last executing test programs: 5.949981463s ago: executing program 0 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.70068641s ago: executing program 1 (id=30): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x80100, 0x0) r1 = io_uring_setup(0x3c7b, &(0x7f0000000080)) close(r1) pread64(r0, 0x0, 0x0, 0x7fffffffffffffff) 4.839942186s ago: executing program 2 (id=33): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfd45}}, 0x0) r0 = syz_clone(0x0, 0x0, 0xe, 0x0, 0x0, 0x0) ptrace(0x10, r0) syslog(0x2, &(0x7f0000003c00)=""/214, 0xd6) ioprio_get$pid(0x1, 0x0) ptrace$getregset(0x4205, r0, 0x403, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74}) 4.341535607s ago: executing program 1 (id=35): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYBLOB='\b\x00\n'], 0x4c}}, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.475892595s ago: executing program 1 (id=37): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 3.408237017s ago: executing program 0 (id=38): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 3.315832781s ago: executing program 1 (id=40): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) 3.267753761s ago: executing program 4 (id=42): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x3661, 0x0, 0x1, 0x29}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.236494455s ago: executing program 2 (id=43): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 3.18473424s ago: executing program 3 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) 3.132083329s ago: executing program 0 (id=45): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000100)) 2.966828631s ago: executing program 0 (id=46): set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) mincore(&(0x7f000057b000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/172) 2.96654013s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 2.097126928s ago: executing program 1 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.096821685s ago: executing program 3 (id=49): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x200001}) 2.096562761s ago: executing program 4 (id=50): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 1.972610685s ago: executing program 0 (id=51): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 1.911869761s ago: executing program 3 (id=52): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x14a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x400000000088, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r2, 0x0, 0x0) 1.906341509s ago: executing program 4 (id=53): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x2, 0x9, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) 1.8979816s ago: executing program 2 (id=54): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000000)) 1.679923539s ago: executing program 0 (id=55): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1, 0x3ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0xc, 0x42, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r5}, 0x38) 1.260636471s ago: executing program 2 (id=56): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf2e7, 0x2, [0x6, 0x7]}, 0xc) 1.218051001s ago: executing program 4 (id=57): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x1f00, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 999.868661ms ago: executing program 1 (id=58): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) 948.008389ms ago: executing program 4 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x1}}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) 895.639544ms ago: executing program 3 (id=60): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x51) 732.006326ms ago: executing program 4 (id=61): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x6, 0xfffff795, 0x40, 0xfffffff9, 0x0, 0x5}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$SIOCAX25GETUID(r4, 0x89ed, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0x851, 0x6, 0x200, 0x4004, 0x0, "ff07aff7ff80000090232d7ed922b402000013"}) 237.325349ms ago: executing program 3 (id=62): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000002a00)=""/4083, 0xff3}], 0x1, 0x80, 0x1005) 129.695353ms ago: executing program 2 (id=63): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00000001390403040101000000000001000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 0s ago: executing program 3 (id=64): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 55.817493][ T30] audit: type=1400 audit(1751935659.652:62): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.820810][ T5813] cgroup: Unknown subsys name 'net' [ 55.840238][ T30] audit: type=1400 audit(1751935659.652:63): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.869826][ T30] audit: type=1400 audit(1751935659.712:64): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.988183][ T5813] cgroup: Unknown subsys name 'cpuset' [ 55.995799][ T5813] cgroup: Unknown subsys name 'rlimit' [ 56.159356][ T30] audit: type=1400 audit(1751935659.992:65): avc: denied { setattr } for pid=5813 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.182700][ T30] audit: type=1400 audit(1751935659.992:66): avc: denied { create } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.218085][ T30] audit: type=1400 audit(1751935659.992:67): avc: denied { write } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.238664][ T30] audit: type=1400 audit(1751935659.992:68): avc: denied { read } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.259129][ T30] audit: type=1400 audit(1751935660.022:69): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.267369][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.284109][ T30] audit: type=1400 audit(1751935660.022:70): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.316788][ T30] audit: type=1400 audit(1751935660.032:71): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.170345][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.146781][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 61.146796][ T30] audit: type=1400 audit(1751935664.982:78): avc: denied { create } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.209239][ T30] audit: type=1400 audit(1751935665.002:79): avc: denied { read write } for pid=5824 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.237907][ T30] audit: type=1400 audit(1751935665.012:80): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.261619][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.270167][ T30] audit: type=1400 audit(1751935665.022:81): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="socket:[3801]" dev="sockfs" ino=3801 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.296126][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.304997][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.312771][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.320540][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.328021][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.335300][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.342902][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.350174][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.353250][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.374886][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.377641][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.390221][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.394279][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.397796][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.411672][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.419399][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.420189][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.434519][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.434697][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.436449][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.456983][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.457783][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.465642][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.471766][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.478122][ T30] audit: type=1400 audit(1751935665.282:82): avc: denied { read } for pid=5825 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.533043][ T30] audit: type=1400 audit(1751935665.282:83): avc: denied { open } for pid=5825 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.570445][ T30] audit: type=1400 audit(1751935665.282:84): avc: denied { mounton } for pid=5825 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.854221][ T30] audit: type=1400 audit(1751935665.692:85): avc: denied { module_request } for pid=5824 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.950178][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 62.022515][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 62.042038][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 62.120738][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 62.158850][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 62.228033][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.236357][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.243798][ T5827] bridge_slave_0: entered allmulticast mode [ 62.250519][ T5827] bridge_slave_0: entered promiscuous mode [ 62.282337][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.289549][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.297919][ T5827] bridge_slave_1: entered allmulticast mode [ 62.304688][ T5827] bridge_slave_1: entered promiscuous mode [ 62.311447][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.319089][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.326255][ T5824] bridge_slave_0: entered allmulticast mode [ 62.332881][ T5824] bridge_slave_0: entered promiscuous mode [ 62.347504][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.354705][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.361882][ T5825] bridge_slave_0: entered allmulticast mode [ 62.368695][ T5825] bridge_slave_0: entered promiscuous mode [ 62.382899][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.390076][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.397205][ T5824] bridge_slave_1: entered allmulticast mode [ 62.403969][ T5824] bridge_slave_1: entered promiscuous mode [ 62.434890][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.441971][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.449263][ T5825] bridge_slave_1: entered allmulticast mode [ 62.455924][ T5825] bridge_slave_1: entered promiscuous mode [ 62.504929][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.517533][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.526770][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.535379][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.542515][ T5832] bridge_slave_0: entered allmulticast mode [ 62.549419][ T5832] bridge_slave_0: entered promiscuous mode [ 62.557700][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.564863][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.571986][ T5832] bridge_slave_1: entered allmulticast mode [ 62.578945][ T5832] bridge_slave_1: entered promiscuous mode [ 62.601247][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.621071][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.639289][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.646435][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.653508][ T5837] bridge_slave_0: entered allmulticast mode [ 62.661030][ T5837] bridge_slave_0: entered promiscuous mode [ 62.669495][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.681647][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.712501][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.719975][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.727326][ T5837] bridge_slave_1: entered allmulticast mode [ 62.734331][ T5837] bridge_slave_1: entered promiscuous mode [ 62.749969][ T5827] team0: Port device team_slave_0 added [ 62.758097][ T5827] team0: Port device team_slave_1 added [ 62.772797][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.813708][ T5824] team0: Port device team_slave_0 added [ 62.821474][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.847838][ T5825] team0: Port device team_slave_0 added [ 62.856282][ T5825] team0: Port device team_slave_1 added [ 62.862640][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.869608][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.895704][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.908627][ T5824] team0: Port device team_slave_1 added [ 62.932755][ T5832] team0: Port device team_slave_0 added [ 62.941519][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.959747][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.966910][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.994226][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.019994][ T5832] team0: Port device team_slave_1 added [ 63.027016][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.048188][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.055187][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.081517][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.092845][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.099859][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.125803][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.170936][ T5837] team0: Port device team_slave_0 added [ 63.177349][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.184993][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.211019][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.222274][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.229245][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.255166][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.266596][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.273532][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.300148][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.312166][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.319190][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.345132][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.370455][ T5837] team0: Port device team_slave_1 added [ 63.403700][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.410698][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.436909][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.470867][ T5827] hsr_slave_0: entered promiscuous mode [ 63.476771][ T5836] Bluetooth: hci1: command tx timeout [ 63.482854][ T5827] hsr_slave_1: entered promiscuous mode [ 63.492253][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.499571][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.525774][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.552091][ T5832] hsr_slave_0: entered promiscuous mode [ 63.558720][ T5832] hsr_slave_1: entered promiscuous mode [ 63.563671][ T5836] Bluetooth: hci4: command tx timeout [ 63.564343][ T5829] Bluetooth: hci0: command tx timeout [ 63.570483][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.582863][ T5832] Cannot create hsr debugfs directory [ 63.633828][ T5829] Bluetooth: hci2: command tx timeout [ 63.639479][ T5829] Bluetooth: hci3: command tx timeout [ 63.662984][ T5825] hsr_slave_0: entered promiscuous mode [ 63.669564][ T5825] hsr_slave_1: entered promiscuous mode [ 63.675891][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.683422][ T5825] Cannot create hsr debugfs directory [ 63.730563][ T5824] hsr_slave_0: entered promiscuous mode [ 63.737668][ T5824] hsr_slave_1: entered promiscuous mode [ 63.743485][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.751100][ T5824] Cannot create hsr debugfs directory [ 63.771291][ T5837] hsr_slave_0: entered promiscuous mode [ 63.777348][ T5837] hsr_slave_1: entered promiscuous mode [ 63.783182][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.790818][ T5837] Cannot create hsr debugfs directory [ 64.099188][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.109658][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.120101][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.136545][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.188616][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.211753][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.229410][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.241615][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.295014][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.306154][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.329188][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.349872][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.385067][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.414713][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.430049][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.439529][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.450641][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.485144][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.542424][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.549586][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.561557][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.568677][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.585531][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.606654][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.620845][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.630223][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.671295][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.715334][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.741411][ T30] audit: type=1400 audit(1751935668.572:86): avc: denied { sys_module } for pid=5827 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.759940][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.769537][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.809990][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.817150][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.851007][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.917415][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.928994][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.943189][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.960178][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.967285][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.002942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.010342][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.032049][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.061233][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.106757][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.122982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.130159][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.139640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.146777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.155964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.163012][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.185161][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.192243][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.224752][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.250579][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.369054][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.389784][ T5827] veth0_vlan: entered promiscuous mode [ 65.446141][ T5827] veth1_vlan: entered promiscuous mode [ 65.495474][ T5832] veth0_vlan: entered promiscuous mode [ 65.538132][ T5832] veth1_vlan: entered promiscuous mode [ 65.558884][ T5829] Bluetooth: hci1: command tx timeout [ 65.628199][ T5827] veth0_macvtap: entered promiscuous mode [ 65.633861][ T5829] Bluetooth: hci0: command tx timeout [ 65.634482][ T5836] Bluetooth: hci4: command tx timeout [ 65.657545][ T5827] veth1_macvtap: entered promiscuous mode [ 65.675513][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.695952][ T5832] veth0_macvtap: entered promiscuous mode [ 65.707487][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.716499][ T5836] Bluetooth: hci3: command tx timeout [ 65.716505][ T5829] Bluetooth: hci2: command tx timeout [ 65.724505][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.744232][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.751705][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.760916][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.769928][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.778718][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.796757][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.812763][ T5832] veth1_macvtap: entered promiscuous mode [ 65.926884][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.972328][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.991520][ T5824] veth0_vlan: entered promiscuous mode [ 66.005539][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.017020][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.027070][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.038687][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.060612][ T5837] veth0_vlan: entered promiscuous mode [ 66.082637][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.093179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.111804][ T5824] veth1_vlan: entered promiscuous mode [ 66.125231][ T5837] veth1_vlan: entered promiscuous mode [ 66.158089][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.168563][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.194948][ T30] audit: type=1400 audit(1751935670.022:87): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.3a306Z/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.201885][ T5837] veth0_macvtap: entered promiscuous mode [ 66.245133][ T30] audit: type=1400 audit(1751935670.062:88): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.268811][ T30] audit: type=1400 audit(1751935670.062:89): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.3a306Z/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.277358][ T5825] veth0_vlan: entered promiscuous mode [ 66.299986][ T30] audit: type=1400 audit(1751935670.062:90): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.322139][ T30] audit: type=1400 audit(1751935670.072:91): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.3a306Z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.352924][ T30] audit: type=1400 audit(1751935670.072:92): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.3a306Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.385918][ T30] audit: type=1400 audit(1751935670.072:93): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.395770][ T5837] veth1_macvtap: entered promiscuous mode [ 66.408218][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.424593][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.432731][ T30] audit: type=1400 audit(1751935670.082:94): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.437737][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.462902][ T30] audit: type=1400 audit(1751935670.082:95): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=6014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.480107][ T5824] veth0_macvtap: entered promiscuous mode [ 66.498806][ T30] audit: type=1400 audit(1751935670.082:96): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.544829][ T5824] veth1_macvtap: entered promiscuous mode [ 66.560445][ T5825] veth1_vlan: entered promiscuous mode [ 66.575820][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.617225][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.621087][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.625273][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.637132][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.662352][ T5942] Zero length message leads to an empty skb [ 66.675594][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.684933][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695143][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.704740][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.718456][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.740396][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.749945][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.765678][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.780190][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817875][ T5825] veth0_macvtap: entered promiscuous mode [ 66.862910][ T5825] veth1_macvtap: entered promiscuous mode [ 66.927764][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.953463][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.971341][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.981750][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.988358][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.000882][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.016563][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.030189][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.113247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.122476][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.182941][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.205192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.261402][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.289314][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.341836][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.392444][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.483267][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.508130][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.636670][ T5829] Bluetooth: hci1: command tx timeout [ 67.763809][ T5829] Bluetooth: hci0: command tx timeout [ 67.769553][ T5829] Bluetooth: hci4: command tx timeout [ 67.793723][ T5829] Bluetooth: hci2: command tx timeout [ 67.804252][ T5829] Bluetooth: hci3: command tx timeout [ 68.217945][ T5975] ======================================================= [ 68.217945][ T5975] WARNING: The mand mount option has been deprecated and [ 68.217945][ T5975] and is ignored by this kernel. Remove the mand [ 68.217945][ T5975] option from the mount to silence this warning. [ 68.217945][ T5975] ======================================================= [ 70.064289][ T5836] Bluetooth: hci4: command tx timeout [ 70.069808][ T5836] Bluetooth: hci0: command tx timeout [ 70.075244][ T5836] Bluetooth: hci3: command tx timeout [ 70.080750][ T5836] Bluetooth: hci2: command tx timeout [ 70.084854][ T5829] Bluetooth: hci1: command tx timeout [ 70.918918][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.932300][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.551611][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 71.551626][ T30] audit: type=1400 audit(1751935675.382:140): avc: denied { ioctl } for pid=6013 comm="syz.3.20" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7509 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.628201][ T30] audit: type=1400 audit(1751935675.462:141): avc: denied { setopt } for pid=6019 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.800518][ T6025] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET) [ 71.985689][ T30] audit: type=1400 audit(1751935675.462:142): avc: denied { bpf } for pid=6020 comm="syz.2.22" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.312770][ T30] audit: type=1400 audit(1751935675.462:143): avc: denied { bind } for pid=6019 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.366916][ T30] audit: type=1400 audit(1751935675.462:144): avc: denied { name_bind } for pid=6019 comm="syz.4.23" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.503692][ T30] audit: type=1400 audit(1751935675.462:145): avc: denied { node_bind } for pid=6019 comm="syz.4.23" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 72.606114][ T30] audit: type=1400 audit(1751935675.462:146): avc: denied { write } for pid=6019 comm="syz.4.23" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.026486][ T30] audit: type=1400 audit(1751935675.462:147): avc: denied { connect } for pid=6019 comm="syz.4.23" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.075489][ T30] audit: type=1400 audit(1751935675.462:148): avc: denied { name_connect } for pid=6019 comm="syz.4.23" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.108418][ T30] audit: type=1400 audit(1751935675.632:149): avc: denied { create } for pid=6016 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.374652][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 75.127338][ T6071] nbd: nbd0 already in use [ 75.349996][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 76.534931][ T6102] trusted_key: syz.0.51 sent an empty control message without MSG_MORE. [ 76.614798][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 76.614814][ T30] audit: type=1400 audit(1751935680.362:171): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.751791][ T6110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.906196][ T30] audit: type=1400 audit(1751935680.372:172): avc: denied { write } for pid=6101 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.176710][ T30] audit: type=1400 audit(1751935680.442:173): avc: denied { read } for pid=6101 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.248300][ T30] audit: type=1400 audit(1751935680.512:174): avc: denied { mounton } for pid=6103 comm="syz.3.52" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.270408][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.315901][ T30] audit: type=1400 audit(1751935680.522:175): avc: denied { create } for pid=6105 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.353548][ T30] audit: type=1400 audit(1751935680.522:176): avc: denied { ioctl } for pid=6105 comm="syz.4.53" path="socket:[8512]" dev="sockfs" ino=8512 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.504811][ T30] audit: type=1400 audit(1751935681.127:177): avc: denied { listen } for pid=6114 comm="syz.2.56" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.550563][ T30] audit: type=1400 audit(1751935681.337:178): avc: denied { prog_load } for pid=6122 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.569346][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.634014][ T30] audit: type=1400 audit(1751935681.417:179): avc: denied { ioctl } for pid=6124 comm="syz.4.59" path="socket:[7653]" dev="sockfs" ino=7653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.691323][ T30] audit: type=1400 audit(1751935681.527:180): avc: denied { perfmon } for pid=6128 comm="syz.3.60" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.083809][ T6115] sctp: failed to load transform for md5: -2 [ 78.386499][ T5850] ------------[ cut here ]------------ [ 78.392102][ T5850] WARNING: CPU: 1 PID: 5850 at kernel/softirq.c:387 __local_bh_enable_ip+0xc3/0x120 [ 78.401496][ T5850] Modules linked in: [ 78.405502][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 78.415991][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.426032][ T5850] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 78.431920][ T5850] Code: 00 e8 d1 00 0c 00 e8 9c ce 46 00 fb 65 8b 05 64 97 53 12 85 c0 74 52 5b 5d e9 09 1a 0e 0a 65 8b 05 ae d5 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 33 d0 46 00 eb 99 48 89 ef e8 19 a7 1b 00 eb a2 [ 78.451515][ T5850] RSP: 0018:ffffc900035df758 EFLAGS: 00010046 [ 78.457572][ T5850] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff21534a8 [ 78.465528][ T5850] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89ebd043 [ 78.473485][ T5850] RBP: ffffffff89ebd043 R08: 0000000000000000 R09: ffffed10170a7848 [ 78.481443][ T5850] R10: ffff8880b853c243 R11: 0000000000002c00 R12: 000000000100007f [ 78.489397][ T5850] R13: ffffc900035df8a0 R14: ffff8880796c5e64 R15: ffff888046c80000 [ 78.497353][ T5850] FS: 0000000000000000(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 78.506268][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.512840][ T5850] CR2: 0000001b2fd1fffc CR3: 0000000063e8f000 CR4: 00000000003526f0 [ 78.520798][ T5850] Call Trace: [ 78.524062][ T5850] [ 78.526978][ T5850] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 78.532795][ T5850] ? dst_alloc+0xc0/0x1a0 [ 78.537120][ T5850] ? ret_from_fork_asm+0x1a/0x30 [ 78.542056][ T5850] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 78.548049][ T5850] ip_route_output_key_hash+0x137/0x2e0 [ 78.553596][ T5850] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 78.559677][ T5850] ? stack_trace_save+0x8e/0xc0 [ 78.564526][ T5850] ? __pfx_map_id_range_down+0x10/0x10 [ 78.569974][ T5850] ? check_path.constprop.0+0x24/0x50 [ 78.575358][ T5850] ip_route_output_flow+0x27/0x150 [ 78.580475][ T5850] rxrpc_init_peer+0x40f/0xc70 [ 78.585235][ T5850] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 78.590529][ T5850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.596427][ T5850] rxrpc_new_incoming_peer+0x64/0x2e0 [ 78.601805][ T5850] rxrpc_new_incoming_call+0x127b/0x1890 [ 78.607438][ T5850] ? rxrpc_tlp_send_probe+0x2a0/0x890 [ 78.612837][ T5850] rxrpc_io_thread+0x2f01/0x4020 [ 78.617782][ T5850] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 78.623055][ T5850] ? rcu_is_watching+0x12/0xc0 [ 78.627809][ T5850] ? trace_sched_exit_tp+0xde/0x130 [ 78.633017][ T5850] ? do_raw_spin_lock+0x12c/0x2b0 [ 78.638037][ T5850] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.643834][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.649029][ T5850] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 78.654301][ T5850] ? kthread+0x3c5/0x780 [ 78.658527][ T5850] kthread+0x3c5/0x780 [ 78.662581][ T5850] ? __pfx_kthread+0x10/0x10 [ 78.667158][ T5850] ? rcu_is_watching+0x12/0xc0 [ 78.671910][ T5850] ? __pfx_kthread+0x10/0x10 [ 78.676484][ T5850] ret_from_fork+0x5d4/0x6f0 [ 78.681079][ T5850] ? __pfx_kthread+0x10/0x10 [ 78.685655][ T5850] ret_from_fork_asm+0x1a/0x30 [ 78.690415][ T5850] [ 78.693423][ T5850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.700685][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 78.711166][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.721208][ T5850] Call Trace: [ 78.724489][ T5850] [ 78.727422][ T5850] dump_stack_lvl+0x3d/0x1f0 [ 78.732027][ T5850] panic+0x71c/0x800 [ 78.735933][ T5850] ? __pfx_panic+0x10/0x10 [ 78.740349][ T5850] ? show_trace_log_lvl+0x29b/0x3e0 [ 78.745548][ T5850] ? check_panic_on_warn+0x1f/0xb0 [ 78.750655][ T5850] ? __local_bh_enable_ip+0xc3/0x120 [ 78.755931][ T5850] check_panic_on_warn+0xab/0xb0 [ 78.760865][ T5850] __warn+0xf6/0x3c0 [ 78.764745][ T5850] ? __local_bh_enable_ip+0xc3/0x120 [ 78.770022][ T5850] report_bug+0x3c3/0x580 [ 78.774342][ T5850] ? __local_bh_enable_ip+0xc3/0x120 [ 78.779616][ T5850] handle_bug+0x184/0x210 [ 78.783954][ T5850] exc_invalid_op+0x17/0x50 [ 78.788469][ T5850] asm_exc_invalid_op+0x1a/0x20 [ 78.793318][ T5850] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 78.799215][ T5850] Code: 00 e8 d1 00 0c 00 e8 9c ce 46 00 fb 65 8b 05 64 97 53 12 85 c0 74 52 5b 5d e9 09 1a 0e 0a 65 8b 05 ae d5 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 33 d0 46 00 eb 99 48 89 ef e8 19 a7 1b 00 eb a2 [ 78.818820][ T5850] RSP: 0018:ffffc900035df758 EFLAGS: 00010046 [ 78.824878][ T5850] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff21534a8 [ 78.832846][ T5850] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89ebd043 [ 78.840815][ T5850] RBP: ffffffff89ebd043 R08: 0000000000000000 R09: ffffed10170a7848 [ 78.848793][ T5850] R10: ffff8880b853c243 R11: 0000000000002c00 R12: 000000000100007f [ 78.856755][ T5850] R13: ffffc900035df8a0 R14: ffff8880796c5e64 R15: ffff888046c80000 [ 78.864715][ T5850] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 78.870693][ T5850] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 78.876668][ T5850] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 78.882462][ T5850] ? dst_alloc+0xc0/0x1a0 [ 78.886780][ T5850] ? ret_from_fork_asm+0x1a/0x30 [ 78.891710][ T5850] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 78.897687][ T5850] ip_route_output_key_hash+0x137/0x2e0 [ 78.903222][ T5850] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 78.909277][ T5850] ? stack_trace_save+0x8e/0xc0 [ 78.914121][ T5850] ? __pfx_map_id_range_down+0x10/0x10 [ 78.919569][ T5850] ? check_path.constprop.0+0x24/0x50 [ 78.924939][ T5850] ip_route_output_flow+0x27/0x150 [ 78.930042][ T5850] rxrpc_init_peer+0x40f/0xc70 [ 78.934805][ T5850] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 78.940085][ T5850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.945971][ T5850] rxrpc_new_incoming_peer+0x64/0x2e0 [ 78.951336][ T5850] rxrpc_new_incoming_call+0x127b/0x1890 [ 78.956958][ T5850] ? rxrpc_tlp_send_probe+0x2a0/0x890 [ 78.962326][ T5850] rxrpc_io_thread+0x2f01/0x4020 [ 78.967259][ T5850] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 78.972528][ T5850] ? rcu_is_watching+0x12/0xc0 [ 78.977281][ T5850] ? trace_sched_exit_tp+0xde/0x130 [ 78.982505][ T5850] ? do_raw_spin_lock+0x12c/0x2b0 [ 78.987524][ T5850] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.993320][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.998509][ T5850] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 79.003778][ T5850] ? kthread+0x3c5/0x780 [ 79.008004][ T5850] kthread+0x3c5/0x780 [ 79.012061][ T5850] ? __pfx_kthread+0x10/0x10 [ 79.016644][ T5850] ? rcu_is_watching+0x12/0xc0 [ 79.021410][ T5850] ? __pfx_kthread+0x10/0x10 [ 79.025990][ T5850] ret_from_fork+0x5d4/0x6f0 [ 79.030572][ T5850] ? __pfx_kthread+0x10/0x10 [ 79.035147][ T5850] ret_from_fork_asm+0x1a/0x30 [ 79.039907][ T5850] [ 79.043093][ T5850] Kernel Offset: disabled [ 79.047397][ T5850] Rebooting in 86400 seconds..