } for pid=6425 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.320042][ T30] audit: type=1400 audit(1753751972.607:212): avc: denied { write } for pid=6425 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.462183][ T6452] bridge0: entered promiscuous mode [ 95.517899][ T6452] bridge0: port 3(macsec1) entered blocking state [ 95.660983][ T6452] bridge0: port 3(macsec1) entered disabled state [ 95.704246][ T6452] macsec1: entered allmulticast mode [ 95.984527][ T30] audit: type=1400 audit(1753751974.187:213): avc: denied { connect } for pid=6454 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.146210][ T6452] bridge0: entered allmulticast mode [ 96.165494][ T6452] macsec1: left allmulticast mode [ 96.198979][ T6452] bridge0: left allmulticast mode [ 96.263886][ T6452] bridge0: left promiscuous mode [ 96.290521][ T30] audit: type=1400 audit(1753751974.647:214): avc: denied { setopt } for pid=6461 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.410511][ T6464] xt_hashlimit: size too large, truncated to 1048576 [ 97.121479][ T30] audit: type=1400 audit(1753751975.537:215): avc: denied { create } for pid=6475 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.335386][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 97.393319][ T30] audit: type=1400 audit(1753751975.807:216): avc: denied { append } for pid=6478 comm="syz.0.175" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.005803][ T30] audit: type=1400 audit(1753751977.377:217): avc: denied { block_suspend } for pid=6493 comm="syz.0.180" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.108652][ T6522] input: syz1 as /devices/virtual/input/input8 [ 102.133484][ T30] audit: type=1400 audit(1753751980.357:218): avc: denied { read } for pid=6518 comm="syz.0.186" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.412138][ T30] audit: type=1400 audit(1753751980.357:219): avc: denied { open } for pid=6518 comm="syz.0.186" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.470208][ T30] audit: type=1400 audit(1753751980.497:220): avc: denied { read write } for pid=6516 comm="syz.2.185" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.545851][ T30] audit: type=1400 audit(1753751980.497:221): avc: denied { open } for pid=6516 comm="syz.2.185" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.678742][ T30] audit: type=1400 audit(1753751980.507:222): avc: denied { ioctl } for pid=6516 comm="syz.2.185" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.881256][ T6530] netlink: 'syz.1.190': attribute type 12 has an invalid length. [ 102.981201][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 103.021827][ T30] audit: type=1400 audit(1753751981.427:223): avc: denied { sys_module } for pid=6535 comm="syz.3.193" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.259223][ T6549] tipc: Started in network mode [ 103.271170][ T6549] tipc: Node identity 5ae5eab2eb83, cluster identity 4711 [ 103.294466][ T6549] tipc: Enabled bearer , priority 0 [ 103.353214][ T6549] tipc: Resetting bearer [ 103.428284][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 103.746177][ T30] audit: type=1400 audit(1753751982.147:224): avc: denied { read } for pid=6526 comm="syz.4.188" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.779373][ T30] audit: type=1400 audit(1753751982.187:225): avc: denied { open } for pid=6526 comm="syz.4.188" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.856271][ T6548] tipc: Disabling bearer [ 104.048028][ T30] audit: type=1400 audit(1753751982.457:226): avc: denied { compute_member } for pid=6563 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.405899][ T6575] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.832644][ T30] audit: type=1400 audit(1753751983.177:227): avc: denied { override_creds } for pid=6564 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.268916][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 106.091357][ T6598] tipc: Started in network mode [ 106.106423][ T6598] tipc: Node identity 321c448ed81a, cluster identity 4711 [ 106.132636][ T6598] tipc: Enabled bearer , priority 0 [ 106.171254][ T6598] tipc: Resetting bearer [ 106.257263][ T6597] tipc: Disabling bearer [ 107.174332][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 107.174349][ T30] audit: type=1400 audit(1753751985.587:231): avc: denied { bind } for pid=6617 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.695126][ T30] audit: type=1400 audit(1753751985.617:232): avc: denied { name_bind } for pid=6617 comm="syz.2.220" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.732797][ T30] audit: type=1400 audit(1753751985.617:233): avc: denied { node_bind } for pid=6617 comm="syz.2.220" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 107.787916][ T30] audit: type=1400 audit(1753751985.617:234): avc: denied { write } for pid=6617 comm="syz.2.220" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.496417][ T6640] veth0_vlan: entered allmulticast mode [ 109.014777][ T6644] syzkaller0: entered promiscuous mode [ 109.021354][ T6644] syzkaller0: entered allmulticast mode [ 109.630331][ T916] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 109.850178][ T6658] netlink: 56 bytes leftover after parsing attributes in process `syz.4.233'. [ 109.970406][ T30] audit: type=1400 audit(1753751988.057:235): avc: denied { execute } for pid=6651 comm="syz.4.233" name="file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.346175][ T30] audit: type=1400 audit(1753751988.247:236): avc: denied { remount } for pid=6651 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.401593][ T6665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.430333][ T916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.445419][ T30] audit: type=1400 audit(1753751988.257:237): avc: denied { execute_no_trans } for pid=6651 comm="syz.4.233" path="/47/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.474764][ T916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.500614][ T916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.575401][ T916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.940900][ T916] usb 1-1: GET_CAPABILITIES returned 0 [ 110.966788][ T916] usbtmc 1-1:16.0: can't read capabilities [ 111.015019][ T6672] Process accounting resumed [ 111.147861][ T6681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.242'. [ 111.157576][ T30] audit: type=1400 audit(1753751989.557:238): avc: denied { nlmsg_read } for pid=6680 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.208494][ T9] usb 1-1: USB disconnect, device number 2 [ 111.396210][ T6686] syzkaller0: entered promiscuous mode [ 111.402455][ T6686] syzkaller0: entered allmulticast mode [ 113.062423][ T6718] netlink: 48 bytes leftover after parsing attributes in process `syz.3.254'. [ 113.145177][ T30] audit: type=1400 audit(1753751991.557:239): avc: denied { mount } for pid=6721 comm="syz.0.256" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.061685][ T6744] input: syz0 as /devices/virtual/input/input9 [ 116.770268][ T30] audit: type=1400 audit(1753751995.177:240): avc: denied { map } for pid=6776 comm="syz.1.275" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.803840][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 116.876389][ T6782] syzkaller0: entered promiscuous mode [ 116.882213][ T6782] syzkaller0: entered allmulticast mode [ 117.055031][ T6769] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 117.114764][ T6784] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 117.127044][ T30] audit: type=1400 audit(1753751995.527:241): avc: denied { mount } for pid=6783 comm="syz.1.278" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.308999][ T30] audit: type=1400 audit(1753751995.717:242): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.624316][ T6806] usb usb7: usbfs: process 6806 (syz.1.284) did not claim interface 0 before use [ 118.373883][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 119.765660][ T6822] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.410179][ T1207] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.496873][ T30] audit: type=1400 audit(1753751998.887:243): avc: denied { mount } for pid=6832 comm="syz.1.287" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.614590][ T6836] [ 120.617060][ T6836] ============================= [ 120.621935][ T6836] WARNING: suspicious RCU usage [ 120.626788][ T6836] 6.16.0-syzkaller #0 Not tainted [ 120.631818][ T6836] ----------------------------- [ 120.636656][ T6836] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 120.645165][ T6836] [ 120.645165][ T6836] other info that might help us debug this: [ 120.645165][ T6836] [ 120.656429][ T6836] [ 120.656429][ T6836] rcu_scheduler_active = 2, debug_locks = 1 [ 120.665671][ T6836] 1 lock held by syz.3.292/6836: [ 120.670866][ T6836] #0: ffffffff8e5c4480 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 120.681818][ T6836] [ 120.681818][ T6836] stack backtrace: [ 120.687710][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.3.292 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 120.687732][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.687742][ T6836] Call Trace: [ 120.687750][ T6836] [ 120.687758][ T6836] dump_stack_lvl+0x16c/0x1f0 [ 120.687791][ T6836] lockdep_rcu_suspicious+0x166/0x260 [ 120.687829][ T6836] get_callchain_entry+0x278/0x3f0 [ 120.687859][ T6836] get_perf_callchain+0xdb/0x760 [ 120.687888][ T6836] ? __pfx_get_perf_callchain+0x10/0x10 [ 120.687929][ T6836] __bpf_get_stack+0x4f5/0xa10 [ 120.687963][ T6836] ? __pfx___bpf_get_stack+0x10/0x10 [ 120.687989][ T6836] ? rcu_is_watching+0x12/0xc0 [ 120.688010][ T6836] ? irqentry_exit+0x3b/0x90 [ 120.688031][ T6836] bpf_get_stack+0x32/0x40 [ 120.688056][ T6836] bpf_get_stack_raw_tp+0x1dd/0x280 [ 120.688081][ T6836] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 120.688098][ T6836] bpf_prog_test_run_syscall+0x3b0/0x780 [ 120.688121][ T6836] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 120.688142][ T6836] ? fput+0x70/0xf0 [ 120.688161][ T6836] ? __bpf_prog_get+0x97/0x2a0 [ 120.688181][ T6836] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 120.688201][ T6836] __sys_bpf+0x170a/0x4ea0 [ 120.688229][ T6836] ? __pfx___sys_bpf+0x10/0x10 [ 120.688251][ T6836] ? __schedule+0x1181/0x5dd0 [ 120.688279][ T6836] ? rcu_is_watching+0x12/0xc0 [ 120.688304][ T6836] ? do_futex+0x122/0x350 [ 120.688331][ T6836] ? __pfx_do_futex+0x10/0x10 [ 120.688371][ T6836] ? xfd_validate_state+0x61/0x180 [ 120.688403][ T6836] __x64_sys_bpf+0x78/0xc0 [ 120.688427][ T6836] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.688454][ T6836] do_syscall_64+0xcd/0x4c0 [ 120.688473][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.688491][ T6836] RIP: 0033:0x7f7fe738e9a9 [ 120.688505][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.688521][ T6836] RSP: 002b:00007f7fe81fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.688538][ T6836] RAX: ffffffffffffffda RBX: 00007f7fe75b6160 RCX: 00007f7fe738e9a9 [ 120.688549][ T6836] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 120.688559][ T6836] RBP: 00007f7fe7410d69 R08: 0000000000000000 R09: 0000000000000000 [ 120.688569][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.688579][ T6836] R13: 0000000000000000 R14: 00007f7fe75b6160 R15: 00007fff999e29e8 [ 120.688602][ T6836] [ 120.957632][ T30] audit: type=1400 audit(1753751998.887:244): avc: denied { mounton } for pid=6832 comm="syz.1.287" path="/62/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 121.246919][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.257989][ T1207] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.267069][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.295696][ T30] audit: type=1400 audit(1753751998.897:245): avc: denied { remount } for pid=6832 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.443613][ T30] audit: type=1400 audit(1753751999.647:246): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 121.467928][ T1207] usb 3-1: config 0 descriptor?? [ 121.901824][ T1207] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 121.914349][ T1207] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input10 [ 122.003242][ T1207] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 122.315557][ T916] usb 3-1: USB disconnect, device number 4