last executing test programs: 17.497784686s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0xb4, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.218493316s ago: executing program 0 (id=215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getcwd(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020508030200000000017c"], 0x10}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 13.344112651s ago: executing program 1 (id=217): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 13.033440792s ago: executing program 0 (id=219): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getcwd(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020508030200000000017c"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 12.491705909s ago: executing program 4 (id=221): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x0, 0x6c, 0x0, 0x4}, {0x9, 0x8, 0x4, 0x1}, {0x7, 0xb, 0x2, 0xf7a}, {0xb, 0xff, 0x2, 0x1a97}, {0xcbd4, 0xa, 0x8, 0xffffff79}, {0x362, 0xd, 0x9}]}) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x0, 0x0}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001840)=""/4090, 0xffa) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) userfaultfd(0x80801) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0x0) 11.45081438s ago: executing program 1 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x44) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 10.080411721s ago: executing program 0 (id=224): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x76) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e57, 0x7, 0x0, 0x3}) 10.07700775s ago: executing program 4 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0xb4, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.360790611s ago: executing program 2 (id=230): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getcwd(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020508030200000000017c"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 7.903480755s ago: executing program 2 (id=231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00', @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) socket(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0xd4dc1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 7.771487041s ago: executing program 1 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.150681466s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 6.130460722s ago: executing program 2 (id=234): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.079880866s ago: executing program 3 (id=235): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setns(r1, 0x24020000) userfaultfd(0x80801) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') lseek(r1, 0x10, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 5.165457398s ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x6f, 0x48, 0x4, 0x22edfb36b19e3a9c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x380, 0xc1f19c3047f88c56, 0x5, 0x2}}) 5.053248792s ago: executing program 3 (id=237): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') lseek(r1, 0x10, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 4.828234837s ago: executing program 4 (id=238): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4.182338219s ago: executing program 0 (id=239): syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) 4.181040657s ago: executing program 4 (id=240): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chroot(&(0x7f0000000000)='./bus\x00') lseek(r1, 0x10, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 4.079674299s ago: executing program 3 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB='\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) socket(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0xd4dc1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 4.043559373s ago: executing program 2 (id=242): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000980)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x2, 0x5a, 0x9, 0x4, 0x40, 0x8e6, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x8b, @private2, 0x5}}, 0x100, 0x0, 0x87, 0x5, 0x8}}, &(0x7f0000000080)=0xb0) 2.561454693s ago: executing program 1 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.559620033s ago: executing program 4 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 2.48954385s ago: executing program 2 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x44) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1a, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}, 0x1, 0x10000000000}, 0x0) 2.314743694s ago: executing program 3 (id=246): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x225162, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(0x0, 0x0, 0x2) keyctl$setperm(0x5, 0x0, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.259663907s ago: executing program 4 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0xa101) 1.311011309s ago: executing program 3 (id=248): pipe(&(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0x1, 0xa, 0x0, @private2, @empty, 0x40, 0x10, 0xa56, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff23, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048000}, 0x44840) 288.824995ms ago: executing program 3 (id=249): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 219.216549ms ago: executing program 2 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00', @ANYBLOB='\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) socket(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0xd4dc1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 0s ago: executing program 1 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x13, 0x4, [{}]}]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r6, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 50.026492][ T29] audit: type=1400 audit(1740720885.809:88): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.029886][ T5805] cgroup: Unknown subsys name 'net' [ 50.049227][ T29] audit: type=1400 audit(1740720885.809:89): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.076629][ T29] audit: type=1400 audit(1740720885.849:90): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.203426][ T5805] cgroup: Unknown subsys name 'cpuset' [ 50.210838][ T5805] cgroup: Unknown subsys name 'rlimit' [ 50.313268][ T29] audit: type=1400 audit(1740720886.099:91): avc: denied { setattr } for pid=5805 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.344139][ T29] audit: type=1400 audit(1740720886.099:92): avc: denied { create } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.371514][ T29] audit: type=1400 audit(1740720886.099:93): avc: denied { write } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.393494][ T29] audit: type=1400 audit(1740720886.099:94): avc: denied { read } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.408179][ T5807] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.414025][ T29] audit: type=1400 audit(1740720886.099:95): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.447224][ T29] audit: type=1400 audit(1740720886.099:96): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 50.470539][ T29] audit: type=1400 audit(1740720886.129:97): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.274410][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.125277][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.130691][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.135195][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.141489][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.147051][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.153983][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.161272][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.169013][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.175143][ T5819] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.181834][ T5821] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.189010][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.195903][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.234587][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.238629][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.242535][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.250457][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.262939][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.271483][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.278820][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.286928][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.294576][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.303355][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.311796][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.311996][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.320389][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.327349][ T5821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.340571][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.348845][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.360479][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.370193][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.537633][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 53.578606][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 53.587609][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 53.692564][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.700109][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.707842][ T5815] bridge_slave_0: entered allmulticast mode [ 53.714528][ T5815] bridge_slave_0: entered promiscuous mode [ 53.728249][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.735444][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.742687][ T5823] bridge_slave_0: entered allmulticast mode [ 53.749007][ T5823] bridge_slave_0: entered promiscuous mode [ 53.767835][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.775495][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.782673][ T5815] bridge_slave_1: entered allmulticast mode [ 53.789049][ T5815] bridge_slave_1: entered promiscuous mode [ 53.806985][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.814141][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.821447][ T5823] bridge_slave_1: entered allmulticast mode [ 53.827803][ T5823] bridge_slave_1: entered promiscuous mode [ 53.842543][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.849599][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.857051][ T5818] bridge_slave_0: entered allmulticast mode [ 53.863459][ T5818] bridge_slave_0: entered promiscuous mode [ 53.891662][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.918703][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.925994][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.933436][ T5818] bridge_slave_1: entered allmulticast mode [ 53.940525][ T5818] bridge_slave_1: entered promiscuous mode [ 53.948020][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.961688][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.970852][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 53.991465][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.018196][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.049217][ T5823] team0: Port device team_slave_0 added [ 54.060807][ T5823] team0: Port device team_slave_1 added [ 54.067436][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.081232][ T5815] team0: Port device team_slave_0 added [ 54.091382][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 54.116817][ T5815] team0: Port device team_slave_1 added [ 54.143386][ T5818] team0: Port device team_slave_0 added [ 54.159566][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.166708][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.192900][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.204974][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.212089][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.238019][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.250459][ T5818] team0: Port device team_slave_1 added [ 54.266134][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.273259][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.299255][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.314309][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.321362][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.347441][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.373659][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.380801][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.387882][ T5824] bridge_slave_0: entered allmulticast mode [ 54.394566][ T5824] bridge_slave_0: entered promiscuous mode [ 54.401720][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.408773][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.416448][ T5824] bridge_slave_1: entered allmulticast mode [ 54.423324][ T5824] bridge_slave_1: entered promiscuous mode [ 54.462786][ T5823] hsr_slave_0: entered promiscuous mode [ 54.468788][ T5823] hsr_slave_1: entered promiscuous mode [ 54.477182][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.484344][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.510355][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.537804][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.548593][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.567094][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.574171][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.600488][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.611509][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.618546][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.626288][ T5826] bridge_slave_0: entered allmulticast mode [ 54.632716][ T5826] bridge_slave_0: entered promiscuous mode [ 54.668550][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.675698][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.683157][ T5826] bridge_slave_1: entered allmulticast mode [ 54.689568][ T5826] bridge_slave_1: entered promiscuous mode [ 54.703409][ T5815] hsr_slave_0: entered promiscuous mode [ 54.709340][ T5815] hsr_slave_1: entered promiscuous mode [ 54.715461][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.723445][ T5815] Cannot create hsr debugfs directory [ 54.738496][ T5824] team0: Port device team_slave_0 added [ 54.756681][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.773580][ T5824] team0: Port device team_slave_1 added [ 54.784852][ T5818] hsr_slave_0: entered promiscuous mode [ 54.791297][ T5818] hsr_slave_1: entered promiscuous mode [ 54.797705][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.805685][ T5818] Cannot create hsr debugfs directory [ 54.812898][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.866439][ T5826] team0: Port device team_slave_0 added [ 54.875758][ T5826] team0: Port device team_slave_1 added [ 54.882179][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.889107][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.915314][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.930905][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.937844][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.963919][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.026437][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.033749][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.060290][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.082509][ T5824] hsr_slave_0: entered promiscuous mode [ 55.088482][ T5824] hsr_slave_1: entered promiscuous mode [ 55.094492][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.102139][ T5824] Cannot create hsr debugfs directory [ 55.119019][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.126011][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.151993][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.212547][ T5826] hsr_slave_0: entered promiscuous mode [ 55.218457][ T5826] hsr_slave_1: entered promiscuous mode [ 55.224630][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.232557][ T5826] Cannot create hsr debugfs directory [ 55.280757][ T5819] Bluetooth: hci1: command tx timeout [ 55.285010][ T5821] Bluetooth: hci0: command tx timeout [ 55.325405][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.337990][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.346930][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.360346][ T5821] Bluetooth: hci2: command tx timeout [ 55.377719][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.428600][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.438726][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.440304][ T5821] Bluetooth: hci4: command tx timeout [ 55.449746][ T5819] Bluetooth: hci3: command tx timeout [ 55.461264][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.476047][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.517750][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.528410][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.538498][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.548997][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.599002][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.620345][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.628993][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.643082][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.661686][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.691915][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.731010][ T1814] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.738192][ T1814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.751165][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.760907][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.774455][ T1814] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.781542][ T1814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.796927][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.806246][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.861210][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.875945][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.889156][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.920550][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.927624][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.938478][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.965464][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.972561][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.994696][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 55.994710][ T29] audit: type=1400 audit(1740720891.779:111): avc: denied { sys_module } for pid=5823 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.996804][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.028968][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.046866][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.053966][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.067721][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.132916][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.160778][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.167880][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.177525][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.184717][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.226354][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.259458][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.280789][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.314562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.321689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.359332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.366443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.399341][ T5823] veth0_vlan: entered promiscuous mode [ 56.442554][ T5823] veth1_vlan: entered promiscuous mode [ 56.466243][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.482410][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.531587][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.548484][ T5815] veth0_vlan: entered promiscuous mode [ 56.559420][ T5823] veth0_macvtap: entered promiscuous mode [ 56.583992][ T5815] veth1_vlan: entered promiscuous mode [ 56.600412][ T5823] veth1_macvtap: entered promiscuous mode [ 56.615507][ T5818] veth0_vlan: entered promiscuous mode [ 56.643939][ T5818] veth1_vlan: entered promiscuous mode [ 56.677510][ T5815] veth0_macvtap: entered promiscuous mode [ 56.686599][ T5815] veth1_macvtap: entered promiscuous mode [ 56.706629][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.737809][ T5818] veth0_macvtap: entered promiscuous mode [ 56.764311][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.776609][ T5818] veth1_macvtap: entered promiscuous mode [ 56.802942][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.813355][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.824141][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.833326][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.844366][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.855822][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.866816][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.877308][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.888215][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.899172][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.908809][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918182][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.927214][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.935978][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.965897][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.988809][ T5824] veth0_vlan: entered promiscuous mode [ 57.006372][ T5824] veth1_vlan: entered promiscuous mode [ 57.014545][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.025509][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.035634][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.046572][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.058776][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.068633][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.079421][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.090294][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.100770][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.112318][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.147622][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.156517][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.166130][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175079][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.221770][ T5826] veth0_vlan: entered promiscuous mode [ 57.259530][ T5826] veth1_vlan: entered promiscuous mode [ 57.277284][ T5824] veth0_macvtap: entered promiscuous mode [ 57.295708][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.297177][ T5824] veth1_macvtap: entered promiscuous mode [ 57.309489][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.317623][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.322303][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.336178][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.338077][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.346727][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.365449][ T5819] Bluetooth: hci0: command tx timeout [ 57.370940][ T5819] Bluetooth: hci1: command tx timeout [ 57.376714][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.386835][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.397534][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.408351][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.431903][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.443351][ T5819] Bluetooth: hci2: command tx timeout [ 57.443947][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.459466][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.470176][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.480373][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.491443][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.502793][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.520120][ T5819] Bluetooth: hci4: command tx timeout [ 57.527747][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.537495][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.538308][ T5819] Bluetooth: hci3: command tx timeout [ 57.548947][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.562041][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.578618][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.586717][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.612712][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.613809][ T5826] veth0_macvtap: entered promiscuous mode [ 57.620774][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.652450][ T5826] veth1_macvtap: entered promiscuous mode [ 57.662918][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.671992][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.688745][ T29] audit: type=1400 audit(1740720893.469:112): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.VNwelO/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.717733][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.722723][ T29] audit: type=1400 audit(1740720893.469:113): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.755386][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.755515][ T29] audit: type=1400 audit(1740720893.489:114): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.VNwelO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.791310][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.797471][ T29] audit: type=1400 audit(1740720893.489:115): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.802264][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.828071][ T29] audit: type=1400 audit(1740720893.489:116): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.VNwelO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.861286][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.863989][ T29] audit: type=1400 audit(1740720893.489:117): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.VNwelO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.899127][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.899146][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.899159][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.900751][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.924193][ T29] audit: type=1400 audit(1740720893.509:118): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.958512][ T29] audit: type=1400 audit(1740720893.709:119): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.985509][ T29] audit: type=1400 audit(1740720893.709:120): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="gadgetfs" ino=6744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.011797][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.025911][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028835][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.037616][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.061665][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.071681][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.082822][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.092744][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.103206][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.114042][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.169096][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.169477][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.187531][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.196659][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.205768][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.222254][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.245018][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.266087][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.387198][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.408734][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.147257][ T1814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.158135][ T1814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.219369][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.245426][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.446948][ T5819] Bluetooth: hci1: command tx timeout [ 59.452562][ T5819] Bluetooth: hci0: command tx timeout [ 59.519966][ T5821] Bluetooth: hci2: command tx timeout [ 59.678857][ T5821] Bluetooth: hci3: command tx timeout [ 59.684726][ T5821] Bluetooth: hci4: command tx timeout [ 60.555098][ T5923] afs: Unknown parameter '0x0000000000000006' [ 61.419813][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 61.419833][ T29] audit: type=1400 audit(1740720897.079:146): avc: denied { create } for pid=5896 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.529949][ T5819] Bluetooth: hci1: command tx timeout [ 61.535999][ T5821] Bluetooth: hci0: command tx timeout [ 61.600393][ T5821] Bluetooth: hci2: command tx timeout [ 61.760558][ T5819] Bluetooth: hci3: command tx timeout [ 61.766097][ T5821] Bluetooth: hci4: command tx timeout [ 61.801383][ T29] audit: type=1400 audit(1740720897.589:147): avc: denied { create } for pid=5917 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.851212][ T29] audit: type=1400 audit(1740720897.619:148): avc: denied { write } for pid=5917 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.278243][ T29] audit: type=1400 audit(1740720897.989:149): avc: denied { create } for pid=5929 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.647037][ T29] audit: type=1400 audit(1740720897.989:150): avc: denied { setopt } for pid=5929 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.819265][ T5941] afs: Unknown parameter '0x0000000000000006' [ 63.832639][ T29] audit: type=1400 audit(1740720898.459:151): avc: denied { map_read map_write } for pid=5927 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.802584][ T29] audit: type=1400 audit(1740720900.589:152): avc: denied { read } for pid=5943 comm="syz.4.11" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.249734][ T29] audit: type=1400 audit(1740720900.589:153): avc: denied { open } for pid=5943 comm="syz.4.11" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.298040][ T29] audit: type=1400 audit(1740720901.079:154): avc: denied { mount } for pid=5946 comm="syz.0.12" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.323890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.466427][ T29] audit: type=1400 audit(1740720901.249:155): avc: denied { read write } for pid=5951 comm="syz.4.13" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.673221][ T5952] sp0: Synchronizing with TNC [ 65.680265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 65.812286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.824855][ T5958] sp0: Synchronizing with TNC [ 67.479819][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 67.479858][ T29] audit: type=1400 audit(1740720903.139:165): avc: denied { ioctl } for pid=5962 comm="syz.1.16" path="socket:[8100]" dev="sockfs" ino=8100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.974185][ T5971] random: crng reseeded on system resumption [ 68.136928][ T29] audit: type=1400 audit(1740720903.759:166): avc: denied { write } for pid=5953 comm="syz.0.14" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.160760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.169046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.357684][ T29] audit: type=1400 audit(1740720903.759:167): avc: denied { open } for pid=5953 comm="syz.0.14" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.909290][ T29] audit: type=1400 audit(1740720904.689:168): avc: denied { lock } for pid=5973 comm="syz.4.20" path="socket:[8113]" dev="sockfs" ino=8113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 69.103176][ T29] audit: type=1400 audit(1740720904.879:169): avc: denied { create } for pid=5981 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.231643][ T29] audit: type=1400 audit(1740720905.019:170): avc: denied { write } for pid=5981 comm="syz.2.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.320821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.336338][ T29] audit: type=1400 audit(1740720906.119:171): avc: denied { create } for pid=5967 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.969982][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.976748][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.876544][ T29] audit: type=1400 audit(1740720909.599:172): avc: denied { setopt } for pid=6017 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.510511][ T6035] random: crng reseeded on system resumption [ 76.167678][ T25] cfg80211: failed to load regulatory.db [ 77.010048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.142005][ T6046] xt_CONNSECMARK: invalid mode: 253 [ 77.180347][ T29] audit: type=1400 audit(1740720912.969:173): avc: denied { read write } for pid=6048 comm="syz.0.39" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.205195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.219848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.362413][ T29] audit: type=1400 audit(1740720912.969:174): avc: denied { open } for pid=6048 comm="syz.0.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.611497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.611513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.743189][ T29] audit: type=1400 audit(1740720913.059:175): avc: denied { bind } for pid=6048 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.792107][ T29] audit: type=1400 audit(1740720913.059:176): avc: denied { accept } for pid=6048 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.811733][ T29] audit: type=1400 audit(1740720913.119:177): avc: denied { read write } for pid=6037 comm="syz.1.36" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.836435][ T29] audit: type=1400 audit(1740720913.239:178): avc: denied { open } for pid=6037 comm="syz.1.36" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.063883][ T29] audit: type=1400 audit(1740720916.849:179): avc: denied { watch } for pid=6084 comm="syz.3.49" path="/12/control" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.165998][ T6088] sp0: Synchronizing with TNC [ 81.259460][ T6090] random: crng reseeded on system resumption [ 82.904738][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 83.115830][ T29] audit: type=1400 audit(1740720918.889:180): avc: denied { create } for pid=6101 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.835299][ T6117] random: crng reseeded on system resumption [ 85.301965][ T6127] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.977482][ T29] audit: type=1400 audit(1740720921.689:181): avc: denied { sys_module } for pid=6122 comm="syz.3.57" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.790310][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 86.802870][ T29] audit: type=1400 audit(1740720922.579:182): avc: denied { write } for pid=6134 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.847181][ T29] audit: type=1400 audit(1740720922.579:183): avc: denied { nlmsg_write } for pid=6134 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.097531][ T29] audit: type=1400 audit(1740720926.319:184): avc: denied { create } for pid=6172 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.410337][ T29] audit: type=1400 audit(1740720926.319:185): avc: denied { bind } for pid=6172 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.496803][ T29] audit: type=1400 audit(1740720926.319:186): avc: denied { listen } for pid=6172 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.613262][ T29] audit: type=1400 audit(1740720926.319:187): avc: denied { connect } for pid=6172 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.674507][ T29] audit: type=1400 audit(1740720926.609:188): avc: denied { accept } for pid=6172 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.882439][ T29] audit: type=1400 audit(1740720929.359:189): avc: denied { setopt } for pid=6213 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.163954][ T29] audit: type=1400 audit(1740720929.499:190): avc: denied { unlink } for pid=6213 comm="syz.0.79" name="#1" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.367304][ T29] audit: type=1400 audit(1740720929.509:191): avc: denied { mount } for pid=6213 comm="syz.0.79" name="/" dev="overlay" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.802966][ T29] audit: type=1400 audit(1740720932.579:192): avc: denied { create } for pid=6242 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.528799][ T29] audit: type=1400 audit(1740720932.589:193): avc: denied { setopt } for pid=6242 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.548795][ T29] audit: type=1400 audit(1740720932.599:194): avc: denied { append } for pid=6242 comm="syz.1.89" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.998507][ T29] audit: type=1400 audit(1740720933.769:195): avc: denied { read } for pid=6261 comm="syz.0.93" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.154131][ T29] audit: type=1400 audit(1740720933.869:196): avc: denied { ioctl } for pid=6261 comm="syz.0.93" path="socket:[9609]" dev="sockfs" ino=9609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.540832][ T6270] overlayfs: failed to resolve './file1': -2 [ 99.041109][ T29] audit: type=1400 audit(1740720934.309:197): avc: denied { mount } for pid=6265 comm="syz.2.94" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.103441][ T6264] netlink: 165 bytes leftover after parsing attributes in process `syz.0.93'. [ 99.303430][ T6262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.461788][ T6262] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.482839][ T6262] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.513355][ T6276] netlink: 124 bytes leftover after parsing attributes in process `syz.2.96'. [ 99.547026][ T6262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.559848][ T6262] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.606899][ T6262] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.644869][ T6262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.747594][ T6262] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.771044][ T6262] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.783736][ T6262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.800382][ T6262] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.825664][ T6262] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.847174][ T6262] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.855391][ T6262] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.871914][ T6262] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.399818][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.599807][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.679771][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.899944][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.921104][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.499766][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.049863][ T29] audit: type=1400 audit(1740720938.489:198): avc: denied { read write } for pid=6306 comm="syz.0.105" dev="sockfs" ino=9678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.523209][ T29] audit: type=1400 audit(1740720938.569:199): avc: denied { name_bind } for pid=6305 comm="syz.4.104" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.680007][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.764587][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.218074][ T6321] overlayfs: failed to resolve './file1': -2 [ 104.500522][ T6324] overlay: filesystem on ./bus not supported as upperdir [ 104.509718][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.515888][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.587331][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.767588][ T29] audit: type=1400 audit(1740720939.999:200): avc: denied { mounton } for pid=6313 comm="syz.2.106" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 105.759690][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.142983][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.401216][ T6338] netlink: 165 bytes leftover after parsing attributes in process `syz.2.110'. [ 106.598776][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.598788][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.755747][ T6330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.402627][ T6330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.438190][ T6330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.467121][ T6330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.548351][ T6330] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.706413][ T6356] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.980396][ T6362] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.987669][ T6362] overlayfs: failed to set xattr on upper [ 107.993510][ T6362] overlayfs: ...falling back to redirect_dir=nofollow. [ 108.000407][ T6362] overlayfs: ...falling back to index=off. [ 108.006233][ T6362] overlayfs: ...falling back to uuid=null. [ 108.012076][ T6362] overlayfs: ...falling back to xino=off. [ 108.376433][ T29] audit: type=1400 audit(1740720943.599:201): avc: denied { mount } for pid=6345 comm="syz.1.114" name="/" dev="ramfs" ino=9072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 108.565734][ T29] audit: type=1400 audit(1740720943.719:202): avc: denied { mounton } for pid=6352 comm="syz.3.116" path="/file0" dev="rootfs" ino=9737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 108.835180][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.092331][ T29] audit: type=1400 audit(1740720943.759:203): avc: denied { associate } for pid=6352 comm="syz.3.116" name="#3" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 109.472542][ T6381] overlay: filesystem on ./bus not supported as upperdir [ 109.519700][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.588555][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.594791][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.602069][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.653641][ T29] audit: type=1400 audit(1740720945.349:204): avc: denied { associate } for pid=6373 comm="syz.3.120" name="#5" scontext=system_u:object_r:sysfs_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 109.855343][ T29] audit: type=1400 audit(1740720945.359:205): avc: denied { associate } for pid=6373 comm="syz.3.120" name="fuse" scontext=root:object_r:sysfs_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 110.920813][ T29] audit: type=1400 audit(1740720946.649:206): avc: denied { write } for pid=6392 comm="syz.2.125" name="udp6" dev="proc" ino=4026533483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.928226][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 111.019691][ T29] audit: type=1400 audit(1740720946.709:207): avc: denied { bind } for pid=6392 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.209154][ T29] audit: type=1400 audit(1740720946.709:208): avc: denied { setopt } for pid=6392 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.476756][ T6398] netlink: 124 bytes leftover after parsing attributes in process `syz.0.126'. [ 112.449963][ T6404] xt_CONNSECMARK: invalid mode: 253 [ 112.909671][ T6404] Zero length message leads to an empty skb [ 113.421845][ T6405] netlink: 165 bytes leftover after parsing attributes in process `syz.2.128'. [ 113.559796][ T6402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.592704][ T6402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.611102][ T6402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.636137][ T6402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.777646][ T6402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.977048][ T29] audit: type=1400 audit(1740720950.759:209): avc: denied { append } for pid=6443 comm="syz.0.137" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.024976][ T29] audit: type=1400 audit(1740720950.789:210): avc: denied { setopt } for pid=6443 comm="syz.0.137" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.049779][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.232452][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 115.601058][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.679711][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.685817][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.879388][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.519984][ T6472] overlayfs: failed to resolve './file1': -2 [ 117.956042][ T29] audit: type=1400 audit(1740720953.719:211): avc: denied { create } for pid=6467 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.241514][ T6478] netlink: 165 bytes leftover after parsing attributes in process `syz.2.145'. [ 119.430100][ T6485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6485 comm=syz.1.147 [ 120.335818][ T6499] netlink: 124 bytes leftover after parsing attributes in process `syz.3.150'. [ 120.493061][ T6501] overlay: filesystem on ./bus not supported as upperdir [ 121.887966][ T6510] overlay: filesystem on ./bus not supported as upperdir [ 122.314811][ T29] audit: type=1400 audit(1740720957.089:212): avc: denied { setopt } for pid=6506 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.586038][ T29] audit: type=1400 audit(1740720959.369:213): avc: denied { bind } for pid=6528 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.036453][ T6534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.047684][ T6534] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 126.048940][ T6562] xt_CONNSECMARK: invalid mode: 253 [ 128.672894][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 129.635222][ T29] audit: type=1400 audit(1740720964.519:214): avc: denied { read } for pid=6575 comm="syz.1.172" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 129.657915][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.666605][ T29] audit: type=1400 audit(1740720964.519:215): avc: denied { open } for pid=6575 comm="syz.1.172" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 129.690080][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.792404][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.177'. [ 129.954543][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.165633][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 130.220454][ T8] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 130.231227][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.180'. [ 130.266322][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.290361][ T8] usb 1-1: Product: syz [ 130.314185][ T8] usb 1-1: Manufacturer: syz [ 130.347883][ T8] usb 1-1: SerialNumber: syz [ 130.394793][ T8] usb 1-1: config 0 descriptor?? [ 130.457526][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 130.532538][ T29] audit: type=1400 audit(1740720964.519:216): avc: denied { ioctl } for pid=6575 comm="syz.1.172" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 130.557496][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.588034][ T29] audit: type=1326 audit(1740720964.839:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 130.611224][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.617601][ T29] audit: type=1326 audit(1740720964.839:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 130.640800][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.713529][ T29] audit: type=1326 audit(1740720964.839:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 130.743982][ T29] audit: type=1326 audit(1740720964.839:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 130.767867][ T29] audit: type=1326 audit(1740720964.839:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 130.791160][ T29] audit: type=1326 audit(1740720964.839:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 130.842966][ T29] audit: type=1326 audit(1740720964.839:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10138d169 code=0x7ffc0000 [ 131.158630][ T6605] overlay: filesystem on ./bus not supported as upperdir [ 131.747674][ T8] gspca_se401: Wrong descriptor type [ 132.162587][ T8] usb 1-1: USB disconnect, device number 2 [ 132.333457][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 132.363318][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 132.735032][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.751464][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.176342][ T6642] overlay: filesystem on ./bus not supported as upperdir [ 137.850502][ T6658] netlink: 165 bytes leftover after parsing attributes in process `syz.4.194'. [ 139.097830][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 139.097848][ T29] audit: type=1326 audit(1740720973.949:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 139.127398][ T29] audit: type=1326 audit(1740720973.949:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 139.150669][ T29] audit: type=1326 audit(1740720973.959:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 139.611829][ T29] audit: type=1326 audit(1740720973.959:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 139.881197][ T29] audit: type=1326 audit(1740720973.959:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 140.049343][ T29] audit: type=1326 audit(1740720973.959:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 140.191639][ T29] audit: type=1326 audit(1740720973.959:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 140.215210][ T29] audit: type=1326 audit(1740720973.959:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 140.432953][ T29] audit: type=1326 audit(1740720973.969:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 140.694992][ T29] audit: type=1326 audit(1740720973.969:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d7b8d169 code=0x7ffc0000 [ 145.299324][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.307826][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.440565][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 145.440582][ T29] audit: type=1400 audit(1740720981.079:282): avc: denied { ioctl } for pid=6719 comm="syz.2.213" path="socket:[11274]" dev="sockfs" ino=11274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.628843][ T29] audit: type=1400 audit(1740720981.409:283): avc: denied { unmount } for pid=6717 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.116061][ T29] audit: type=1400 audit(1740720983.869:284): avc: denied { write } for pid=6732 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.358242][ T6758] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 150.441027][ T29] audit: type=1400 audit(1740720986.219:285): avc: denied { bind } for pid=6757 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.343163][ T29] audit: type=1400 audit(1740720986.219:286): avc: denied { name_bind } for pid=6757 comm="syz.1.222" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.356701][ T6758] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.535445][ T29] audit: type=1400 audit(1740720986.219:287): avc: denied { node_bind } for pid=6757 comm="syz.1.222" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 151.560497][ T29] audit: type=1400 audit(1740720986.229:288): avc: denied { connect } for pid=6757 comm="syz.1.222" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.142061][ T29] audit: type=1400 audit(1740720986.229:289): avc: denied { name_connect } for pid=6757 comm="syz.1.222" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 152.165162][ T29] audit: type=1400 audit(1740720987.069:290): avc: denied { setopt } for pid=6757 comm="syz.1.222" laddr=::ffff:172.20.20.57 lport=20001 faddr=::ffff:172.20.20.57 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.408144][ T29] audit: type=1400 audit(1740720988.189:291): avc: denied { accept } for pid=6773 comm="syz.3.227" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.451023][ T6757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.494073][ T29] audit: type=1400 audit(1740720988.189:292): avc: denied { write } for pid=6773 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.931899][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 152.941400][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 152.955063][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 152.965876][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 155.105701][ T6798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.280133][ T6798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.306697][ T6798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.707544][ T6808] overlay: filesystem on ./bus not supported as upperdir [ 156.579558][ T6819] netlink: 96 bytes leftover after parsing attributes in process `syz.4.238'. [ 156.680665][ T6820] overlay: filesystem on ./bus not supported as upperdir [ 157.783941][ T6832] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.796208][ T6832] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 158.449162][ T29] audit: type=1400 audit(1740720994.229:293): avc: denied { shutdown } for pid=6835 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.236958][ T29] audit: type=1400 audit(1740720995.019:294): avc: denied { ioctl } for pid=6843 comm="syz.2.245" path="socket:[11509]" dev="sockfs" ino=11509 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.328959][ T6854] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 159.378394][ T6854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.909054][ T6843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.419523][ T29] audit: type=1400 audit(1740720996.179:295): avc: denied { create } for pid=6858 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.971210][ T29] audit: type=1400 audit(1740720996.189:296): avc: denied { setopt } for pid=6858 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.999647][ T29] audit: type=1400 audit(1740720996.199:297): avc: denied { write } for pid=6858 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.829604][ C0] sched: DL replenish lagged too much [ 246.852934][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.529569][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 287.536550][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6863/1:b..l [ 287.544803][ C0] rcu: (detected by 0, t=10502 jiffies, g=10461, q=1678799 ncpus=2) [ 287.552875][ C0] task:syz.3.249 state:R running task stack:25920 pid:6863 tgid:6862 ppid:5815 task_flags:0x40044c flags:0x00004006 [ 287.567192][ C0] Call Trace: [ 287.570483][ C0] [ 287.573418][ C0] __schedule+0xf43/0x5890 [ 287.577861][ C0] ? __pfx___schedule+0x10/0x10 [ 287.582736][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 287.588121][ C0] preempt_schedule_common+0x44/0xc0 [ 287.593420][ C0] preempt_schedule_thunk+0x1a/0x30 [ 287.598635][ C0] _raw_spin_unlock+0x3e/0x50 [ 287.603318][ C0] unmap_page_range+0xee3/0x4390 [ 287.608285][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 287.613671][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 287.618624][ C0] ? uprobe_munmap+0x20/0x5c0 [ 287.623322][ C0] unmap_single_vma+0x194/0x2b0 [ 287.628196][ C0] unmap_vmas+0x22f/0x490 [ 287.632554][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 287.637427][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 287.642422][ C0] exit_mmap+0x1c1/0xba0 [ 287.646680][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 287.651456][ C0] ? __pfx_mark_lock+0x10/0x10 [ 287.656252][ C0] __mmput+0x12a/0x410 [ 287.660331][ C0] mmput+0x62/0x70 [ 287.664060][ C0] do_exit+0x9ba/0x2d70 [ 287.668218][ C0] ? get_signal+0x8f7/0x26c0 [ 287.672812][ C0] ? __pfx_do_exit+0x10/0x10 [ 287.677407][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 287.682431][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 287.687803][ C0] do_group_exit+0xd3/0x2a0 [ 287.692311][ C0] get_signal+0x24ed/0x26c0 [ 287.696825][ C0] ? __pfx___mm_populate+0x10/0x10 [ 287.701940][ C0] ? up_write+0x1b2/0x520 [ 287.706275][ C0] ? __pfx_get_signal+0x10/0x10 [ 287.711138][ C0] ? vm_mmap_pgoff+0xf2/0x3a0 [ 287.715830][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 287.721378][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 287.727550][ C0] ? ksys_mmap_pgoff+0x85/0x5c0 [ 287.732410][ C0] ? rcu_is_watching+0x12/0xc0 [ 287.737181][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 287.742820][ C0] do_syscall_64+0xda/0x250 [ 287.747333][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.753239][ C0] RIP: 0033:0x7ff10138d169 [ 287.757658][ C0] RSP: 002b:00007ff1021b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 287.766085][ C0] RAX: 0000400000000000 RBX: 00007ff1015a5fa0 RCX: 00007ff10138d169 [ 287.774064][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 287.782042][ C0] RBP: 00007ff10140e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 287.790021][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 287.797995][ C0] R13: 0000000000000000 R14: 00007ff1015a5fa0 R15: 00007fff5ca9db48 [ 287.805992][ C0] [ 287.809011][ C0] rcu: rcu_preempt kthread starved for 4105 jiffies! g10461 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 287.820123][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 287.830088][ C0] rcu: RCU grace-period kthread stack dump: [ 287.835963][ C0] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 287.849421][ C0] Call Trace: [ 287.852699][ C0] [ 287.855633][ C0] __schedule+0xf43/0x5890 [ 287.860055][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 287.865271][ C0] ? __pfx___schedule+0x10/0x10 [ 287.870127][ C0] ? schedule+0x298/0x350 [ 287.874466][ C0] ? __pfx_lock_release+0x10/0x10 [ 287.879500][ C0] ? lock_acquire+0x2f/0xb0 [ 287.884006][ C0] ? schedule+0x1fd/0x350 [ 287.888340][ C0] schedule+0xe7/0x350 [ 287.892415][ C0] schedule_timeout+0x124/0x280 [ 287.897275][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 287.902747][ C0] ? __pfx_process_timeout+0x10/0x10 [ 287.908044][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 287.913883][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 287.919355][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 287.924133][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 287.929428][ C0] ? rcu_gp_init+0xc82/0x1630 [ 287.934117][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.939324][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 287.945138][ C0] rcu_gp_kthread+0x271/0x380 [ 287.949824][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 287.955029][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.960238][ C0] ? __kthread_parkme+0x148/0x220 [ 287.965265][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 287.970477][ C0] kthread+0x3af/0x750 [ 287.974555][ C0] ? __pfx_kthread+0x10/0x10 [ 287.979158][ C0] ? __pfx_kthread+0x10/0x10 [ 287.983756][ C0] ret_from_fork+0x45/0x80 [ 287.988180][ C0] ? __pfx_kthread+0x10/0x10 [ 287.992804][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.997589][ C0] [ 288.000608][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 288.006929][ C0] Sending NMI from CPU 0 to CPUs 1: [ 288.012140][ C1] NMI backtrace for cpu 1 [ 288.012150][ C1] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 288.012166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.012174][ C1] RIP: 0010:unwind_get_return_address+0x12/0xa0 [ 288.012198][ C1] Code: 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 <48> c1 ea 03 53 48 89 fb 0f b6 04 02 84 c0 74 04 3c 03 7e 59 8b 03 [ 288.012210][ C1] RSP: 0018:ffffc90000a17888 EFLAGS: 00000202 [ 288.012222][ C1] RAX: dffffc0000000000 RBX: ffffc90000a17898 RCX: 0000000000000000 [ 288.012230][ C1] RDX: ffffc90000a17898 RSI: ffffc90000a17e38 RDI: ffffc90000a17898 [ 288.012239][ C1] RBP: ffffc90000a17928 R08: ffffc90000a178cc R09: ffffffff91518d0e [ 288.012247][ C1] R10: ffffc90000a17898 R11: 0000000000056271 R12: ffffffff81a59b50 [ 288.012255][ C1] R13: ffffc90000a17958 R14: 0000000000000000 R15: ffff88801da8c880 [ 288.012263][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 288.012277][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.012286][ C1] CR2: 000040000002f000 CR3: 000000003379e000 CR4: 00000000003526f0 [ 288.012294][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.012301][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.012309][ C1] Call Trace: [ 288.012314][ C1] [ 288.012319][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 288.012341][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 288.012356][ C1] ? nmi_handle+0x1ac/0x5d0 [ 288.012375][ C1] ? unwind_get_return_address+0x12/0xa0 [ 288.012394][ C1] ? default_do_nmi+0x6a/0x160 [ 288.012413][ C1] ? exc_nmi+0x170/0x1e0 [ 288.012431][ C1] ? end_repeat_nmi+0xf/0x53 [ 288.012449][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.012467][ C1] ? unwind_get_return_address+0x12/0xa0 [ 288.012485][ C1] ? unwind_get_return_address+0x12/0xa0 [ 288.012504][ C1] ? unwind_get_return_address+0x12/0xa0 [ 288.012522][ C1] [ 288.012526][ C1] [ 288.012530][ C1] arch_stack_walk+0xa7/0x100 [ 288.012544][ C1] ? dev_hard_start_xmit+0x9a/0x7b0 [ 288.012560][ C1] stack_trace_save+0x95/0xd0 [ 288.012574][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 288.012590][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 288.012608][ C1] kasan_save_stack+0x33/0x60 [ 288.012621][ C1] ? kasan_save_stack+0x33/0x60 [ 288.012632][ C1] ? kasan_save_track+0x14/0x30 [ 288.012644][ C1] ? kasan_save_free_info+0x3b/0x60 [ 288.012660][ C1] ? __kasan_slab_free+0x51/0x70 [ 288.012672][ C1] ? kmem_cache_free+0x2e2/0x4d0 [ 288.012684][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 288.012697][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 288.012715][ C1] ? enqueue_to_backlog+0x47f/0xe60 [ 288.012732][ C1] ? netif_rx_internal+0x108/0x5f0 [ 288.012749][ C1] ? __netif_rx+0x88/0xb0 [ 288.012765][ C1] ? loopback_xmit+0x284/0x700 [ 288.012792][ C1] kasan_save_track+0x14/0x30 [ 288.012804][ C1] kasan_save_free_info+0x3b/0x60 [ 288.012820][ C1] __kasan_slab_free+0x51/0x70 [ 288.012832][ C1] kmem_cache_free+0x2e2/0x4d0 [ 288.012844][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 288.012859][ C1] kfree_skbmem+0x1a4/0x1f0 [ 288.012873][ C1] sk_skb_reason_drop+0x136/0x1a0 [ 288.012891][ C1] enqueue_to_backlog+0x47f/0xe60 [ 288.012909][ C1] ? skb_network_protocol+0x127/0x6d0 [ 288.012922][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 288.012939][ C1] netif_rx_internal+0x108/0x5f0 [ 288.012956][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 288.012974][ C1] ? eth_type_trans+0x336/0x7a0 [ 288.012991][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 288.013005][ C1] ? validate_xmit_xfrm+0x492/0x12c0 [ 288.013019][ C1] ? rcu_is_watching+0x12/0xc0 [ 288.013034][ C1] __netif_rx+0x88/0xb0 [ 288.013051][ C1] loopback_xmit+0x284/0x700 [ 288.013067][ C1] dev_hard_start_xmit+0x9a/0x7b0 [ 288.013082][ C1] sch_direct_xmit+0x1ae/0xc30 [ 288.013097][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 288.013112][ C1] ? get_slot_next+0x230/0x2f0 [ 288.013129][ C1] ? netem_enqueue+0x1060/0x3610 [ 288.013154][ C1] __qdisc_run+0x53f/0x1a10 [ 288.013171][ C1] __dev_queue_xmit+0x2aa4/0x43e0 [ 288.013187][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 288.013205][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 288.013225][ C1] ? find_held_lock+0x2d/0x110 [ 288.013239][ C1] ? __ip_finish_output+0x49e/0x950 [ 288.013256][ C1] ? __pfx_lock_release+0x10/0x10 [ 288.013272][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 288.013286][ C1] ? __ip_finish_output+0x49e/0x950 [ 288.013304][ C1] ip_finish_output2+0xc34/0x2180 [ 288.013322][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 288.013337][ C1] ? ip_skb_dst_mtu+0x496/0xe90 [ 288.013351][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 288.013366][ C1] ? __pfx_nf_hook+0x10/0x10 [ 288.013380][ C1] ? rcu_is_watching+0x12/0xc0 [ 288.013394][ C1] __ip_finish_output+0x49e/0x950 [ 288.013411][ C1] ip_finish_output+0x35/0x380 [ 288.013427][ C1] ip_output+0x13b/0x2a0 [ 288.013441][ C1] ? __pfx_ip_output+0x10/0x10 [ 288.013457][ C1] ip_local_out+0x33e/0x4a0 [ 288.013473][ C1] synproxy_send_tcp.isra.0+0x439/0x630 [ 288.013490][ C1] synproxy_send_client_synack+0x6f7/0x900 [ 288.013507][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 288.013526][ C1] nft_synproxy_do_eval+0xa49/0xd60 [ 288.013545][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 288.013562][ C1] ? mark_lock+0xb5/0xc60 [ 288.013579][ C1] ? hlock_class+0x4e/0x130 [ 288.013592][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 288.013609][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 288.013626][ C1] nft_do_chain+0x2e6/0x18f0 [ 288.013645][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 288.013661][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 288.013682][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 288.013700][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.013722][ C1] nft_do_chain_inet+0x18b/0x350 [ 288.013738][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 288.013754][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 288.013771][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 288.013793][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 288.013807][ C1] nf_hook_slow+0xbb/0x200 [ 288.013821][ C1] nf_hook.constprop.0+0x42e/0x750 [ 288.013833][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 288.013847][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 288.013860][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 288.013874][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 288.013891][ C1] ip_local_deliver+0x169/0x1f0 [ 288.013904][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 288.013916][ C1] ip_rcv+0x2c3/0x5d0 [ 288.013929][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 288.013941][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 288.013956][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 288.013971][ C1] ? rcu_is_watching+0x12/0xc0 [ 288.013985][ C1] ? process_backlog+0x3f1/0x15f0 [ 288.014001][ C1] ? process_backlog+0x3f1/0x15f0 [ 288.014014][ C1] __netif_receive_skb+0x1d/0x160 [ 288.014029][ C1] process_backlog+0x443/0x15f0 [ 288.014046][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 288.014063][ C1] net_rx_action+0xa94/0x1010 [ 288.014081][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 288.014096][ C1] ? __print_lock_name+0x200/0x260 [ 288.014111][ C1] ? net_tx_action+0x7e6/0xd00 [ 288.014133][ C1] ? net_tx_action+0x7f5/0xd00 [ 288.014157][ C1] handle_softirqs+0x213/0x8f0 [ 288.014177][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 288.014197][ C1] __irq_exit_rcu+0x109/0x170 [ 288.014214][ C1] irq_exit_rcu+0x9/0x30 [ 288.014231][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 288.014245][ C1] [ 288.014249][ C1] [ 288.014253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.014271][ C1] RIP: 0010:watchdog+0x2b5/0x12b0 [ 288.014291][ C1] Code: 8d 87 18 04 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 44 24 10 48 c1 e8 03 80 3c 08 00 0f 85 7f 0f 00 00 49 8b 9f 18 04 00 00 <48> b9 00 00 00 00 00 fc ff df 48 8d 6b 10 48 89 e8 48 c1 e8 03 80 [ 288.014302][ C1] RSP: 0018:ffffc90000a67db0 EFLAGS: 00000246 [ 288.014312][ C1] RAX: 1ffff11005931a34 RBX: ffff88802c981440 RCX: dffffc0000000000 [ 288.014321][ C1] RDX: ffff88801da8c880 RSI: ffffffff81b9faaa RDI: ffff88802c98a948 [ 288.014329][ C1] RBP: 00000000003fff62 R08: 0000000000000005 R09: 0000000000000002 [ 288.014337][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802c980d90 [ 288.014344][ C1] R13: 00000000003fff63 R14: 00000000fffffabe R15: ffff88802c98cd88 [ 288.014356][ C1] ? watchdog+0x28a/0x12b0 [ 288.014378][ C1] ? __pfx_watchdog+0x10/0x10 [ 288.014396][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.014410][ C1] ? __kthread_parkme+0x148/0x220 [ 288.014423][ C1] ? __pfx_watchdog+0x10/0x10 [ 288.014442][ C1] kthread+0x3af/0x750 [ 288.014456][ C1] ? __pfx_kthread+0x10/0x10 [ 288.014473][ C1] ? __pfx_kthread+0x10/0x10 [ 288.014488][ C1] ret_from_fork+0x45/0x80 [ 288.014505][ C1] ? __pfx_kthread+0x10/0x10 [ 288.014520][ C1] ret_from_fork_asm+0x1a/0x30 [ 288.014539][ C1] [ 288.905187][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.330928][ T1293] ieee802154 phy0 wpan0: encryption failed: -22