last executing test programs: 15.271841215s ago: executing program 2 (id=358): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x9f) dup3(0xffffffffffffffff, r1, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) 10.192607903s ago: executing program 2 (id=366): io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000180), 0x8) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 8.129778364s ago: executing program 2 (id=369): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x0, 0x100000000, 0x1000045, 0x6, 0x3b9, 0xf, 0xfffffffffffffffd, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.025899877s ago: executing program 1 (id=380): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x1, r7, r6}) 7.896342032s ago: executing program 1 (id=372): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff60, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) syz_io_uring_setup(0xbdc, 0x0, &(0x7f0000000100), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r2) 7.782491126s ago: executing program 3 (id=373): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xf, 0x0, 0x0) 7.602374165s ago: executing program 2 (id=378): r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="00000000000000f01f02000014000010b7030000000000008500000008000000bf09209500000000000000bd9a00000000009d97e7683eea69fa0085700000a0000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00'}, 0x94) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000005c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000ecae1c03361f5de0da0058640000"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) write(r4, 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f00000000c0)={0x10, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000a40)) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x3, {0x6, 0x2, 0x6, 0x4, 0x3, 0x10}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) prctl$PR_SET_IO_FLUSHER(0x41, 0x800000000000001) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120001000000000904", @ANYRESDEC], 0x0) 7.3972439s ago: executing program 3 (id=381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4.754543076s ago: executing program 0 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan1\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f0000000280)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r2 = inotify_init1(0x80800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0xc8, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x90, 0x2, [@TCA_BASIC_POLICE={0x54, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x470, 0x7fffffffdffffffd, 0xbfc1, 0x7, 0x9, {0x8, 0x0, 0x0, 0x8, 0x1, 0x8}, {0x5, 0x0, 0x2a97, 0x3d, 0x5, 0x9356b6f}, 0x2, 0x1, 0x2}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x6}}, @TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x200, 0x4, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 3.747485272s ago: executing program 4 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.693169719s ago: executing program 0 (id=388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="c1188e99b95d02ff4284599645f0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb0, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x7c9, &(0x7f00000039c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x793, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "aaec6abdff6416cba74b557103b4927a9e49165dfec922450543fb23d9d61c30b64c09c4b3625b9b1e657a5e2a03f9c7b8b984abaa"}, {0x1f, 0x8, "1ea1632e7462658b10ee8c2f81a9240269a881b952d2c3655d113710cceaf6b52faec679403f0eff49b930f990a43b0fe6c47c9f47a1583521914500c77c"}, {0x18}, {0x1f, 0xe2, "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"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB="2c7753646e6fad", @ANYRESHEX, @ANYBLOB=',\x00']) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='syscall\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000380)={0x0, 'pim6reg0\x00', {0x1}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000801010000000000010000e90008070600024088630000040004800900010073797a3000000000050003002f000000da0dd02f800fe392cebf3fc9230f4b926183f3512d6834350317cb864e157ae644ad405703178bac4bb23d3e505c1aa328b15d7a8017e520121cd673a14f84bc568804a7f9c349bf716aa807fb6ae7071f67eaabac61df95d2606ff601ba3a76452268fcbb6d19743c1a1e78268e4ef73dda0152dab5b40c60c5d9ab67badc6cb423dfb96466a14aea666eb77b0f7e553d7a5a43e783193cdf6db913bce6dc7a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) syz_emit_ethernet(0x82, &(0x7f0000000480)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x7, 0x1, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@broadcast}, {@dev}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc) 2.769323518s ago: executing program 1 (id=389): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.589863148s ago: executing program 4 (id=390): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2.203874357s ago: executing program 0 (id=391): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000540)={0x40600, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) 2.173433715s ago: executing program 3 (id=392): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) 2.12857216s ago: executing program 2 (id=393): r0 = socket$unix(0x1, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x200004}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 2.126597788s ago: executing program 4 (id=394): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000010c0)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 2.065138006s ago: executing program 1 (id=395): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.983580436s ago: executing program 0 (id=396): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$packet(0x11, 0x2, 0x300) close_range(r7, 0xffffffffffffffff, 0x0) 1.922433899s ago: executing program 3 (id=397): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1", 0x11, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 1.358274224s ago: executing program 1 (id=398): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.316533585s ago: executing program 3 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlink(0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003) 1.269503864s ago: executing program 0 (id=400): lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x8090) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x87) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0xc080) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) 1.225768563s ago: executing program 1 (id=401): fchdir(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ustat(0xb, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES32=r1], 0xa8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 649.886697ms ago: executing program 4 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="c1188e99b95d02ff4284599645f0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb0, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x7c9, &(0x7f00000039c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x793, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "aaec6abdff6416cba74b557103b4927a9e49165dfec922450543fb23d9d61c30b64c09c4b3625b9b1e657a5e2a03f9c7b8b984abaa"}, {0x1f, 0x8, "1ea1632e7462658b10ee8c2f81a9240269a881b952d2c3655d113710cceaf6b52faec679403f0eff49b930f990a43b0fe6c47c9f47a1583521914500c77c"}, {0x18}, {0x1f, 0xe2, "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"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7753646e6fad", @ANYRESHEX, @ANYBLOB=',\x00']) read$msr(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='syscall\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000380)={0x0, 'pim6reg0\x00', {0x1}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000801010000000000010000e90008070600024088630000040004800900010073797a3000000000050003002f000000da0dd02f800fe392cebf3fc9230f4b926183f3512d6834350317cb864e157ae644ad405703178bac4bb23d3e505c1aa328b15d7a8017e520121cd673a14f84bc568804a7f9c349bf716aa807fb6ae7071f67eaabac61df95d2606ff601ba3a76452268fcbb6d19743c1a1e78268e4ef73dda0152dab5b40c60c5d9ab67badc6cb423dfb96466a14aea666eb77b0f7e553d7a5a43e783193cdf6db913bce6dc7a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) syz_emit_ethernet(0x82, &(0x7f0000000480)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x7, 0x1, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@broadcast}, {@dev}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc) 566.258645ms ago: executing program 2 (id=403): r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="00000000000000f01f02000014000010b7030000000000008500000008000000bf09209500000000000000bd9a00000000009d97e7683eea69fa0085700000a0000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00'}, 0x94) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000005c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000ecae1c03361f5de0da0058640000"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) write(r4, &(0x7f0000000640), 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f00000000c0)={0x10, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000a40)) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x3, {0x6, 0x2, 0x6, 0x4, 0x3, 0x10}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) prctl$PR_SET_IO_FLUSHER(0x41, 0x800000000000001) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120001000000000904", @ANYRESDEC], 0x0) 428.127471ms ago: executing program 4 (id=404): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) 223.591412ms ago: executing program 3 (id=405): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) gettid() connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = dup(r3) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATFS(r6, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43) 123.662454ms ago: executing program 0 (id=406): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000002680)=""/4108, 0x100c}], 0x1, 0x1e, 0x20704513) 0s ago: executing program 4 (id=407): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0xffff0000, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x602600, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 66.511794][ T30] audit: type=1400 audit(1763132123.707:62): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.536331][ T30] audit: type=1400 audit(1763132123.727:63): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.539410][ T5808] cgroup: Unknown subsys name 'net' [ 66.566321][ T30] audit: type=1400 audit(1763132123.757:64): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.684313][ T5808] cgroup: Unknown subsys name 'cpuset' [ 66.692486][ T5808] cgroup: Unknown subsys name 'rlimit' [ 66.840404][ T30] audit: type=1400 audit(1763132124.027:65): avc: denied { setattr } for pid=5808 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.864233][ T30] audit: type=1400 audit(1763132124.027:66): avc: denied { create } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.895236][ T30] audit: type=1400 audit(1763132124.027:67): avc: denied { write } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.916726][ T30] audit: type=1400 audit(1763132124.027:68): avc: denied { read } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.938696][ T30] audit: type=1400 audit(1763132124.027:69): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.963576][ T30] audit: type=1400 audit(1763132124.027:70): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.987959][ T30] audit: type=1400 audit(1763132124.087:71): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.991201][ T5810] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 68.052096][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.144089][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.150444][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.142237][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 76.142252][ T30] audit: type=1400 audit(1763132133.337:78): avc: denied { create } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.210808][ T30] audit: type=1400 audit(1763132133.337:79): avc: denied { read write } for pid=5823 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.235083][ T30] audit: type=1400 audit(1763132133.337:80): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.259286][ T30] audit: type=1400 audit(1763132133.367:81): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="socket:[4667]" dev="sockfs" ino=4667 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.265417][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.297407][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.315806][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.332555][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.332566][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.333316][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.347408][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.371505][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.379806][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.382677][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.394681][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.395140][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.403364][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.409844][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.423353][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.424673][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.432223][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.438738][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.452063][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.452310][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.460256][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.473979][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.481179][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.485004][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.498805][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.509193][ T30] audit: type=1400 audit(1763132133.657:83): avc: denied { open } for pid=5827 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.560094][ T30] audit: type=1400 audit(1763132133.657:84): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.585413][ T30] audit: type=1400 audit(1763132133.577:82): avc: denied { read } for pid=5823 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.921430][ T30] audit: type=1400 audit(1763132134.107:85): avc: denied { module_request } for pid=5824 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.005814][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 77.039407][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 77.169024][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 77.304235][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.312296][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.320978][ T5824] bridge_slave_0: entered allmulticast mode [ 77.328150][ T5824] bridge_slave_0: entered promiscuous mode [ 77.339699][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.346975][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.354210][ T5824] bridge_slave_1: entered allmulticast mode [ 77.361016][ T5824] bridge_slave_1: entered promiscuous mode [ 77.393885][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 77.412428][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 77.457781][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.465728][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.473276][ T5834] bridge_slave_0: entered allmulticast mode [ 77.480013][ T5834] bridge_slave_0: entered promiscuous mode [ 77.487680][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.494866][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.502087][ T5822] bridge_slave_0: entered allmulticast mode [ 77.509029][ T5822] bridge_slave_0: entered promiscuous mode [ 77.525387][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.537451][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.553863][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.561019][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.568793][ T5834] bridge_slave_1: entered allmulticast mode [ 77.575653][ T5834] bridge_slave_1: entered promiscuous mode [ 77.582244][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.589325][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.597017][ T5822] bridge_slave_1: entered allmulticast mode [ 77.603941][ T5822] bridge_slave_1: entered promiscuous mode [ 77.674985][ T5824] team0: Port device team_slave_0 added [ 77.682639][ T5824] team0: Port device team_slave_1 added [ 77.753317][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.765016][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.776035][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.800471][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.807462][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.833608][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.845158][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.852365][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.859563][ T5823] bridge_slave_0: entered allmulticast mode [ 77.866518][ T5823] bridge_slave_0: entered promiscuous mode [ 77.883605][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.901704][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.908652][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.934778][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.946394][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.953678][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.960873][ T5823] bridge_slave_1: entered allmulticast mode [ 77.967908][ T5823] bridge_slave_1: entered promiscuous mode [ 78.026148][ T5834] team0: Port device team_slave_0 added [ 78.042268][ T5822] team0: Port device team_slave_0 added [ 78.048214][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.055422][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.062685][ T5827] bridge_slave_0: entered allmulticast mode [ 78.069592][ T5827] bridge_slave_0: entered promiscuous mode [ 78.080731][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.091972][ T5834] team0: Port device team_slave_1 added [ 78.099039][ T5822] team0: Port device team_slave_1 added [ 78.105109][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.112896][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.120052][ T5827] bridge_slave_1: entered allmulticast mode [ 78.126921][ T5827] bridge_slave_1: entered promiscuous mode [ 78.143122][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.224017][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.237903][ T5824] hsr_slave_0: entered promiscuous mode [ 78.244704][ T5824] hsr_slave_1: entered promiscuous mode [ 78.259350][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.266795][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.292991][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.305284][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.312263][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.338614][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.351644][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.362697][ T5823] team0: Port device team_slave_0 added [ 78.369415][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.376435][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.402485][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.413989][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.420923][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.447090][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.468269][ T5823] team0: Port device team_slave_1 added [ 78.502522][ T5141] Bluetooth: hci3: command tx timeout [ 78.502797][ T5839] Bluetooth: hci0: command tx timeout [ 78.508691][ T5837] Bluetooth: hci1: command tx timeout [ 78.517315][ T5827] team0: Port device team_slave_0 added [ 78.557460][ T5827] team0: Port device team_slave_1 added [ 78.581613][ T5837] Bluetooth: hci4: command tx timeout [ 78.581616][ T5839] Bluetooth: hci2: command tx timeout [ 78.613197][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.620148][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.646394][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.692269][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.699224][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.725344][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.740183][ T5834] hsr_slave_0: entered promiscuous mode [ 78.746455][ T5834] hsr_slave_1: entered promiscuous mode [ 78.752597][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 78.758376][ T5834] Cannot create hsr debugfs directory [ 78.773045][ T5822] hsr_slave_0: entered promiscuous mode [ 78.779169][ T5822] hsr_slave_1: entered promiscuous mode [ 78.785434][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 78.791149][ T5822] Cannot create hsr debugfs directory [ 78.797410][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.804652][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.830583][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.864064][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.871003][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.897307][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.964493][ T5823] hsr_slave_0: entered promiscuous mode [ 78.970631][ T5823] hsr_slave_1: entered promiscuous mode [ 78.976874][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 78.982711][ T5823] Cannot create hsr debugfs directory [ 79.128344][ T5827] hsr_slave_0: entered promiscuous mode [ 79.134680][ T5827] hsr_slave_1: entered promiscuous mode [ 79.140611][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 79.146531][ T5827] Cannot create hsr debugfs directory [ 79.323348][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.353732][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.379419][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.411137][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.468678][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.480275][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.490940][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.505148][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.574968][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.593682][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.603911][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.615292][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.689252][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.707609][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.721260][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.731161][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.740965][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.767441][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.792877][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.800030][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.810351][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.817457][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.896321][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.926293][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.938402][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.949219][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.973180][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.003178][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.027865][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.035032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.070786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.077960][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.087418][ T30] audit: type=1400 audit(1763132137.277:86): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.195477][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.246521][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.288500][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.317129][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.347958][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.368519][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.375717][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.389505][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.396696][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.407577][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.414719][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.455600][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.462768][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.481284][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.565412][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.585232][ T5839] Bluetooth: hci1: command tx timeout [ 80.585403][ T5837] Bluetooth: hci3: command tx timeout [ 80.590646][ T5839] Bluetooth: hci0: command tx timeout [ 80.618103][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.628151][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.635324][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.662652][ T5839] Bluetooth: hci4: command tx timeout [ 80.663233][ T5837] Bluetooth: hci2: command tx timeout [ 80.674418][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.681574][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.813963][ T5824] veth0_vlan: entered promiscuous mode [ 80.830852][ T5822] veth0_vlan: entered promiscuous mode [ 80.863261][ T5824] veth1_vlan: entered promiscuous mode [ 80.870010][ T5822] veth1_vlan: entered promiscuous mode [ 80.985788][ T5822] veth0_macvtap: entered promiscuous mode [ 81.014153][ T5822] veth1_macvtap: entered promiscuous mode [ 81.057126][ T5824] veth0_macvtap: entered promiscuous mode [ 81.082730][ T5824] veth1_macvtap: entered promiscuous mode [ 81.097919][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.122949][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.146521][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.158120][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.183050][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.204087][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213112][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.224810][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.245156][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.287924][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.316976][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.325924][ T3503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.335171][ T3503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.344948][ T3503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.391203][ T10] cfg80211: failed to load regulatory.db [ 81.393065][ T5834] veth0_vlan: entered promiscuous mode [ 81.415707][ T3503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.440069][ T5834] veth1_vlan: entered promiscuous mode [ 81.466254][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.488949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.521660][ T5823] veth0_vlan: entered promiscuous mode [ 81.560903][ T5823] veth1_vlan: entered promiscuous mode [ 81.616440][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.641784][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.652463][ T5834] veth0_macvtap: entered promiscuous mode [ 81.678028][ T5827] veth0_vlan: entered promiscuous mode [ 81.683904][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.691299][ T30] audit: type=1400 audit(1763132138.877:87): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.yK8hO9/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 81.721888][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.724610][ T30] audit: type=1400 audit(1763132138.877:88): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.751765][ T5834] veth1_macvtap: entered promiscuous mode [ 81.773673][ T5823] veth0_macvtap: entered promiscuous mode [ 81.794528][ T30] audit: type=1400 audit(1763132138.887:89): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.yK8hO9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.805781][ T5827] veth1_vlan: entered promiscuous mode [ 81.829152][ T30] audit: type=1400 audit(1763132138.887:90): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.831107][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.852827][ T30] audit: type=1400 audit(1763132138.887:91): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.yK8hO9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.937615][ T30] audit: type=1400 audit(1763132138.887:92): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.yK8hO9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.955468][ T5823] veth1_macvtap: entered promiscuous mode [ 82.010568][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022939][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.032892][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.040778][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.049775][ T30] audit: type=1400 audit(1763132138.927:93): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.076494][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.083883][ T30] audit: type=1400 audit(1763132138.947:94): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.095889][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.118738][ T30] audit: type=1400 audit(1763132138.947:95): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=7523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.142447][ T30] audit: type=1400 audit(1763132138.947:96): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.158259][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.175990][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189466][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.198398][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.225794][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240378][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.260797][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.300361][ T5827] veth0_macvtap: entered promiscuous mode [ 82.327728][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.386101][ T5827] veth1_macvtap: entered promiscuous mode [ 82.401740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.424172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.662346][ T5837] Bluetooth: hci3: command tx timeout [ 82.662559][ T5839] Bluetooth: hci1: command tx timeout [ 82.667794][ T5837] Bluetooth: hci0: command tx timeout [ 82.745234][ T5837] Bluetooth: hci4: command tx timeout [ 82.751552][ T5839] Bluetooth: hci2: command tx timeout [ 82.813604][ T5947] batman_adv: batadv0: Adding interface: gretap1 [ 82.825190][ T5947] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.861494][ T5947] batman_adv: batadv0: Interface activated: gretap1 [ 82.886344][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.891385][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.916081][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.947298][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.003221][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.024489][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.040474][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.063210][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.097255][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.101957][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.114533][ T5952] TCP: TCP_TX_DELAY enabled [ 83.119195][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.124099][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.269216][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.280985][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.343334][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.373851][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.588109][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.540929][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.743074][ T5839] Bluetooth: hci1: command tx timeout [ 84.748510][ T5839] Bluetooth: hci0: command tx timeout [ 84.754297][ T5837] Bluetooth: hci3: command tx timeout [ 84.822188][ T5141] Bluetooth: hci4: command tx timeout [ 84.828126][ T5839] Bluetooth: hci2: command tx timeout [ 85.908440][ T5980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5980 comm=syz.1.2 [ 85.924934][ T5980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.942073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.052140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.622613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.623282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.701355][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 86.701372][ T30] audit: type=1400 audit(1763132143.677:134): avc: denied { mount } for pid=5983 comm="syz.2.14" name="/" dev="ramfs" ino=9010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.767842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.776488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.790315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.810134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.228163][ T30] audit: type=1400 audit(1763132144.357:135): avc: denied { create } for pid=5986 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.643491][ T30] audit: type=1400 audit(1763132144.367:136): avc: denied { write } for pid=5986 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.666552][ T30] audit: type=1400 audit(1763132144.377:137): avc: denied { connect } for pid=5986 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.686958][ T30] audit: type=1400 audit(1763132144.377:138): avc: denied { name_connect } for pid=5986 comm="syz.1.15" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.210213][ T6000] No buffer was provided with the request [ 88.250851][ T30] audit: type=1400 audit(1763132145.387:139): avc: denied { read } for pid=5989 comm="syz.4.16" name="media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.605846][ T30] audit: type=1400 audit(1763132145.387:140): avc: denied { open } for pid=5989 comm="syz.4.16" path="/dev/media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.629227][ T30] audit: type=1400 audit(1763132145.397:141): avc: denied { ioctl } for pid=5989 comm="syz.4.16" path="/dev/media1" dev="devtmpfs" ino=933 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.035948][ T30] audit: type=1400 audit(1763132146.227:142): avc: denied { create } for pid=6010 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.122941][ T30] audit: type=1400 audit(1763132146.247:143): avc: denied { bind } for pid=6010 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.221151][ T6058] netlink: 'syz.1.28': attribute type 2 has an invalid length. [ 91.251534][ T6058] netlink: 1 bytes leftover after parsing attributes in process `syz.1.28'. [ 91.357578][ T6062] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.920369][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.929913][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.939226][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.947275][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.961409][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.970296][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.980061][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.988222][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 91.996911][ T6080] netlink: 'syz.4.35': attribute type 3 has an invalid length. [ 92.277030][ T6085] process 'syz.0.32' launched './file1' with NULL argv: empty string added [ 92.350444][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 92.350459][ T30] audit: type=1400 audit(1763132149.477:162): avc: denied { execute_no_trans } for pid=6073 comm="syz.0.32" path="/6/file1" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.391127][ T6076] team0: Device ipvlan1 failed to register rx_handler [ 92.799123][ T6092] binder: 6091:6092 ioctl c0306201 0 returned -14 [ 92.841457][ T30] audit: type=1400 audit(1763132150.027:163): avc: denied { read write } for pid=6087 comm="syz.2.36" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.947031][ T30] audit: type=1400 audit(1763132150.057:164): avc: denied { open } for pid=6087 comm="syz.2.36" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.056234][ T30] audit: type=1400 audit(1763132151.237:165): avc: denied { read write } for pid=6097 comm="syz.3.40" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.088318][ T6103] Zero length message leads to an empty skb [ 94.127875][ T3483] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.136325][ T30] audit: type=1400 audit(1763132151.277:166): avc: denied { open } for pid=6097 comm="syz.3.40" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.199320][ T30] audit: type=1400 audit(1763132151.387:167): avc: denied { ioctl } for pid=6105 comm="syz.4.43" path="socket:[10369]" dev="sockfs" ino=10369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.241443][ T30] audit: type=1400 audit(1763132151.387:168): avc: denied { write } for pid=6105 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.355918][ T30] audit: type=1400 audit(1763132151.547:169): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.582386][ T30] audit: type=1400 audit(1763132151.757:170): avc: denied { ioctl } for pid=6109 comm="syz.2.46" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10381 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.943125][ T30] audit: type=1400 audit(1763132152.087:171): avc: denied { create } for pid=6107 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.032946][ T6113] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 95.425756][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 96.181454][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.181879][ T5141] Bluetooth: hci5: command 0x1003 tx timeout [ 97.393535][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 97.393550][ T30] audit: type=1400 audit(1763132154.537:179): avc: denied { create } for pid=6141 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.559355][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 97.771435][ T30] audit: type=1400 audit(1763132154.577:180): avc: denied { create } for pid=6144 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.874765][ T30] audit: type=1400 audit(1763132154.587:181): avc: denied { connect } for pid=6144 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.075286][ T30] audit: type=1400 audit(1763132154.587:182): avc: denied { write } for pid=6144 comm="syz.1.56" laddr=fe80::38aa:84ff:fe1c:fac3 lport=40151 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.187265][ T30] audit: type=1400 audit(1763132154.797:183): avc: denied { create } for pid=6146 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.237972][ T30] audit: type=1400 audit(1763132154.837:184): avc: denied { bind } for pid=6146 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.476308][ T30] audit: type=1400 audit(1763132155.667:185): avc: denied { create } for pid=6164 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.536982][ T30] audit: type=1400 audit(1763132155.687:186): avc: denied { connect } for pid=6164 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.720196][ T30] audit: type=1400 audit(1763132155.747:187): avc: denied { mount } for pid=6167 comm="syz.2.64" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 99.404726][ T30] audit: type=1326 audit(1763132156.597:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.68" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37cf78f6c9 code=0x0 [ 99.529821][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 99.539204][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 100.162940][ T6205] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 101.770515][ T6215] batman_adv: batadv0: Adding interface: gretap1 [ 101.780008][ T6215] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.824727][ T6223] overlayfs: overlapping lowerdir path [ 101.831288][ T6215] batman_adv: batadv0: Interface activated: gretap1 [ 102.236081][ T6241] loop5: detected capacity change from 0 to 7 [ 102.512052][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.483084][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 103.483099][ T30] audit: type=1400 audit(1763132159.767:195): avc: denied { create } for pid=6243 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.534484][ T6248] infiniband syz2: set down [ 103.539155][ T6248] infiniband syz2: added ipvlan0 [ 103.611644][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 103.828106][ T6248] RDS/IB: syz2: added [ 103.832708][ T6248] smc: adding ib device syz2 with port count 1 [ 103.839048][ T6248] smc: ib device syz2 port 1 has no pnetid [ 104.265888][ T30] audit: type=1400 audit(1763132159.767:196): avc: denied { write } for pid=6243 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.289530][ T5831] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.298238][ T5831] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.404703][ T5831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.443995][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.454113][ T5831] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.464115][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.494490][ T6241] Dev loop5: unable to read RDB block 7 [ 104.508386][ T5831] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.510412][ T6241] loop5: unable to read partition table [ 104.524074][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.552662][ T6241] loop5: partition table beyond EOD, truncated [ 104.569165][ T6241] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 104.709206][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'. [ 104.949259][ T5831] usb 2-1: config 0 descriptor?? [ 105.375819][ T5831] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.440613][ T5831] usb 2-1: USB disconnect, device number 2 [ 105.521973][ T5831] usblp0: removed [ 106.356176][ T30] audit: type=1400 audit(1763132163.547:197): avc: denied { mount } for pid=6277 comm="syz.4.98" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 106.574868][ T6279] veth0_to_team: entered promiscuous mode [ 106.580659][ T6279] veth0_to_team: entered allmulticast mode [ 106.834799][ T30] audit: type=1400 audit(1763132164.017:198): avc: denied { read } for pid=6286 comm="syz.1.102" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.932546][ T30] audit: type=1400 audit(1763132164.127:199): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 107.438070][ T30] audit: type=1400 audit(1763132164.627:200): avc: denied { create } for pid=6294 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.536023][ T30] audit: type=1400 audit(1763132164.727:201): avc: denied { read } for pid=6294 comm="syz.1.105" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.650860][ T30] audit: type=1400 audit(1763132164.727:202): avc: denied { open } for pid=6294 comm="syz.1.105" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.746942][ T30] audit: type=1400 audit(1763132164.757:203): avc: denied { ioctl } for pid=6294 comm="syz.1.105" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.888180][ T30] audit: type=1400 audit(1763132164.967:204): avc: denied { accept } for pid=6298 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.091395][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 109.091411][ T30] audit: type=1400 audit(1763132166.277:209): avc: denied { name_bind } for pid=6319 comm="syz.4.112" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.118744][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.202024][ T6318] batman_adv: batadv0: Adding interface: gretap1 [ 109.208395][ T6318] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.233760][ T6318] batman_adv: batadv0: Interface activated: gretap1 [ 109.842934][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 110.155499][ T30] audit: type=1400 audit(1763132167.167:210): avc: denied { setopt } for pid=6326 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.205724][ T30] audit: type=1400 audit(1763132167.167:211): avc: denied { bind } for pid=6326 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.225005][ T30] audit: type=1400 audit(1763132167.167:212): avc: denied { name_bind } for pid=6326 comm="syz.4.115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.265391][ T30] audit: type=1400 audit(1763132167.177:213): avc: denied { node_bind } for pid=6326 comm="syz.4.115" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 110.575927][ T6342] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 114.002306][ T6362] EXT4-fs (loop2): unable to read superblock [ 114.013732][ T30] audit: type=1400 audit(1763132171.187:214): avc: denied { mounton } for pid=6361 comm="syz.2.125" path="/25/bus" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.405137][ T30] audit: type=1400 audit(1763132172.597:215): avc: denied { create } for pid=6370 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.773416][ T30] audit: type=1400 audit(1763132172.617:216): avc: denied { bind } for pid=6370 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.813593][ T6373] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 115.869261][ T30] audit: type=1400 audit(1763132172.627:217): avc: denied { accept } for pid=6370 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.899324][ T30] audit: type=1400 audit(1763132172.937:218): avc: denied { sys_module } for pid=6370 comm="syz.3.129" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.945701][ T30] audit: type=1400 audit(1763132173.137:219): avc: denied { read } for pid=6387 comm="syz.2.131" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.252049][ T5891] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 116.341445][ T30] audit: type=1400 audit(1763132173.137:220): avc: denied { open } for pid=6387 comm="syz.2.131" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.433226][ T5891] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 116.459564][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.510024][ T5891] usb 5-1: config 0 has no interface number 0 [ 116.528687][ T5891] usb 5-1: config 0 interface 159 has no altsetting 0 [ 116.548020][ T5891] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 116.579235][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 116.611271][ T5891] usb 5-1: Product: syz [ 116.630464][ T5891] usb 5-1: SerialNumber: syz [ 116.652550][ T5891] usb 5-1: config 0 descriptor?? [ 116.740496][ T30] audit: type=1400 audit(1763132173.927:221): avc: denied { create } for pid=6402 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.862093][ T30] audit: type=1400 audit(1763132174.047:222): avc: denied { connect } for pid=6402 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.946744][ T6381] syz.4.130 uses obsolete (PF_INET,SOCK_PACKET) [ 117.263512][ T5831] usb 5-1: USB disconnect, device number 2 [ 117.415607][ T6419] binder: 6418:6419 ioctl c0306201 0 returned -14 [ 118.018376][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'. [ 118.839787][ T30] audit: type=1400 audit(1763132175.587:223): avc: denied { mount } for pid=6430 comm="syz.4.143" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 118.861711][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.970738][ T6433] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 118.970738][ T6433] program syz.2.144 not setting count and/or reply_len properly [ 119.319909][ T30] audit: type=1400 audit(1763132176.147:224): avc: denied { write } for pid=6432 comm="syz.2.144" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.761671][ T6452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.148'. [ 121.181784][ T30] audit: type=1400 audit(1763132178.317:225): avc: denied { sqpoll } for pid=6456 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 121.273535][ T6464] syzkaller0: entered promiscuous mode [ 121.279246][ T6464] syzkaller0: entered allmulticast mode [ 121.434599][ T6464] tipc: Started in network mode [ 121.442127][ T6464] tipc: Node identity 729b065a39d7, cluster identity 4711 [ 121.465912][ T6464] tipc: Enabled bearer , priority 0 [ 121.478926][ T6463] tipc: Resetting bearer [ 121.495324][ T6463] tipc: Disabling bearer [ 121.826645][ T6475] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 122.873072][ T30] audit: type=1400 audit(1763132180.047:226): avc: denied { ioctl } for pid=6471 comm="syz.1.157" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 122.898469][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.153047][ T30] audit: type=1400 audit(1763132180.147:227): avc: denied { create } for pid=6469 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.313845][ T30] audit: type=1400 audit(1763132180.507:228): avc: denied { listen } for pid=6471 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.762273][ T30] audit: type=1400 audit(1763132180.597:229): avc: denied { mount } for pid=6480 comm="syz.4.158" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 124.829267][ T30] audit: type=1400 audit(1763132180.607:230): avc: denied { mounton } for pid=6480 comm="syz.4.158" path="/34/file0" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.991985][ T30] audit: type=1400 audit(1763132180.627:231): avc: denied { read } for pid=6480 comm="syz.4.158" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.243786][ T30] audit: type=1400 audit(1763132180.627:232): avc: denied { open } for pid=6480 comm="syz.4.158" path="/34/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.101401][ T30] audit: type=1400 audit(1763132180.627:233): avc: denied { read } for pid=6480 comm="syz.4.158" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.126524][ T30] audit: type=1400 audit(1763132180.637:234): avc: denied { read } for pid=6480 comm="syz.4.158" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.200709][ T30] audit: type=1400 audit(1763132182.107:235): avc: denied { ioctl } for pid=6469 comm="syz.0.156" path="socket:[11732]" dev="sockfs" ino=11732 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.595005][ T6500] batman_adv: batadv0: Adding interface: gretap1 [ 126.603629][ T30] audit: type=1400 audit(1763132182.147:236): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 126.641892][ T30] audit: type=1400 audit(1763132182.467:237): avc: denied { watch watch_reads } for pid=6485 comm="syz.1.160" path="/39" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.757296][ T6500] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.783687][ T6500] batman_adv: batadv0: Interface activated: gretap1 [ 126.791001][ T30] audit: type=1400 audit(1763132183.817:238): avc: denied { read } for pid=6504 comm="syz.3.164" path="socket:[11784]" dev="sockfs" ino=11784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.384575][ T6528] syz2: rxe_newlink: already configured on ipvlan0 [ 130.040932][ T6543] syz2: rxe_newlink: already configured on ipvlan0 [ 131.174665][ T30] audit: type=1400 audit(1763132188.357:239): avc: denied { connect } for pid=6547 comm="syz.2.177" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.593535][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.601778][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.068544][ T6567] veth0_to_team: entered promiscuous mode [ 133.074371][ T6567] veth0_to_team: entered allmulticast mode [ 133.094728][ T6572] netlink: 288 bytes leftover after parsing attributes in process `syz.1.185'. [ 133.432787][ T6584] EXT4-fs (loop3): unable to read superblock [ 136.043510][ T6621] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 137.261381][ T30] audit: type=1400 audit(1763132194.427:240): avc: denied { write } for pid=6622 comm="syz.2.204" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.314275][ T6626] binder: 6622:6626 ioctl c0306201 0 returned -14 [ 137.411836][ T30] audit: type=1400 audit(1763132194.597:241): avc: denied { create } for pid=6622 comm="syz.2.204" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 139.162589][ T6644] binder: 6634:6644 ioctl 4018620d 0 returned -22 [ 139.175513][ T6644] binder: 6634:6644 ioctl c0306201 0 returned -14 [ 139.461952][ T30] audit: type=1400 audit(1763132196.437:242): avc: denied { execute } for pid=6634 comm="syz.0.207" name="file2" dev="ramfs" ino=12224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 139.544957][ T30] audit: type=1400 audit(1763132196.437:243): avc: denied { execute_no_trans } for pid=6634 comm="syz.0.207" path="/file2" dev="ramfs" ino=12224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 139.781099][ T6655] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 142.439174][ T6676] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 143.226720][ T30] audit: type=1400 audit(1763132200.407:244): avc: denied { ioctl } for pid=6667 comm="syz.4.218" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.481485][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.691356][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 143.790033][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.829048][ T6683] veth0_to_team: entered promiscuous mode [ 143.834887][ T6683] veth0_to_team: entered allmulticast mode [ 143.890491][ T9] usb 5-1: Product: syz [ 143.905537][ T9] usb 5-1: Manufacturer: syz [ 143.921740][ T9] usb 5-1: SerialNumber: syz [ 144.658531][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 144.686604][ T30] audit: type=1400 audit(1763132201.397:245): avc: denied { getopt } for pid=6686 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.735740][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 145.016914][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 145.186651][ T30] audit: type=1400 audit(1763132202.247:246): avc: denied { create } for pid=6690 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.219796][ T30] audit: type=1400 audit(1763132202.277:247): avc: denied { bind } for pid=6690 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.321190][ T6695] overlayfs: overlapping lowerdir path [ 145.843419][ T6677] input: syz1 as /devices/virtual/input/input6 [ 145.895781][ T30] audit: type=1400 audit(1763132203.067:248): avc: denied { read } for pid=5175 comm="acpid" name="js0" dev="devtmpfs" ino=2805 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.970259][ T30] audit: type=1400 audit(1763132203.067:249): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2805 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.051219][ T30] audit: type=1400 audit(1763132203.077:250): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2805 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.129583][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.153352][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.233643][ T6714] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.601413][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 146.613478][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 146.624605][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 146.874269][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 146.899665][ T9] usb 5-1: USB disconnect, device number 3 [ 149.709962][ T6752] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 149.746051][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.769933][ T6752] kvm: pic: level sensitive irq not supported [ 149.770155][ T6752] kvm: pic: non byte read [ 149.784835][ T6752] kvm: pic: level sensitive irq not supported [ 149.784890][ T6752] kvm: pic: non byte read [ 149.797761][ T6752] kvm: pic: level sensitive irq not supported [ 149.797817][ T6752] kvm: pic: non byte read [ 150.028763][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.041368][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.560466][ T5872] usb 4-1: Product: syz [ 150.944946][ T5872] usb 4-1: Manufacturer: syz [ 150.949574][ T5872] usb 4-1: SerialNumber: syz [ 151.361474][ T30] audit: type=1400 audit(1763132208.547:251): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 151.539434][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 151.553705][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 151.769093][ T30] audit: type=1400 audit(1763132208.717:252): avc: denied { ioctl } for pid=6776 comm="syz.4.251" path="socket:[13707]" dev="sockfs" ino=13707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.557323][ T30] audit: type=1400 audit(1763132208.727:253): avc: denied { bind } for pid=6776 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.585713][ T30] audit: type=1400 audit(1763132208.727:254): avc: denied { setopt } for pid=6776 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.796833][ T6781] veth0_to_team: entered promiscuous mode [ 152.802697][ T6781] veth0_to_team: entered allmulticast mode [ 152.947954][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 152.959935][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 152.970749][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.119207][ T5872] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 153.219490][ T5872] usb 4-1: USB disconnect, device number 2 [ 154.756002][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 154.871434][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.964184][ T30] audit: type=1400 audit(1763132212.137:255): avc: denied { append } for pid=6826 comm="syz.3.267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.122417][ T5872] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.199862][ T30] audit: type=1400 audit(1763132212.217:256): avc: denied { map } for pid=6826 comm="syz.3.267" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.224787][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.251707][ T5872] usb 1-1: Product: syz [ 155.266772][ T5872] usb 1-1: Manufacturer: syz [ 155.272127][ T5872] usb 1-1: SerialNumber: syz [ 155.760699][ T6840] tipc: Started in network mode [ 155.765728][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 155.778768][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 155.801919][ T6840] tipc: Node identity d6cf823fcb7f, cluster identity 4711 [ 155.848872][ T30] audit: type=1400 audit(1763132213.037:257): avc: denied { create } for pid=6842 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.850712][ T6840] tipc: Enabled bearer , priority 0 [ 155.894556][ T6841] syzkaller0: entered promiscuous mode [ 156.074102][ T6841] syzkaller0: entered allmulticast mode [ 156.232942][ T30] audit: type=1400 audit(1763132213.417:258): avc: denied { ioctl } for pid=6846 comm="syz.2.274" path="socket:[14481]" dev="sockfs" ino=14481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.291860][ T6848] validate_nla: 45 callbacks suppressed [ 156.291875][ T6848] netlink: 'syz.2.274': attribute type 10 has an invalid length. [ 156.406109][ T30] audit: type=1400 audit(1763132213.587:259): avc: denied { create } for pid=6849 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.443792][ T6852] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 156.476017][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.484104][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.508299][ T30] audit: type=1400 audit(1763132213.587:260): avc: denied { setopt } for pid=6849 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.577362][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 156.649213][ T30] audit: type=1400 audit(1763132213.587:261): avc: denied { connect } for pid=6849 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.760525][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.767785][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.776020][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.783175][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.807815][ T6820] input: syz1 as /devices/virtual/input/input8 [ 156.950545][ T30] audit: type=1400 audit(1763132213.637:262): avc: denied { append } for pid=6849 comm="syz.3.275" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.196002][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.216350][ T6848] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.242233][ T30] audit: type=1400 audit(1763132214.427:263): avc: denied { write } for pid=6855 comm="syz.1.276" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.252265][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.275844][ T6840] tipc: Resetting bearer [ 157.342499][ T6839] tipc: Resetting bearer [ 157.385954][ T6839] tipc: Disabling bearer [ 157.397206][ T6847] bridge_slave_1: left allmulticast mode [ 157.411354][ T6847] bridge_slave_1: left promiscuous mode [ 157.417181][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.434814][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 157.458559][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 157.469888][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 157.482892][ T6847] bridge_slave_0: left allmulticast mode [ 157.507981][ T5872] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 157.516777][ T6847] bridge_slave_0: left promiscuous mode [ 157.534774][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.545530][ T5872] usb 1-1: USB disconnect, device number 2 [ 157.891634][ T6847] bond0: (slave bridge0): Releasing backup interface [ 158.027011][ T5914] tipc: Node number set to 498106943 [ 158.095628][ T6879] syzkaller0: entered promiscuous mode [ 158.104077][ T6879] syzkaller0: entered allmulticast mode [ 158.589217][ T6900] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.474399][ T30] audit: type=1400 audit(1763132216.987:264): avc: denied { accept } for pid=6904 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 162.381763][ T6936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6936 comm=syz.3.298 [ 162.394845][ T30] audit: type=1400 audit(1763132219.583:265): avc: denied { setopt } for pid=6933 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.720013][ T30] audit: type=1400 audit(1763132220.817:266): avc: denied { create } for pid=6963 comm="syz.0.296" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.758096][ T6961] Bluetooth: MGMT ver 1.23 [ 163.806283][ T6968] tipc: Started in network mode [ 163.811341][ T6968] tipc: Node identity b2108ff6ab5d, cluster identity 4711 [ 163.889534][ T30] audit: type=1400 audit(1763132220.826:267): avc: denied { mounton } for pid=6963 comm="syz.0.296" path="/50/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.912845][ T30] audit: type=1400 audit(1763132220.854:268): avc: denied { write } for pid=6958 comm="syz.1.306" path="socket:[14927]" dev="sockfs" ino=14927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.941723][ T6968] tipc: Enabled bearer , priority 0 [ 163.959829][ T30] audit: type=1400 audit(1763132221.032:269): avc: denied { call } for pid=6963 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.979136][ T6970] syzkaller0: entered promiscuous mode [ 163.987455][ T6970] syzkaller0: entered allmulticast mode [ 164.447955][ T6975] tipc: Resetting bearer [ 164.460733][ T6966] tipc: Resetting bearer [ 164.492078][ T6966] tipc: Disabling bearer [ 164.736397][ T30] audit: type=1400 audit(1763132221.761:270): avc: denied { unlink } for pid=5822 comm="syz-executor" name="file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.772378][ T6990] overlayfs: failed to resolve './file1/file0': -2 [ 165.610825][ T30] audit: type=1400 audit(1763132222.030:271): avc: denied { bind } for pid=6979 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.340694][ T30] audit: type=1400 audit(1763132223.265:272): avc: denied { read write } for pid=7008 comm="syz.3.318" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.364855][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.691586][ T30] audit: type=1400 audit(1763132223.265:273): avc: denied { open } for pid=7008 comm="syz.3.318" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 168.621931][ T30] audit: type=1400 audit(1763132224.378:274): avc: denied { create } for pid=7023 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.725736][ T30] audit: type=1400 audit(1763132224.406:275): avc: denied { write } for pid=7023 comm="syz.0.323" path="socket:[15720]" dev="sockfs" ino=15720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 169.804524][ T7068] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 174.350337][ T30] audit: type=1400 audit(1763132230.736:276): avc: denied { create } for pid=7094 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.523411][ T30] audit: type=1400 audit(1763132230.858:277): avc: denied { read } for pid=7094 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.236326][ T7127] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 177.529488][ T7129] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 180.245358][ T7141] syz2: rxe_newlink: already configured on ipvlan0 [ 182.049443][ T30] audit: type=1400 audit(1763132236.936:278): avc: denied { read write } for pid=7136 comm="syz.1.351" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.223132][ T7138] batman_adv: batadv0: Adding interface: gretap1 [ 182.233957][ T7138] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.260531][ T7138] batman_adv: batadv0: Interface activated: gretap1 [ 182.447577][ T30] audit: type=1400 audit(1763132236.936:279): avc: denied { open } for pid=7136 comm="syz.1.351" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.480561][ T30] audit: type=1400 audit(1763132237.955:280): avc: denied { ioctl } for pid=7136 comm="syz.1.351" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.513718][ T977] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.744165][ T977] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 182.843198][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.884864][ T977] usb 2-1: Product: syz [ 182.900312][ T977] usb 2-1: Manufacturer: syz [ 182.913854][ T977] usb 2-1: SerialNumber: syz [ 183.600059][ T977] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 183.612238][ T977] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 183.626292][ T977] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.637685][ T977] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 183.757364][ T977] usb 2-1: USB disconnect, device number 3 [ 183.878610][ T30] audit: type=1400 audit(1763132239.666:281): avc: denied { wake_alarm } for pid=7158 comm="syz.4.356" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.924623][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 184.564661][ T7163] team0: entered promiscuous mode [ 184.576021][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.579861][ T7163] team_slave_0: entered promiscuous mode [ 184.732227][ T7163] team_slave_1: entered promiscuous mode [ 184.813606][ T7163] team0: entered allmulticast mode [ 184.860099][ T7163] team_slave_0: entered allmulticast mode [ 184.890134][ T7163] team_slave_1: entered allmulticast mode [ 184.931080][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.967042][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.093537][ T43] usb 1-1: Product: syz [ 185.100870][ T43] usb 1-1: Manufacturer: syz [ 185.105544][ T43] usb 1-1: SerialNumber: syz [ 185.234039][ T7177] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 186.491217][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 186.520024][ T7165] ALSA: mixer_oss: invalid OSS volume '' [ 186.730207][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 186.741320][ T30] audit: type=1400 audit(1763132242.331:282): avc: denied { getopt } for pid=7179 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.950498][ T7188] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 187.960307][ T30] audit: type=1400 audit(1763132242.434:283): avc: denied { kexec_image_load } for pid=7178 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 188.966909][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 188.995218][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 189.013156][ T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 189.070470][ T43] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 189.161658][ T43] usb 1-1: USB disconnect, device number 3 [ 191.157927][ T7206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 191.256056][ T7210] syzkaller0: entered promiscuous mode [ 191.262067][ T7210] syzkaller0: entered allmulticast mode [ 191.286531][ T7206] kvm: pic: level sensitive irq not supported [ 191.286577][ T7206] kvm: pic: non byte read [ 191.324722][ T7206] kvm: pic: level sensitive irq not supported [ 191.324763][ T7206] kvm: pic: non byte read [ 191.368101][ T7206] kvm: pic: level sensitive irq not supported [ 191.368168][ T7206] kvm: pic: non byte read [ 192.430125][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 192.489475][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 192.729050][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 192.738554][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.747648][ T43] usb 3-1: Product: syz [ 192.751822][ T43] usb 3-1: Manufacturer: syz [ 192.756475][ T43] usb 3-1: SerialNumber: syz [ 193.227642][ T30] audit: type=1400 audit(1763132248.045:284): avc: denied { write } for pid=7236 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.290402][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.315356][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.323008][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.397672][ T7243] bridge_slave_1: left allmulticast mode [ 193.403964][ T7243] bridge_slave_1: left promiscuous mode [ 193.415117][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.493689][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.522023][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.531452][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.717004][ T7225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.728153][ T7243] bridge_slave_0: left allmulticast mode [ 193.738121][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.267306][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 194.286219][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 194.612076][ T7243] bridge_slave_0: left promiscuous mode [ 194.618114][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.284548][ T7227] input: syz1 as /devices/virtual/input/input11 [ 195.370268][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.398929][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.478600][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 195.503798][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 195.528521][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 195.543722][ T43] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 195.566407][ T43] usb 3-1: USB disconnect, device number 2 [ 196.379559][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.394707][ T24] usb 2-1: USB disconnect, device number 4 [ 196.402848][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.308219][ T7276] syzkaller0: entered promiscuous mode [ 197.318720][ T7276] syzkaller0: entered allmulticast mode [ 197.558487][ T30] audit: type=1400 audit(1763132252.365:285): avc: denied { connect } for pid=7273 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.574137][ T30] audit: type=1400 audit(1763132253.403:286): avc: denied { getattr } for pid=7301 comm="syz.1.401" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 198.664870][ T30] audit: type=1400 audit(1763132253.412:287): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.691093][ T30] audit: type=1400 audit(1763132253.412:288): avc: denied { search } for pid=5485 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.761912][ T30] audit: type=1400 audit(1763132253.412:289): avc: denied { search } for pid=5485 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.806296][ T30] audit: type=1400 audit(1763132253.412:290): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=3207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.888500][ T30] audit: type=1400 audit(1763132253.422:291): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.916947][ T30] audit: type=1400 audit(1763132253.422:292): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.945023][ T30] audit: type=1400 audit(1763132253.590:293): avc: denied { read open } for pid=7309 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.044727][ T977] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 199.049630][ T30] audit: type=1400 audit(1763132253.590:294): avc: denied { getattr } for pid=7309 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.340432][ T7325] siw: device registration error -23 [ 199.349797][ T7327] smc: removing ib device syz2 [ 199.572230][ T977] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 199.581482][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.589525][ T977] usb 3-1: Product: syz [ 199.594159][ T977] usb 3-1: Manufacturer: syz [ 199.598808][ T977] usb 3-1: SerialNumber: syz [ 200.018612][ T7327] ------------[ cut here ]------------ [ 200.024081][ T7327] WARNING: CPU: 0 PID: 7327 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 200.034783][ T7327] Modules linked in: [ 200.038918][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) [ 200.048155][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.058206][ T7327] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 200.063677][ T7327] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 e0 37 f9 e8 a0 e0 37 f9 90 <0f> 0b 90 5b e9 96 e0 37 f9 e8 a1 7f a0 f9 eb da 66 66 2e 0f 1f 84 [ 200.084748][ T7327] RSP: 0018:ffffc9000411f1b8 EFLAGS: 00010246 [ 200.090836][ T7327] RAX: 0000000000080000 RBX: ffff888054e19358 RCX: ffffc9000fd51000 [ 200.098875][ T7327] RDX: 0000000000080000 RSI: ffffffff88850810 RDI: ffff888054e193d8 [ 200.106930][ T7327] RBP: ffffffff88836cb0 R08: 0000000000000005 R09: 0000000000000001 [ 200.114906][ T7327] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888054e18698 [ 200.122854][ T7327] R13: ffff888054e17fe0 R14: ffff888054e17fe0 R15: ffff888054e190b8 [ 200.130845][ T7327] FS: 00007fc70d5f66c0(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 200.139914][ T7327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.146593][ T7327] CR2: 000056212a58e300 CR3: 0000000048924000 CR4: 00000000003526f0 [ 200.154548][ T7327] Call Trace: [ 200.157859][ T7327] [ 200.160769][ T7327] rxe_dealloc+0x25/0xc0 [ 200.164987][ T7327] ib_dealloc_device+0x49/0x230 [ 200.169860][ T7327] __ib_unregister_device+0x396/0x480 [ 200.175213][ T7327] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 200.181109][ T7327] ib_unregister_device_and_put+0x5a/0x80 [ 200.187406][ T7327] nldev_dellink+0x21f/0x320 [ 200.192461][ T7327] ? __pfx_nldev_dellink+0x10/0x10 [ 200.197603][ T7327] ? cap_capable+0xb3/0x250 [ 200.202122][ T7327] ? bpf_lsm_capable+0x9/0x10 [ 200.206780][ T7327] ? security_capable+0x7e/0x260 [ 200.211738][ T7327] ? ns_capable+0xd7/0x110 [ 200.216138][ T7327] ? __pfx_nldev_dellink+0x10/0x10 [ 200.221271][ T7327] rdma_nl_rcv_msg+0x38a/0x6e0 [ 200.226014][ T7327] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 200.231276][ T7327] ? __lock_acquire+0x622/0x1c90 [ 200.236239][ T7327] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 200.242704][ T7327] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 200.249639][ T7327] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.254939][ T7327] netlink_unicast+0x5aa/0x870 [ 200.259702][ T7327] ? __pfx_netlink_unicast+0x10/0x10 [ 200.265015][ T7327] netlink_sendmsg+0x8c8/0xdd0 [ 200.269771][ T7327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.275094][ T7327] ____sys_sendmsg+0xa98/0xc70 [ 200.279839][ T7327] ? copy_msghdr_from_user+0x10a/0x160 [ 200.285297][ T7327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.290569][ T7327] ? __page_table_check_ptes_set+0x1ae/0x420 [ 200.297224][ T7327] ? do_pte_missing+0x8a3/0x3ba0 [ 200.302159][ T7327] ___sys_sendmsg+0x134/0x1d0 [ 200.307463][ T7327] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.312657][ T7327] ? __lock_acquire+0x622/0x1c90 [ 200.317658][ T7327] __sys_sendmsg+0x16d/0x220 [ 200.322246][ T7327] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.327353][ T7327] ? find_held_lock+0x2b/0x80 [ 200.332157][ T7327] ? do_user_addr_fault+0x843/0x1370 [ 200.337422][ T7327] do_syscall_64+0xcd/0xfa0 [ 200.341946][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.347821][ T7327] RIP: 0033:0x7fc70f38f6c9 [ 200.352234][ T7327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.371864][ T7327] RSP: 002b:00007fc70d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.380257][ T7327] RAX: ffffffffffffffda RBX: 00007fc70f5e6180 RCX: 00007fc70f38f6c9 [ 200.388247][ T7327] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 200.396221][ T7327] RBP: 00007fc70f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.404925][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.413332][ T7327] R13: 00007fc70f5e6218 R14: 00007fc70f5e6180 R15: 00007ffc54409668 [ 200.421327][ T7327] [ 200.424348][ T7327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.431611][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) [ 200.440778][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.450805][ T7327] Call Trace: [ 200.454056][ T7327] [ 200.456958][ T7327] dump_stack_lvl+0x3d/0x1f0 [ 200.461534][ T7327] vpanic+0x640/0x6f0 [ 200.465496][ T7327] ? rxe_pool_cleanup+0x41/0x60 [ 200.470322][ T7327] panic+0xca/0xd0 [ 200.474022][ T7327] ? __pfx_panic+0x10/0x10 [ 200.478434][ T7327] check_panic_on_warn+0xab/0xb0 [ 200.483352][ T7327] __warn+0xf6/0x3c0 [ 200.487217][ T7327] ? rxe_pool_cleanup+0x41/0x60 [ 200.492041][ T7327] report_bug+0x3c3/0x580 [ 200.496351][ T7327] ? rxe_pool_cleanup+0x41/0x60 [ 200.501174][ T7327] handle_bug+0x184/0x210 [ 200.505478][ T7327] exc_invalid_op+0x17/0x50 [ 200.509954][ T7327] asm_exc_invalid_op+0x1a/0x20 [ 200.514777][ T7327] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 200.520213][ T7327] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 e0 37 f9 e8 a0 e0 37 f9 90 <0f> 0b 90 5b e9 96 e0 37 f9 e8 a1 7f a0 f9 eb da 66 66 2e 0f 1f 84 [ 200.539795][ T7327] RSP: 0018:ffffc9000411f1b8 EFLAGS: 00010246 [ 200.545842][ T7327] RAX: 0000000000080000 RBX: ffff888054e19358 RCX: ffffc9000fd51000 [ 200.553785][ T7327] RDX: 0000000000080000 RSI: ffffffff88850810 RDI: ffff888054e193d8 [ 200.561829][ T7327] RBP: ffffffff88836cb0 R08: 0000000000000005 R09: 0000000000000001 [ 200.569773][ T7327] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888054e18698 [ 200.577721][ T7327] R13: ffff888054e17fe0 R14: ffff888054e17fe0 R15: ffff888054e190b8 [ 200.585677][ T7327] ? __pfx_rxe_dealloc+0x10/0x10 [ 200.590598][ T7327] ? rxe_pool_cleanup+0x40/0x60 [ 200.595429][ T7327] ? rxe_pool_cleanup+0x40/0x60 [ 200.600259][ T7327] rxe_dealloc+0x25/0xc0 [ 200.604479][ T7327] ib_dealloc_device+0x49/0x230 [ 200.609306][ T7327] __ib_unregister_device+0x396/0x480 [ 200.614654][ T7327] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 200.620537][ T7327] ib_unregister_device_and_put+0x5a/0x80 [ 200.626261][ T7327] nldev_dellink+0x21f/0x320 [ 200.630833][ T7327] ? __pfx_nldev_dellink+0x10/0x10 [ 200.636015][ T7327] ? cap_capable+0xb3/0x250 [ 200.640525][ T7327] ? bpf_lsm_capable+0x9/0x10 [ 200.645187][ T7327] ? security_capable+0x7e/0x260 [ 200.650131][ T7327] ? ns_capable+0xd7/0x110 [ 200.654528][ T7327] ? __pfx_nldev_dellink+0x10/0x10 [ 200.659621][ T7327] rdma_nl_rcv_msg+0x38a/0x6e0 [ 200.664380][ T7327] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 200.669643][ T7327] ? __lock_acquire+0x622/0x1c90 [ 200.674557][ T7327] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 200.680950][ T7327] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 200.687865][ T7327] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.693132][ T7327] netlink_unicast+0x5aa/0x870 [ 200.697876][ T7327] ? __pfx_netlink_unicast+0x10/0x10 [ 200.703146][ T7327] netlink_sendmsg+0x8c8/0xdd0 [ 200.707891][ T7327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.713157][ T7327] ____sys_sendmsg+0xa98/0xc70 [ 200.717896][ T7327] ? copy_msghdr_from_user+0x10a/0x160 [ 200.723331][ T7327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.728584][ T7327] ? __page_table_check_ptes_set+0x1ae/0x420 [ 200.734541][ T7327] ? do_pte_missing+0x8a3/0x3ba0 [ 200.739464][ T7327] ___sys_sendmsg+0x134/0x1d0 [ 200.744125][ T7327] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.749298][ T7327] ? __lock_acquire+0x622/0x1c90 [ 200.754235][ T7327] __sys_sendmsg+0x16d/0x220 [ 200.758811][ T7327] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.763923][ T7327] ? find_held_lock+0x2b/0x80 [ 200.768598][ T7327] ? do_user_addr_fault+0x843/0x1370 [ 200.773878][ T7327] do_syscall_64+0xcd/0xfa0 [ 200.778364][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.784245][ T7327] RIP: 0033:0x7fc70f38f6c9 [ 200.788639][ T7327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.808220][ T7327] RSP: 002b:00007fc70d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.816610][ T7327] RAX: ffffffffffffffda RBX: 00007fc70f5e6180 RCX: 00007fc70f38f6c9 [ 200.824557][ T7327] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 200.832500][ T7327] RBP: 00007fc70f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.840449][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.848402][ T7327] R13: 00007fc70f5e6218 R14: 00007fc70f5e6180 R15: 00007ffc54409668 [ 200.856372][ T7327] [ 200.859587][ T7327] Kernel Offset: disabled [ 200.863894][ T7327] Rebooting in 86400 seconds..