last executing test programs: 6.316557071s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x5) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040), 0x79, 0x12d501) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0), 0xed) mmap(&(0x7f00000f8000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, 0xffffffffffffffff, 0xbd753000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 5.504608025s ago: executing program 2 (id=3): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000140, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x11, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x208}}], 0x1, 0x0, 0x0) 5.296225907s ago: executing program 3 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x51}], 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, '\f\v\r\x00'}]}}, 0x0}, 0x0) 4.765202149s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x94, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xb}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x69}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xeda0}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcaf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4092}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) r4 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x40003, @name="e4a7e416676c5e83aa14f9ba87582528f68f00de86a7ba9602b3b46fe38e9cc1"}) 4.518904434s ago: executing program 2 (id=7): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0x4) read(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000180)={0x3, 0x83, 0x40}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x24004041) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000040)=0x94d9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r6) sendmsg$NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf25050000e408000100b07785d7848860c8365160817a59f0bec2e3d420f7278397a23282bdeba0894cfc79341d11a14c9fd5a2639e66a8bcd48a01de3694", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) 4.484419404s ago: executing program 0 (id=1): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="1ef0c200000000000000000008004500002400000000fe9a90780200000000000000"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0x8, 0x2, 0x0) 3.486657424s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0)) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000180)=0xf) bind$inet(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3.426301142s ago: executing program 2 (id=9): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r0, 0x1) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x140, 0x0) 2.863471875s ago: executing program 4 (id=5): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0x4) read(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000180)={0x3, 0x83, 0x40}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x24004041) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000040)=0x94d9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r6) sendmsg$NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf25050000e408000100b07785d7848860c8365160817a59f0bec2e3d420f7278397a23282bdeba0894cfc79341d11a14c9fd5a2639e66a8bcd48a01de3694", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) 2.779357432s ago: executing program 0 (id=10): syz_open_dev$loop(&(0x7f0000000280), 0x80010b, 0xc00c0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0x6f4}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x2, 0x0) write$sndseq(r4, &(0x7f0000000840)=[{0x3, 0x5, 0x19, 0x2, @time={0x8000, 0x6}, {0xc7, 0x9}, {0x0, 0x5}, @control={0x4, 0x4, 0xa}}, {0x7, 0x4, 0x20, 0x6e, @time={0x7, 0x4}, {0x4, 0xfe}, {0x10, 0xb7}, @raw32={[0x3, 0x800395, 0x168939fc]}}, {0x3, 0x7, 0x0, 0xb, @tick=0x100, {0x9, 0x9}, {0x0, 0xb7}, @note={0x3, 0x9, 0x4, 0xf6, 0x170}}, {0x2, 0x6, 0x0, 0x7, @tick=0x400, {0xb1, 0x7}, {0x6, 0x3}, @time=@tick=0x8001}], 0x70) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005f806000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0a0018000303030303030000018026003c140000"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4c040) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000040)={0x2}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000002380)={0x2020}, 0x2020) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="005b0300fbdbdf253100000008003f1caf750000000000005518bcfe2317e72be37dd0aea9e6945d3758c65d8a14fdb498ddb94640f60d3540bd4908bdb3655f680af00e36aeb04aa2fa5eae00781f616a1472ac8a83bba09a3351326c9af35de1a0395d3b118bc340d46c29caa45237d2773e2783fc520195c0b618100a25007349784fc33021c6197782317354d9acd7930ec3ad89218fa99680ccce039106746141e8feb21aed93851e625bcb61cbc4b06e52c03fcc59eb3627acdfafe9dc80c9f5ed99d32b7e3104e186db78386568408a085c0b16c5a5b7b2d10e5c24ca9691b6b29f173601df88a5a99faa538f2b", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32=r7, @ANYRES64=r8, @ANYRES32=r8, @ANYBLOB="0800db00", @ANYBLOB="9774fa46bd11d29f2a37d76caab5ea345e0565f3e044ae85298bdf69c3f7d00da7fd06e251db7ae640c4329fe40f60484e9815c2407ecc72144c210076ea85c6f9dcf6d72ee625a620f02c7289faf608a4e096f77341dce428435797c9d0679f61a07fa3c7e2efbc64dc03ff3fc33792c7e57859ad042af16f827410c06f981d973660aff59e1a3b431077", @ANYBLOB="0800db00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44810) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x29, @empty, 0x4e24, 0x2, 'rr\x00', 0x10, 0x7d0, 0x18}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 1.823557161s ago: executing program 3 (id=11): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x6, {{0x2, 0x4e23, @broadcast}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000121401004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x44008) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1e) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x82) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r8, 0xc0305616, &(0x7f0000000300)={0x0, {0x2, 0x6}}) 1.716632829s ago: executing program 4 (id=12): syz_open_dev$loop(&(0x7f0000000280), 0x80010b, 0xc00c0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0x6f4}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000840)=[{0x3, 0x5, 0x19, 0x2, @time={0x8000, 0x6}, {0xc7, 0x9}, {0x0, 0x5}, @control={0x4, 0x4, 0xa}}, {0x7, 0x4, 0x20, 0x6e, @time={0x7, 0x4}, {0x4, 0xfe}, {0x10, 0xb7}, @raw32={[0x3, 0x800395, 0x168939fc]}}, {0x3, 0x7, 0x0, 0xb, @tick=0x100, {0x9, 0x9}, {0x0, 0xb7}, @note={0x3, 0x9, 0x4, 0xf6, 0x170}}, {0x2, 0x6, 0x0, 0x7, @tick=0x400, {0xb1, 0x7}, {0x6, 0x3}, @time=@tick=0x8001}], 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005f806000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a0018000303030303030000018026003c140000"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4c040) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000040)={0x2}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 968.812079ms ago: executing program 0 (id=13): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0x4) read(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x3, 0x83, 0x40}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x24004041) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f0000000040)=0x94d9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r5) sendmsg$NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf25050000e408000100b07785d7848860c8365160817a59f0bec2e3d420f7278397a23282bdeba0894cfc79341d11a14c9fd5a2639e66a8bcd48a01de3694", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) 71.903656ms ago: executing program 0 (id=14): syz_open_dev$loop(&(0x7f0000000280), 0x80010b, 0xc00c0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0x6f4}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000840)=[{0x3, 0x5, 0x19, 0x2, @time={0x8000, 0x6}, {0xc7, 0x9}, {0x0, 0x5}, @control={0x4, 0x4, 0xa}}, {0x7, 0x4, 0x20, 0x6e, @time={0x7, 0x4}, {0x4, 0xfe}, {0x10, 0xb7}, @raw32={[0x3, 0x800395, 0x168939fc]}}, {0x3, 0x7, 0x0, 0xb, @tick=0x100, {0x9, 0x9}, {0x0, 0xb7}, @note={0x3, 0x9, 0x4, 0xf6, 0x170}}, {0x2, 0x6, 0x0, 0x7, @tick=0x400, {0xb1, 0x7}, {0x6, 0x3}, @time=@tick=0x8001}], 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005f806000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a0018000303030303030000018026003c140000"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4c040) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 43.372166ms ago: executing program 3 (id=15): r0 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) kernel console output (not intermixed with test programs): [ 51.933454][ T30] audit: type=1400 audit(1787010493.109:111): avc: denied { write } for pid=5447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.982647][ T30] audit: type=1400 audit(1787010493.159:112): avc: denied { write } for pid=5458 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.462232][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 52.462247][ T30] audit: type=1400 audit(1787010493.639:115): avc: denied { write } for pid=5475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.513673][ T30] audit: type=1400 audit(1787010493.689:116): avc: denied { write } for pid=5486 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.676382][ T30] audit: type=1400 audit(1787010493.849:117): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.716586][ T30] audit: type=1400 audit(1787010493.889:118): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.592250][ T30] audit: type=1400 audit(1787010494.769:119): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.649230][ T30] audit: type=1400 audit(1787010494.819:120): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.880863][ T30] audit: type=1400 audit(1787010495.049:121): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.924934][ T30] audit: type=1400 audit(1787010495.099:122): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.139735][ T30] audit: type=1400 audit(1787010495.309:123): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.184663][ T30] audit: type=1400 audit(1787010495.359:124): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 57.963094][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 57.963108][ T30] audit: type=1400 audit(1787010499.139:129): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.992507][ T30] audit: type=1400 audit(1787010499.169:130): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.995292][ T5580] cgroup: Unknown subsys name 'net' [ 58.021090][ T30] audit: type=1400 audit(1787010499.189:131): avc: denied { unmount } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.184422][ T5580] cgroup: Unknown subsys name 'cpuset' [ 58.191976][ T5580] cgroup: Unknown subsys name 'rlimit' [ 58.320136][ T30] audit: type=1400 audit(1787010499.489:132): avc: denied { setattr } for pid=5580 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.364866][ T30] audit: type=1400 audit(1787010499.489:133): avc: denied { create } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.387586][ T30] audit: type=1400 audit(1787010499.489:134): avc: denied { write } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.407334][ T5584] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.416862][ T30] audit: type=1400 audit(1787010499.489:135): avc: denied { read } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.437347][ T30] audit: type=1400 audit(1787010499.509:136): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.462254][ T30] audit: type=1400 audit(1787010499.509:137): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.485560][ T30] audit: type=1400 audit(1787010499.569:138): avc: denied { mac_admin } for pid=5584 comm="mkswap" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.354980][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.846645][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.858732][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.866848][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.875177][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.879495][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.891605][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.897331][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.906042][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.906666][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.913892][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.920684][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.929254][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.942038][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.942114][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.949235][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.957013][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.963791][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.970786][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.977575][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.992002][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.000280][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.007355][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 63.007367][ T30] audit: type=1400 audit(1787010504.179:148): avc: denied { read } for pid=5594 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.033844][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.044918][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.058395][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.069459][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.098602][ T30] audit: type=1400 audit(1787010504.179:149): avc: denied { open } for pid=5594 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.153935][ T30] audit: type=1400 audit(1787010504.209:150): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.198808][ T30] audit: type=1400 audit(1787010504.219:151): avc: denied { module_request } for pid=5599 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.255598][ T30] audit: type=1400 audit(1787010504.299:152): avc: denied { sys_module } for pid=5593 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.285952][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.293152][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.300446][ T5599] bridge_slave_0: entered allmulticast mode [ 64.307245][ T5599] bridge_slave_0: entered promiscuous mode [ 64.339884][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.347008][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.354479][ T5599] bridge_slave_1: entered allmulticast mode [ 64.361054][ T5599] bridge_slave_1: entered promiscuous mode [ 64.382195][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.389254][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.396578][ T5594] bridge_slave_0: entered allmulticast mode [ 64.403383][ T5594] bridge_slave_0: entered promiscuous mode [ 64.410801][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.417904][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.425004][ T5594] bridge_slave_1: entered allmulticast mode [ 64.431547][ T5594] bridge_slave_1: entered promiscuous mode [ 64.482191][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.489305][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.496899][ T5603] bridge_slave_0: entered allmulticast mode [ 64.503703][ T5603] bridge_slave_0: entered promiscuous mode [ 64.517848][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.543497][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.550586][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.557731][ T5603] bridge_slave_1: entered allmulticast mode [ 64.564301][ T5603] bridge_slave_1: entered promiscuous mode [ 64.572248][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.582922][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.592095][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.599129][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.606439][ T5593] bridge_slave_0: entered allmulticast mode [ 64.613308][ T5593] bridge_slave_0: entered promiscuous mode [ 64.633698][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.648844][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.656575][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.663768][ T5593] bridge_slave_1: entered allmulticast mode [ 64.670290][ T5593] bridge_slave_1: entered promiscuous mode [ 64.676917][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.684092][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.691143][ T5606] bridge_slave_0: entered allmulticast mode [ 64.698008][ T5606] bridge_slave_0: entered promiscuous mode [ 64.728968][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.736100][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.743440][ T5606] bridge_slave_1: entered allmulticast mode [ 64.750005][ T5606] bridge_slave_1: entered promiscuous mode [ 64.758102][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.775063][ T5599] team0: Port device team_slave_0 added [ 64.793928][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.809988][ T5594] team0: Port device team_slave_0 added [ 64.816924][ T5599] team0: Port device team_slave_1 added [ 64.824476][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.846850][ T5594] team0: Port device team_slave_1 added [ 64.859887][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.870920][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.881977][ T5603] team0: Port device team_slave_0 added [ 64.906915][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.922940][ T5603] team0: Port device team_slave_1 added [ 64.941167][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.948245][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.974162][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.007199][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.014427][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.014538][ T5605] Bluetooth: hci1: command tx timeout [ 65.040492][ T5597] Bluetooth: hci2: command tx timeout [ 65.040716][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.062649][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.069587][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.092386][ T5597] Bluetooth: hci3: command tx timeout [ 65.096136][ T5596] Bluetooth: hci0: command tx timeout [ 65.101501][ T5605] Bluetooth: hci4: command tx timeout [ 65.112473][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.124487][ T5593] team0: Port device team_slave_0 added [ 65.131299][ T5606] team0: Port device team_slave_0 added [ 65.137327][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.144424][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.170465][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.182614][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.189537][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.215451][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.233065][ T5593] team0: Port device team_slave_1 added [ 65.239609][ T5606] team0: Port device team_slave_1 added [ 65.246220][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.253788][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.279718][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.337907][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.344887][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.370815][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.382875][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.389806][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.415994][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.436066][ T5594] hsr_slave_0: entered promiscuous mode [ 65.442455][ T5594] hsr_slave_1: entered promiscuous mode [ 65.449181][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.456129][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.482207][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.513895][ T5599] hsr_slave_0: entered promiscuous mode [ 65.519862][ T5599] hsr_slave_1: entered promiscuous mode [ 65.525974][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 65.531771][ T5599] Cannot create hsr debugfs directory [ 65.537948][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.545068][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.570996][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.592020][ T5603] hsr_slave_0: entered promiscuous mode [ 65.597983][ T5603] hsr_slave_1: entered promiscuous mode [ 65.604083][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 65.609790][ T5603] Cannot create hsr debugfs directory [ 65.701679][ T5606] hsr_slave_0: entered promiscuous mode [ 65.707822][ T5606] hsr_slave_1: entered promiscuous mode [ 65.714146][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 65.719848][ T5606] Cannot create hsr debugfs directory [ 65.733898][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.740268][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.744330][ T5593] hsr_slave_0: entered promiscuous mode [ 65.752552][ T5593] hsr_slave_1: entered promiscuous mode [ 65.758367][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 65.764133][ T5593] Cannot create hsr debugfs directory [ 66.048715][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.060419][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.072398][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.081116][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.088795][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.098024][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.105896][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.114700][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.163511][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.172901][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.181571][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.190005][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.198094][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.206926][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.225608][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.234171][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.286634][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.296268][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.309133][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.317719][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.326468][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.336526][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.344484][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.353133][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.425528][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.434170][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.441632][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.450444][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.463384][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.472070][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.479873][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.488731][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.507189][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.574737][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.604027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.611166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.620351][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.627415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.640047][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.648683][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.657056][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.666114][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.674550][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.682777][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.695873][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.706240][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.716486][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.761976][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.780034][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.788947][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.796021][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.827975][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.835037][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.846692][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.880404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.887524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.895248][ T30] audit: type=1400 audit(1787010508.069:153): avc: denied { sys_module } for pid=5599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.934126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.941234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.981397][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.056175][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.086851][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.092759][ T5605] Bluetooth: hci2: command tx timeout [ 67.094774][ T5596] Bluetooth: hci1: command tx timeout [ 67.109072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.116195][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.144375][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.151487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.171915][ T5596] Bluetooth: hci4: command tx timeout [ 67.171937][ T5597] Bluetooth: hci0: command tx timeout [ 67.182766][ T5605] Bluetooth: hci3: command tx timeout [ 67.206951][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.244389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.251494][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.268817][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.275945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.441190][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.566913][ T5599] veth0_vlan: entered promiscuous mode [ 67.605841][ T5599] veth1_vlan: entered promiscuous mode [ 67.676505][ T5599] veth0_macvtap: entered promiscuous mode [ 67.709098][ T5599] veth1_macvtap: entered promiscuous mode [ 67.774116][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.800602][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.843153][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.921455][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.996267][ T5603] veth0_vlan: entered promiscuous mode [ 68.022889][ T299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.078106][ T5603] veth1_vlan: entered promiscuous mode [ 68.116446][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.124662][ T5606] veth0_vlan: entered promiscuous mode [ 68.134795][ T272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148754][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.166358][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.205873][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.217822][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.234417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.242647][ T5606] veth1_vlan: entered promiscuous mode [ 68.248380][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.267432][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.278062][ T30] audit: type=1400 audit(1787010509.449:154): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.Z1gQhp/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.285809][ T5603] veth0_macvtap: entered promiscuous mode [ 68.323903][ T30] audit: type=1400 audit(1787010509.479:155): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.364162][ T30] audit: type=1400 audit(1787010509.489:156): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.Z1gQhp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.367510][ T5603] veth1_macvtap: entered promiscuous mode [ 68.389620][ T30] audit: type=1400 audit(1787010509.489:157): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.424626][ T30] audit: type=1400 audit(1787010509.489:158): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.Z1gQhp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.455049][ T30] audit: type=1400 audit(1787010509.499:159): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/root/syzkaller.Z1gQhp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.457147][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.484278][ T30] audit: type=1400 audit(1787010509.499:160): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.511298][ T30] audit: type=1400 audit(1787010509.529:161): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.538277][ T30] audit: type=1400 audit(1787010509.529:162): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="gadgetfs" ino=7095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.544196][ T5606] veth0_macvtap: entered promiscuous mode [ 68.565092][ T30] audit: type=1400 audit(1787010509.529:163): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.595155][ T5599] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.595587][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.643076][ T5594] veth0_vlan: entered promiscuous mode [ 68.655668][ T5606] veth1_macvtap: entered promiscuous mode [ 68.712669][ T5594] veth1_vlan: entered promiscuous mode [ 68.744376][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.848636][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.895095][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.921378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.929527][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.949501][ T5594] veth0_macvtap: entered promiscuous mode [ 68.960368][ T5594] veth1_macvtap: entered promiscuous mode [ 68.993582][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.152008][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.171980][ T5597] Bluetooth: hci1: command tx timeout [ 69.177627][ T5605] Bluetooth: hci2: command tx timeout [ 69.260151][ T5597] Bluetooth: hci3: command tx timeout [ 69.266461][ T5605] Bluetooth: hci4: command tx timeout [ 69.272352][ T5597] Bluetooth: hci0: command tx timeout [ 69.290352][ T299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.367110][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.378440][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.387464][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.406156][ T5593] veth0_vlan: entered promiscuous mode [ 69.417051][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.459835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.472006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.474968][ T5593] veth1_vlan: entered promiscuous mode [ 69.557251][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.672281][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.684922][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.730518][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.214962][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.224961][ T5593] veth0_macvtap: entered promiscuous mode [ 70.235662][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.261262][ T5593] veth1_macvtap: entered promiscuous mode [ 70.297614][ T5798] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 70.300214][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.315931][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.327112][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.353453][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.367241][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.433576][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 70.527302][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.547139][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.562558][ T5330] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.571443][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.408773][ T5597] Bluetooth: hci2: command tx timeout [ 71.409235][ T5596] Bluetooth: hci0: command tx timeout [ 71.420133][ T5601] Bluetooth: hci4: command tx timeout [ 71.421502][ T5597] Bluetooth: hci3: command tx timeout [ 71.425701][ T5605] Bluetooth: hci1: command tx timeout [ 71.441565][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 71.456999][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.466608][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.478105][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 71.522638][ T5330] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 71.541148][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.552292][ T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.562429][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.562471][ T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.574918][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.582852][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.653053][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.653561][ T272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.742629][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.815368][ T5330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.851310][ T10] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 71.884208][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.887264][ T5330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 71.896563][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.951675][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.997210][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.049849][ T5330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.069670][ T10] usb 4-1: config 0 descriptor?? [ 72.097792][ T5330] usb 2-1: config 0 descriptor?? [ 73.125061][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 73.139150][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 73.147470][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.208958][ T10] usb 4-1: USB disconnect, device number 2 [ 73.279077][ T5798] jffs2: notice: (5798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.304602][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 73.304616][ T30] audit: type=1400 audit(1787010514.479:202): avc: denied { mount } for pid=5797 comm="syz.1.2" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.348503][ T5821] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 73.395405][ T5821] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.593875][ T5827] Zero length message leads to an empty skb [ 73.605911][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 73.655756][ T30] audit: type=1400 audit(1787010514.479:203): avc: denied { setattr } for pid=5797 comm="syz.1.2" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.871018][ T30] audit: type=1400 audit(1787010514.519:204): avc: denied { setopt } for pid=5820 comm="syz.0.10" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.904503][ T5330] usbhid 2-1:0.0: can't add hid device: -71 [ 74.184459][ T30] audit: type=1400 audit(1787010514.569:205): avc: denied { map_create } for pid=5820 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.276133][ T5330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 74.325362][ T30] audit: type=1400 audit(1787010514.599:206): avc: denied { ioctl } for pid=5797 comm="syz.1.2" path="/dev/radio0" dev="devtmpfs" ino=956 ioctlcmd=0x5625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.671950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.835607][ T30] audit: type=1400 audit(1787010514.779:207): avc: denied { write } for pid=5826 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.869914][ T5330] usb 2-1: USB disconnect, device number 2 [ 74.979247][ T5606] ------------[ cut here ]------------ [ 74.985536][ T5606] kernel BUG at fs/jffs2/nodelist.c:462! [ 75.039718][ T5606] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 75.046159][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 75.055607][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 75.065656][ T5606] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 75.071558][ T5606] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 a2 8b 89 fe 90 <0f> 0b e8 4a 18 fa fe e9 5b fe ff ff e8 10 18 fa fe e9 59 ff ff ff [ 75.091159][ T5606] RSP: 0018:ffffc900043afa88 EFLAGS: 00010293 [ 75.097217][ T5606] RAX: 0000000000000000 RBX: ffff88807f018000 RCX: 0000000000000000 [ 75.105178][ T5606] RDX: ffff888078e6ca80 RSI: ffffffff8380e7fe RDI: ffff888076769ee0 [ 75.113140][ T5606] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed100fe0306c [ 75.121099][ T5606] R10: ffff88807f018363 R11: 0000000000000000 R12: ffff8880754b3c80 [ 75.129062][ T5606] R13: dffffc0000000000 R14: ffff888076769ec0 R15: ffff8880754b3d30 [ 75.137018][ T5606] FS: 0000555559380500(0000) GS:ffff888123bde000(0000) knlGS:0000000000000000 [ 75.145928][ T5606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.152488][ T5606] CR2: 00007ffde3a4000c CR3: 0000000059c33000 CR4: 00000000003526f0 [ 75.160437][ T5606] Call Trace: [ 75.163692][ T5606] [ 75.166599][ T5606] jffs2_do_clear_inode+0x3ca/0x470 [ 75.171782][ T5606] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 75.177221][ T5606] evict+0x3c2/0xad0 [ 75.181098][ T5606] ? list_lru_del+0xba/0x2f0 [ 75.185665][ T5606] ? list_lru_del+0xba/0x2f0 [ 75.190232][ T5606] ? __pfx_evict+0x10/0x10 [ 75.194628][ T5606] ? do_raw_spin_unlock+0x145/0x1e0 [ 75.199827][ T5606] ? find_held_lock+0x2b/0x80 [ 75.204480][ T5606] ? find_held_lock+0x2b/0x80 [ 75.209132][ T5606] dispose_list+0x117/0x1e0 [ 75.213619][ T5606] evict_inodes+0x582/0x6f0 [ 75.218105][ T5606] ? __pfx_evict_inodes+0x10/0x10 [ 75.223111][ T5606] ? sync_blockdev+0x51/0x70 [ 75.227686][ T5606] generic_shutdown_super+0xc8/0x360 [ 75.232958][ T5606] kill_mtd_super+0x1d/0x80 [ 75.237445][ T5606] jffs2_kill_sb+0x7c/0xb0 [ 75.241847][ T5606] deactivate_locked_super+0xc1/0x1b0 [ 75.247202][ T5606] deactivate_super+0xe7/0x110 [ 75.251948][ T5606] cleanup_mnt+0x21f/0x450 [ 75.256342][ T5606] task_work_run+0x150/0x240 [ 75.260909][ T5606] ? __pfx_task_work_run+0x10/0x10 [ 75.265998][ T5606] exit_to_user_mode_loop+0x1d8/0x700 [ 75.271350][ T5606] ? rcu_is_watching+0x12/0xc0 [ 75.276095][ T5606] do_syscall_64+0x666/0x870 [ 75.280661][ T5606] ? clear_bhb_loop+0x70/0xc0 [ 75.285315][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.291182][ T5606] RIP: 0033:0x7fc86979f317 [ 75.295573][ T5606] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 75.315158][ T5606] RSP: 002b:00007fff8767bcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.323549][ T5606] RAX: 0000000000000000 RBX: 00007fc869834474 RCX: 00007fc86979f317 [ 75.331494][ T5606] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8767bd90 [ 75.339439][ T5606] RBP: 00007fff8767bd90 R08: 00007fff8767cd90 R09: 00000000ffffffff [ 75.347386][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8767ce20 [ 75.355333][ T5606] R13: 00007fc869834474 R14: 0000000000011fd7 R15: 00007fff8767ce60 [ 75.363283][ T5606] [ 75.366278][ T5606] Modules linked in: [ 75.370787][ T5606] ---[ end trace 0000000000000000 ]--- [ 75.434600][ T30] audit: type=1400 audit(1787010516.549:208): avc: denied { create } for pid=5839 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.514127][ T30] audit: type=1400 audit(1787010516.559:209): avc: denied { connect } for pid=5839 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.551667][ T5606] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 75.562507][ T5606] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 a2 8b 89 fe 90 <0f> 0b e8 4a 18 fa fe e9 5b fe ff ff e8 10 18 fa fe e9 59 ff ff ff [ 75.574718][ T30] audit: type=1400 audit(1787010516.559:210): avc: denied { write } for pid=5839 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.619077][ T5606] RSP: 0018:ffffc900043afa88 EFLAGS: 00010293 [ 75.647051][ T30] audit: type=1400 audit(1787010516.559:211): avc: denied { read } for pid=5839 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.655298][ T5606] RAX: 0000000000000000 RBX: ffff88807f018000 RCX: 0000000000000000 [ 75.731739][ T5606] RDX: ffff888078e6ca80 RSI: ffffffff8380e7fe RDI: ffff888076769ee0 [ 75.739737][ T5606] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed100fe0306c [ 75.761191][ T5606] R10: ffff88807f018363 R11: 0000000000000000 R12: ffff8880754b3c80 [ 75.774768][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 75.783753][ T5606] R13: dffffc0000000000 R14: ffff888076769ec0 R15: ffff8880754b3d30 [ 75.789271][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 75.792543][ T5606] FS: 0000555559380500(0000) GS:ffff888123cde000(0000) knlGS:0000000000000000 [ 75.821380][ T5606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.829290][ T5606] CR2: 000000110c32d2b5 CR3: 0000000059c33000 CR4: 00000000003526f0 [ 75.845988][ T5606] Kernel panic - not syncing: Fatal exception [ 75.852140][ T5606] Kernel Offset: disabled [ 75.856438][ T5606] Rebooting in 86400 seconds..