last executing test programs: 23.021106586s ago: executing program 3 (id=223): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) mkdir(&(0x7f00000004c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) acct(0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x50, 0x0) r4 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x10000000) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) 20.449084393s ago: executing program 3 (id=229): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_clone3(&(0x7f00000004c0)={0x11010280, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/partitions\x00', 0x0, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={r5, 0x0, 0xffffffffffffffff}, 0xc) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000840), 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35408, 0x8}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x44, 0xf, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) socket$nl_xfrm(0x10, 0x3, 0x6) 17.106952503s ago: executing program 4 (id=234): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() pread64(r0, 0x0, 0x0, 0x100009) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) ioperm(0x284, 0x7f, 0xe3) timer_settime(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) 16.304894301s ago: executing program 4 (id=237): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 15.541425209s ago: executing program 3 (id=238): socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0)=0x6ba, 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="93d904000003", 0x6}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}]}}) 12.827273089s ago: executing program 3 (id=241): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x549c, &(0x7f00000004c0)={0x0, 0xdd98, 0x2, 0xfffffffe, 0xf0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCGETA(r5, 0x5405, 0xffffffffffffffff) 12.483182739s ago: executing program 0 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xc, 0x5, 0x80}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r5, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) 12.179331354s ago: executing program 2 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_misc(r5, &(0x7f0000000400)="b0", 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x0) sendfile(r7, r8, 0x0, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[], 0x2c}}, 0x0) 11.09303753s ago: executing program 0 (id=245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x104, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xf0, 0x1, [@m_sample={0xec, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x173}]}, {0xa0, 0x6, "f272cd2c7681de61eacaed4d24693e6cea56be7d1b1b73185eaa55bb6e4d88163dad5ca4f55e8c939371e643c1696182992f2614d4029f0ac0ade8f5cb590006037d73aaf804e1dc178adb72e9b27a1c423e09e70cab7762ff7d677491ae1af98f6f7e89fbb2de8f2030c025cc08b1a7ca6e71f5469d0640087243303f140af2f890db5345b891a56a47f5d275324b70790af5cf67f3113abd429436"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x104}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x18, 0x0, 0xffffffffffffffff, 0x100006f) 9.884397838s ago: executing program 2 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffeff, 0xffffffff, 0x20000000, 0x9, 0x18000}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 9.803396994s ago: executing program 0 (id=247): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000034c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 9.720634058s ago: executing program 1 (id=248): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x150) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x20, 0x11, 0x7, {0x7, 0x21, "f5fb0f2b01"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@dellink={0x34, 0x11, 0x9, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x51900, 0x4020}, [@IFLA_IFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) timer_create(0x9, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) 9.666253933s ago: executing program 4 (id=249): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) write$cgroup_pid(r3, &(0x7f0000000280)=r4, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) getrusage(0x0, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x7, 0x8, 0x6}, {0x0, 0x6, 0x5, 0x2}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 7.453162048s ago: executing program 0 (id=250): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x1) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x28a001) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000180)={'\x00', 0x74, 0x8, 0x7, 0x8, 0x1}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) syz_io_uring_setup(0x5596, 0x0, 0x0, 0x0) 7.015932285s ago: executing program 4 (id=251): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x8, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x700, 0x0, 0x9, 0x3, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty}}}}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="070000000000002824000200000014000180060001000200000008000300018935cf77f4554b7aa19cabac1414aac8e05cd0554523c55aadbc1a1becf16cabd02b30ba98b81f24145eada714176ccd55b4588d8b396b0c3a5eefd54ed644433a8a3b8bd480d639d2e36c59216c2073cc71f37645cd91df8a112acd0f59f629dbbbc07bcc75cfd6d5ae575d480c6f470ff2130af1ac62aadd574a830154"], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 6.866204351s ago: executing program 2 (id=252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000e00)={0x1, r6, r5}) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x86fc, 0x2, 0x8000, 0x400252, 0x0, r3}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x9, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0xffffffff, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x8798, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d92", 0x5}], 0x1) pipe(&(0x7f00000007c0)) 5.771364972s ago: executing program 0 (id=253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.766293405s ago: executing program 2 (id=254): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000140)={0x0, 0x1, 0x200e, 0x1}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a']) 5.740894813s ago: executing program 1 (id=255): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='pstore\x00', 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000005280), 0x10) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r6 = dup3(r4, r3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000240)={0x0, 0x4640}, 0x2}, 0x2c004000) syz_open_dev$vcsn(0x0, 0x7, 0x678f01) 5.66987148s ago: executing program 3 (id=256): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 3.946504092s ago: executing program 2 (id=257): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000040)=0xffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000300)="fc7a08f99970a700", 0x8, 0x4000001, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 3.837182534s ago: executing program 1 (id=258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="028912000000bb000000000000005c0000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) 2.285972935s ago: executing program 4 (id=259): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.221226717s ago: executing program 1 (id=260): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006500), 0x0, 0x41) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x26) socket$packet(0x11, 0x3, 0x300) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 1.689641204s ago: executing program 0 (id=261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000000000), 0x40000000, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1, 0x13, 0x200, 0x55}, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001200970228bd700000000000070000008f03"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) 1.525880623s ago: executing program 1 (id=262): pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48840) socket$inet(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) write$sndseq(r0, &(0x7f0000000800)=[{0xc, 0x5, 0x2, 0x40, @time={0xffffffff, 0xdb}, {0x7, 0x2}, {0xc, 0x2}, @ext={0xa9, &(0x7f0000000740)="80851a2c83d7fbaba97daadd8ef9b5767e299ab2ef57fcf851ae0faf08a2ff684b72775f5dba98bc95883c1b6705288b8645ecafb557d51bc74427ab4d4dcdb363b43a3717f336aeb2493f119ce7f728c48ccde04f9d2924cf5fdf8b1f10dae6f297d2495447133aca51ab0747ef209af4f4d03ca496eb2065508836c679ef37a81d83d58d449ba5ce042036779e37a526417fd6b8b20f99fce82d3a94649f988a81f2e70940ca52a1"}}, {0x6, 0x0, 0x7b, 0x9, @time={0x7, 0x8}, {0x9, 0x7}, {0xb, 0x7c}, @quote={{0xcd, 0xf7}, 0x401, &(0x7f0000000680)={0x8, 0x9, 0xd, 0x3, @tick=0x8, {0xff, 0x1}, {0x80, 0x9}, @connect={{0x1, 0x5}, {0x77, 0x4}}}}}, {0x5, 0x0, 0xf9, 0x3, @time={0x7fffffff, 0x600857d0}, {0x5, 0x4}, {0x5, 0x80}, @control={0x7, 0x8, 0x3}}], 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xd35c1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000640), 0x20880, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r9, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) 1.469099057s ago: executing program 3 (id=263): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) fcntl$getown(r0, 0x9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 453.054734ms ago: executing program 2 (id=264): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2460b0fc36d4923431d4c7d5ffffffdf0000640e00005975af008d26f375aa"}) r4 = fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='-\x00\xfb\x01\x00/\x01\x00#\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"766cace9c303653f121a2d892000", r5, 0x0, {0x81, 0x50000a}, {0x3, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x9, 0x400, 0xffffffffffff0003, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x80000001, 0x522586f, 0xfffffffffffffffb, 0x200000000000007]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getuid() r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r7, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x0, 0x3, 0x6, 0x1, {0xa, 0xe24, 0x7, @private0, 0x6}}}, 0x3a) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89bed0a9ef13b5ad2b3dc80857651f31e6b314dbfc085d1f40caca818680bf80903f35ac9398d8f084781476df952d0b2c18de507745c9a348714cd190be2740ffcea124f2025c4fdf5f2d2a07ca030cf0015e82f9ac4cb6eedfc683ada15005d12b7be65586c891ce097647bf35cfd449151f8565fd269551d59dd9a9460eaee9c4e32ee04b6c392d0f433464c82e05", 0x90}, {&(0x7f0000000b00)="ab0b4af29da6a2a222fa6729fae965ad0000000000000004500ca2185e86f6510a7d4ee9620d268d7a356e6cc5a25c17cc638c058fef88bec49943c43f548091718948609d0f64050eacd88550c2a618eb4b5586b11e58097a34b6ae0a952171ca51944398b92d4f0a1e2cda3f5652f2d142817d07ac8aba7464a392611b3441b5", 0x81}], 0x2) 344.76844ms ago: executing program 1 (id=265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r6, &(0x7f00000003c0)=[{0x0}], 0x1) close(r2) r7 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) fcntl$setlease(r7, 0x400, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) 0s ago: executing program 4 (id=266): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) timerfd_create(0x0, 0x0) epoll_create(0x5) socket$isdn(0x22, 0x3, 0x11) syz_open_dev$vim2m(0x0, 0x8, 0x2) r1 = syz_io_uring_setup(0x1bf, &(0x7f00000005c0)={0x0, 0x108c778, 0x800, 0x8000000, 0x1d2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffe, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x2fffffd, @mcast2, 0x6}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 56.851791][ T30] audit: type=1400 audit(1761990207.158:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.875112][ T30] audit: type=1400 audit(1761990207.188:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.877419][ T5798] cgroup: Unknown subsys name 'net' [ 56.904509][ T30] audit: type=1400 audit(1761990207.218:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.046016][ T5798] cgroup: Unknown subsys name 'cpuset' [ 57.053775][ T5798] cgroup: Unknown subsys name 'rlimit' [ 57.229014][ T30] audit: type=1400 audit(1761990207.538:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.253211][ T30] audit: type=1400 audit(1761990207.538:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.286920][ T30] audit: type=1400 audit(1761990207.538:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.307388][ T30] audit: type=1400 audit(1761990207.538:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.327988][ T30] audit: type=1400 audit(1761990207.538:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.339635][ T5800] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.353050][ T30] audit: type=1400 audit(1761990207.538:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.384544][ T30] audit: type=1400 audit(1761990207.588:71): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.328114][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.297479][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.319963][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.328364][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.328499][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.337359][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.343249][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.358696][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.363685][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.366165][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.373866][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.387555][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.393373][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.395738][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.401932][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.409936][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.415583][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.430916][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.431571][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.438642][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.445799][ T5136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.460074][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.460505][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.469215][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.482203][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.492389][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.932491][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 60.985886][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 61.002362][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 61.030621][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 61.149092][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.156789][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.164156][ T5820] bridge_slave_0: entered allmulticast mode [ 61.170732][ T5820] bridge_slave_0: entered promiscuous mode [ 61.187828][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.206459][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.213599][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.220700][ T5820] bridge_slave_1: entered allmulticast mode [ 61.227531][ T5820] bridge_slave_1: entered promiscuous mode [ 61.282331][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.289519][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.297021][ T5809] bridge_slave_0: entered allmulticast mode [ 61.304009][ T5809] bridge_slave_0: entered promiscuous mode [ 61.336310][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.343457][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.350620][ T5815] bridge_slave_0: entered allmulticast mode [ 61.357421][ T5815] bridge_slave_0: entered promiscuous mode [ 61.364959][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.372068][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.379241][ T5809] bridge_slave_1: entered allmulticast mode [ 61.385894][ T5809] bridge_slave_1: entered promiscuous mode [ 61.394106][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.410895][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.418118][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.425244][ T5808] bridge_slave_0: entered allmulticast mode [ 61.431822][ T5808] bridge_slave_0: entered promiscuous mode [ 61.442104][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.449233][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.456729][ T5815] bridge_slave_1: entered allmulticast mode [ 61.463646][ T5815] bridge_slave_1: entered promiscuous mode [ 61.485915][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.504287][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.511358][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.519176][ T5808] bridge_slave_1: entered allmulticast mode [ 61.526002][ T5808] bridge_slave_1: entered promiscuous mode [ 61.572609][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.584166][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.594470][ T5820] team0: Port device team_slave_0 added [ 61.601769][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.627137][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.652711][ T5820] team0: Port device team_slave_1 added [ 61.660564][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.669856][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.677078][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.684379][ T5817] bridge_slave_0: entered allmulticast mode [ 61.690932][ T5817] bridge_slave_0: entered promiscuous mode [ 61.698000][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.705096][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.712168][ T5817] bridge_slave_1: entered allmulticast mode [ 61.719058][ T5817] bridge_slave_1: entered promiscuous mode [ 61.733509][ T5809] team0: Port device team_slave_0 added [ 61.747575][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.788356][ T5809] team0: Port device team_slave_1 added [ 61.802691][ T5808] team0: Port device team_slave_0 added [ 61.817427][ T5815] team0: Port device team_slave_0 added [ 61.831661][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.838754][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.864743][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.877479][ T5808] team0: Port device team_slave_1 added [ 61.894189][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.904608][ T5815] team0: Port device team_slave_1 added [ 61.918574][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.925781][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.951689][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.976443][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.992549][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.999605][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.025743][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.041878][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.048940][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.075473][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.101827][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.108883][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.135212][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.152114][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.159167][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.185079][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.203457][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.210403][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.236458][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.248596][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.255845][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.281728][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.304258][ T5817] team0: Port device team_slave_0 added [ 62.342596][ T5820] hsr_slave_0: entered promiscuous mode [ 62.349345][ T5820] hsr_slave_1: entered promiscuous mode [ 62.366258][ T5817] team0: Port device team_slave_1 added [ 62.384788][ T5808] hsr_slave_0: entered promiscuous mode [ 62.390781][ T5808] hsr_slave_1: entered promiscuous mode [ 62.396827][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 62.402584][ T5808] Cannot create hsr debugfs directory [ 62.411578][ T5809] hsr_slave_0: entered promiscuous mode [ 62.417876][ T5809] hsr_slave_1: entered promiscuous mode [ 62.423877][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 62.429586][ T5809] Cannot create hsr debugfs directory [ 62.453735][ T52] Bluetooth: hci1: command tx timeout [ 62.502902][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.510303][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.536504][ T52] Bluetooth: hci0: command tx timeout [ 62.536607][ T5136] Bluetooth: hci3: command tx timeout [ 62.542232][ T5824] Bluetooth: hci4: command tx timeout [ 62.547436][ T5812] Bluetooth: hci2: command tx timeout [ 62.558576][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.576346][ T5815] hsr_slave_0: entered promiscuous mode [ 62.582337][ T5815] hsr_slave_1: entered promiscuous mode [ 62.588804][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 62.594539][ T5815] Cannot create hsr debugfs directory [ 62.611766][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.618842][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.644784][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.796564][ T5817] hsr_slave_0: entered promiscuous mode [ 62.802551][ T5817] hsr_slave_1: entered promiscuous mode [ 62.808601][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 62.814322][ T5817] Cannot create hsr debugfs directory [ 62.978611][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.002261][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.011342][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.033010][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.091201][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.110558][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.124510][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.135121][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.181416][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.198269][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.208115][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.218605][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.309779][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.318727][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.328107][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.340319][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.355967][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.409919][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.452135][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.460830][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.469640][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.479764][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.489275][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.506747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.513899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.537983][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.545118][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.555788][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.577477][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.584578][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.598354][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.605455][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.652356][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.691379][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.709104][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.716396][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.739309][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.770834][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.781588][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.788981][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.789974][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 63.789986][ T30] audit: type=1400 audit(1761990214.108:86): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.882223][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.898649][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.905840][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.963880][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.971016][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.011906][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.042165][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.088706][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.148263][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.155430][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.197486][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.204645][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.230742][ T5820] veth0_vlan: entered promiscuous mode [ 64.254349][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.269486][ T5820] veth1_vlan: entered promiscuous mode [ 64.298601][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.352928][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.410205][ T5820] veth0_macvtap: entered promiscuous mode [ 64.420906][ T5808] veth0_vlan: entered promiscuous mode [ 64.438702][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.452021][ T5809] veth0_vlan: entered promiscuous mode [ 64.472446][ T5820] veth1_macvtap: entered promiscuous mode [ 64.506638][ T5808] veth1_vlan: entered promiscuous mode [ 64.530501][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.538046][ T5812] Bluetooth: hci1: command tx timeout [ 64.547636][ T5809] veth1_vlan: entered promiscuous mode [ 64.571648][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.613481][ T5812] Bluetooth: hci2: command tx timeout [ 64.615303][ T5136] Bluetooth: hci3: command tx timeout [ 64.618928][ T5812] Bluetooth: hci4: command tx timeout [ 64.626365][ T5824] Bluetooth: hci0: command tx timeout [ 64.664314][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.671279][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.681109][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.696839][ T5809] veth0_macvtap: entered promiscuous mode [ 64.707008][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.716187][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.738919][ T5809] veth1_macvtap: entered promiscuous mode [ 64.776563][ T5808] veth0_macvtap: entered promiscuous mode [ 64.790923][ T5817] veth0_vlan: entered promiscuous mode [ 64.818354][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.830012][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.838227][ T5817] veth1_vlan: entered promiscuous mode [ 64.848763][ T5808] veth1_macvtap: entered promiscuous mode [ 64.870645][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.880494][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.890042][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.906276][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.956285][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.992155][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.007295][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.011740][ T5815] veth0_vlan: entered promiscuous mode [ 65.021077][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.052400][ T5817] veth0_macvtap: entered promiscuous mode [ 65.066855][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.075693][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.096650][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.108129][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.109768][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.124782][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.132846][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.142002][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.153986][ T5817] veth1_macvtap: entered promiscuous mode [ 65.178884][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.192709][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.194291][ T5815] veth1_vlan: entered promiscuous mode [ 65.214759][ T30] audit: type=1400 audit(1761990215.518:87): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.RJg14h/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.245344][ T30] audit: type=1400 audit(1761990215.528:88): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.272126][ T30] audit: type=1400 audit(1761990215.538:89): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.RJg14h/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.314837][ T30] audit: type=1400 audit(1761990215.538:90): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.324093][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.357232][ T5815] veth0_macvtap: entered promiscuous mode [ 65.364594][ T30] audit: type=1400 audit(1761990215.538:91): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.RJg14h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.392279][ T30] audit: type=1400 audit(1761990215.538:92): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.RJg14h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.394036][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.431092][ T30] audit: type=1400 audit(1761990215.548:93): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.450965][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.459198][ T30] audit: type=1400 audit(1761990215.588:94): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.459238][ T30] audit: type=1400 audit(1761990215.588:95): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=8387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.507272][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.528835][ T5815] veth1_macvtap: entered promiscuous mode [ 65.547682][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.598181][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.606068][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.615720][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.624806][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.642675][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.663855][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680498][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.741588][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.863705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.872574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 65.881444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.889843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.898468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.973220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.973253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.973275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.973296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.973318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 66.421568][ T4248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538177][ T4248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.623188][ T5824] Bluetooth: hci1: command tx timeout [ 66.668667][ T4248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.694189][ T5824] Bluetooth: hci4: command tx timeout [ 66.699618][ T5824] Bluetooth: hci0: command tx timeout [ 66.705059][ T52] Bluetooth: hci2: command tx timeout [ 66.710446][ T52] Bluetooth: hci3: command tx timeout [ 66.724431][ T4248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.889766][ T4222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.908365][ T4222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.986161][ T5935] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 66.993827][ T5935] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 67.002055][ T5935] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.843985][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.851821][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.046931][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.065519][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.099834][ T5945] ======================================================= [ 68.099834][ T5945] WARNING: The mand mount option has been deprecated and [ 68.099834][ T5945] and is ignored by this kernel. Remove the mand [ 68.099834][ T5945] option from the mount to silence this warning. [ 68.099834][ T5945] ======================================================= [ 68.224106][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.234932][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.444289][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.685762][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 68.693968][ T52] Bluetooth: hci1: command tx timeout [ 68.729872][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.767436][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.774564][ T52] Bluetooth: hci3: command tx timeout [ 68.777513][ T5824] Bluetooth: hci0: command tx timeout [ 68.780971][ T52] Bluetooth: hci2: command tx timeout [ 68.786463][ T5812] Bluetooth: hci4: command tx timeout [ 68.810870][ T42] usb 4-1: Product: syz [ 68.820024][ T42] usb 4-1: Manufacturer: syz [ 68.826377][ T42] usb 4-1: SerialNumber: syz [ 68.921381][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 68.921396][ T30] audit: type=1400 audit(1761990219.228:137): avc: denied { read write } for pid=5959 comm="syz.4.5" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.066501][ T30] audit: type=1400 audit(1761990219.228:138): avc: denied { open } for pid=5959 comm="syz.4.5" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.152662][ T42] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.628728][ T30] audit: type=1400 audit(1761990219.938:139): avc: denied { create } for pid=5963 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.649024][ T30] audit: type=1400 audit(1761990219.938:140): avc: denied { ioctl } for pid=5963 comm="syz.1.10" path="socket:[8616]" dev="sockfs" ino=8616 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.757999][ T30] audit: type=1400 audit(1761990220.748:141): avc: denied { create } for pid=5969 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.023868][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.030274][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.060469][ T30] audit: type=1400 audit(1761990221.368:142): avc: denied { bind } for pid=5969 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.168940][ T5871] usb 4-1: USB disconnect, device number 2 [ 71.218895][ T30] audit: type=1400 audit(1761990221.368:143): avc: denied { accept } for pid=5969 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.227614][ T5976] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.239389][ T5871] usblp0: removed [ 71.326713][ T30] audit: type=1400 audit(1761990221.368:144): avc: denied { write } for pid=5969 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.355604][ T5976] bridge_slave_0: left allmulticast mode [ 71.361317][ T5976] bridge_slave_0: left promiscuous mode [ 71.367369][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.372697][ T30] audit: type=1400 audit(1761990221.398:145): avc: denied { read } for pid=5969 comm="syz.0.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.444014][ T5982] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 71.563913][ T30] audit: type=1400 audit(1761990221.398:146): avc: denied { open } for pid=5969 comm="syz.0.12" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.590322][ T5976] bridge_slave_1: left allmulticast mode [ 71.596022][ T5976] bridge_slave_1: left promiscuous mode [ 71.601977][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.977622][ T5976] bond0: (slave bond_slave_0): Releasing backup interface [ 71.996457][ T5976] bond0: (slave bond_slave_1): Releasing backup interface [ 72.011720][ T5976] team0: Port device team_slave_0 removed [ 72.028440][ T5976] team0: Port device team_slave_1 removed [ 72.035049][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.042440][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.052650][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.060637][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.072641][ T5976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.141876][ T5982] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.245079][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.463262][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 72.480713][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.494509][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.514125][ T5871] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 72.524253][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.852955][ T5871] usb 4-1: config 0 descriptor?? [ 72.928991][ T5994] SELinux: failed to load policy [ 73.437226][ T6010] netlink: 34 bytes leftover after parsing attributes in process `syz.4.21'. [ 73.969806][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 73.969818][ T30] audit: type=1400 audit(1761990224.268:164): avc: denied { allowed } for pid=5999 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.141950][ T30] audit: type=1400 audit(1761990224.278:165): avc: denied { create } for pid=5999 comm="syz.2.20" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.469175][ T30] audit: type=1400 audit(1761990224.278:166): avc: denied { map } for pid=5999 comm="syz.2.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.764057][ T30] audit: type=1400 audit(1761990224.278:167): avc: denied { read write } for pid=5999 comm="syz.2.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.788489][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.913624][ T30] audit: type=1400 audit(1761990224.368:168): avc: denied { setopt } for pid=6009 comm="syz.0.22" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.933641][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.952719][ T30] audit: type=1400 audit(1761990225.118:169): avc: denied { create } for pid=5999 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.998417][ T30] audit: type=1400 audit(1761990225.308:170): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 75.018312][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.022044][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 75.070281][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 75.170887][ T6024] process 'syz.0.23' launched './file1' with NULL argv: empty string added [ 75.182882][ T30] audit: type=1400 audit(1761990225.478:171): avc: denied { execute } for pid=6019 comm="syz.0.23" name="file1" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.240866][ T5871] usb 4-1: USB disconnect, device number 3 [ 75.450561][ T30] audit: type=1400 audit(1761990225.488:172): avc: denied { execute_no_trans } for pid=6019 comm="syz.0.23" path="/5/file1" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.565640][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.105674][ T977] cfg80211: failed to load regulatory.db [ 76.118906][ T30] audit: type=1400 audit(1761990226.428:173): avc: denied { create } for pid=6028 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.436145][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 79.436183][ T30] audit: type=1400 audit(1761990229.708:178): avc: denied { create } for pid=6062 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.803236][ T30] audit: type=1400 audit(1761990229.708:179): avc: denied { create } for pid=6062 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.844309][ T30] audit: type=1400 audit(1761990230.008:180): avc: denied { bind } for pid=6067 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.946015][ T30] audit: type=1400 audit(1761990230.018:181): avc: denied { write } for pid=6067 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.063416][ T6072] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 80.186496][ T6072] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 80.623653][ T30] audit: type=1400 audit(1761990230.918:182): avc: denied { read } for pid=6076 comm="syz.0.36" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.145385][ T6086] hfs: can't find a HFS filesystem on dev nullb0 [ 81.480749][ T30] audit: type=1400 audit(1761990230.918:183): avc: denied { open } for pid=6076 comm="syz.0.36" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.504845][ T30] audit: type=1400 audit(1761990231.358:184): avc: denied { getopt } for pid=6078 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.821088][ T30] audit: type=1400 audit(1761990233.128:185): avc: denied { shutdown } for pid=6089 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.294010][ T30] audit: type=1400 audit(1761990233.578:186): avc: denied { read write } for pid=6100 comm="syz.2.42" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.844940][ T30] audit: type=1400 audit(1761990233.578:187): avc: denied { open } for pid=6100 comm="syz.2.42" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.522226][ T6114] batman_adv: batadv0: Adding interface: gretap1 [ 84.528764][ T6114] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.554355][ T6114] batman_adv: batadv0: Interface activated: gretap1 [ 85.340276][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 85.340292][ T30] audit: type=1400 audit(1761990235.638:191): avc: denied { write } for pid=6123 comm="syz.0.49" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.151874][ T30] audit: type=1400 audit(1761990235.878:192): avc: denied { mount } for pid=6123 comm="syz.0.49" name="/" dev="ramfs" ino=9106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.236972][ T6132] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 86.258390][ T30] audit: type=1400 audit(1761990235.878:193): avc: denied { read } for pid=6123 comm="syz.0.49" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.683141][ T30] audit: type=1400 audit(1761990235.878:194): avc: denied { open } for pid=6123 comm="syz.0.49" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.783216][ T30] audit: type=1400 audit(1761990235.878:195): avc: denied { ioctl } for pid=6123 comm="syz.0.49" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.221538][ T30] audit: type=1400 audit(1761990235.878:196): avc: denied { set_context_mgr } for pid=6123 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.281854][ T30] audit: type=1400 audit(1761990235.898:197): avc: denied { execute } for pid=6123 comm="syz.0.49" name="file2" dev="ramfs" ino=9108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 87.373118][ T30] audit: type=1400 audit(1761990235.898:198): avc: denied { execute_no_trans } for pid=6123 comm="syz.0.49" path="/file2" dev="ramfs" ino=9108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 87.433131][ T30] audit: type=1400 audit(1761990235.898:199): avc: denied { create } for pid=6123 comm="syz.0.49" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 87.610002][ T30] audit: type=1400 audit(1761990236.628:200): avc: denied { name_bind } for pid=6134 comm="syz.1.50" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.911875][ T6170] xt_cgroup: invalid path, errno=-2 [ 88.983649][ T6170] hub 1-0:1.0: USB hub found [ 88.989561][ T6170] hub 1-0:1.0: 1 port detected [ 89.211225][ T6173] omfs: Invalid superblock (0) [ 90.586112][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 90.673223][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 90.673239][ T30] audit: type=1400 audit(1761990240.958:211): avc: denied { sqpoll } for pid=6178 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.712882][ T30] audit: type=1400 audit(1761990243.568:212): avc: denied { create } for pid=6195 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.747274][ T30] audit: type=1400 audit(1761990243.578:213): avc: denied { setopt } for pid=6195 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.395151][ T30] audit: type=1400 audit(1761990244.708:214): avc: denied { bind } for pid=6203 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.414992][ T6207] Zero length message leads to an empty skb [ 94.492939][ T30] audit: type=1400 audit(1761990244.798:215): avc: denied { setopt } for pid=6203 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.783560][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.763845][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 96.143631][ T5858] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 96.157532][ T5858] usb 1-1: config 4 has no interface number 0 [ 96.205591][ T5858] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.353164][ T5858] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.796131][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 96.805029][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 96.814027][ T6228] netlink: 'syz.3.69': attribute type 18 has an invalid length. [ 96.905678][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 96.914573][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 96.923465][ T6228] netlink: 'syz.3.69': attribute type 18 has an invalid length. [ 96.939938][ T325] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.959254][ T325] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.968723][ T325] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.149280][ T4226] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.333987][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 97.342895][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 97.353675][ T6224] netlink: 'syz.4.68': attribute type 14 has an invalid length. [ 97.493241][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 97.502573][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.672901][ T30] audit: type=1400 audit(1761990247.928:216): avc: denied { name_bind } for pid=6229 comm="syz.0.71" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.787502][ T30] audit: type=1400 audit(1761990247.938:217): avc: denied { node_bind } for pid=6229 comm="syz.0.71" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 97.810432][ T30] audit: type=1400 audit(1761990247.938:218): avc: denied { connect } for pid=6229 comm="syz.0.71" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.834198][ T5858] usb 1-1: can't set config #4, error -71 [ 97.854764][ T5858] usb 1-1: USB disconnect, device number 2 [ 97.877974][ T30] audit: type=1400 audit(1761990247.938:219): avc: denied { name_connect } for pid=6229 comm="syz.0.71" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.315133][ T30] audit: type=1400 audit(1761990248.218:220): avc: denied { create } for pid=6238 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.399221][ T30] audit: type=1400 audit(1761990248.568:221): avc: denied { ioctl } for pid=6231 comm="syz.3.72" path="socket:[9656]" dev="sockfs" ino=9656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.671066][ T30] audit: type=1400 audit(1761990248.648:222): avc: denied { ioctl } for pid=6237 comm="syz.1.73" path="socket:[9658]" dev="sockfs" ino=9658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.444883][ T30] audit: type=1400 audit(1761990248.908:223): avc: denied { mounton } for pid=6244 comm="syz.0.75" path="/18/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.853636][ T980] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.247032][ T6270] netlink: 'syz.3.79': attribute type 16 has an invalid length. [ 100.254775][ T6270] netlink: 'syz.3.79': attribute type 17 has an invalid length. [ 100.679230][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.686736][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.738993][ T6242] syz.1.73 (6242): drop_caches: 2 [ 100.795222][ T980] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 100.803798][ T980] usb 1-1: config 160 has no interface number 0 [ 100.826743][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.837284][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.898649][ T980] usb 1-1: config 160 interface 200 has no altsetting 0 [ 100.990050][ T980] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 101.087672][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.187393][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.197285][ T980] usb 1-1: Product: syz [ 101.202323][ T980] usb 1-1: Manufacturer: syz [ 101.207367][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.223109][ T980] usb 1-1: SerialNumber: syz [ 101.229591][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.388759][ T980] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.450029][ T980] usb 1-1: MIDIStreaming interface descriptor not found [ 101.479899][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.585793][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.717301][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.734334][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.759331][ T6263] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.78' sets config #0 [ 102.304466][ T30] audit: type=1400 audit(1761990252.138:224): avc: denied { mount } for pid=6279 comm="syz.3.81" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.307245][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.335919][ T6265] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.78' sets config #1 [ 102.367782][ T980] usb 1-1: USB disconnect, device number 3 [ 104.337412][ T6290] udevd[6290]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.391754][ T30] audit: type=1400 audit(1761990252.138:225): avc: denied { create } for pid=6279 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.444513][ T30] audit: type=1400 audit(1761990252.148:226): avc: denied { listen } for pid=6279 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.466622][ T30] audit: type=1400 audit(1761990252.148:227): avc: denied { accept } for pid=6279 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.743718][ T30] audit: type=1400 audit(1761990253.168:228): avc: denied { bind } for pid=6294 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.774665][ T30] audit: type=1400 audit(1761990253.178:229): avc: denied { ioctl } for pid=6294 comm="syz.4.85" path="socket:[9764]" dev="sockfs" ino=9764 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.196598][ T6319] ceph: No mds server is up or the cluster is laggy [ 107.565633][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 107.588784][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 107.728783][ T30] audit: type=1400 audit(1761990258.038:230): avc: denied { ioctl } for pid=6323 comm="syz.1.89" path="socket:[10478]" dev="sockfs" ino=10478 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 107.989362][ T6329] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 108.008679][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'. [ 108.193418][ T6331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.369915][ T30] audit: type=1400 audit(1761990258.038:231): avc: denied { connect } for pid=6323 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.389906][ T30] audit: type=1400 audit(1761990258.128:232): avc: denied { name_bind } for pid=6325 comm="syz.0.90" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.411874][ T30] audit: type=1400 audit(1761990258.318:233): avc: denied { bind } for pid=6325 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.481864][ T30] audit: type=1400 audit(1761990259.788:234): avc: denied { setopt } for pid=6336 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.504043][ T30] audit: type=1400 audit(1761990259.818:235): avc: denied { bind } for pid=6336 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.525383][ T30] audit: type=1400 audit(1761990259.818:236): avc: denied { append } for pid=6333 comm="syz.0.94" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.633664][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.413108][ T30] audit: type=1400 audit(1761990260.068:237): avc: denied { setattr } for pid=6334 comm="syz.2.93" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 110.559442][ T6347] batman_adv: batadv0: Adding interface: ipvlan2 [ 110.568327][ T6347] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.599308][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.615904][ T6350] loop6: detected capacity change from 0 to 524288000 [ 110.638070][ T30] audit: type=1400 audit(1761990260.458:238): avc: denied { connect } for pid=6336 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.721374][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.723796][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 110.753171][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.761228][ T9] usb 4-1: Product: syz [ 110.765471][ T9] usb 4-1: Manufacturer: syz [ 110.772620][ T9] usb 4-1: SerialNumber: syz [ 110.863381][ T30] audit: type=1400 audit(1761990261.148:239): avc: denied { connect } for pid=6346 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.905541][ T30] audit: type=1400 audit(1761990261.178:240): avc: denied { setopt } for pid=6349 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.063236][ T5824] Bluetooth: hci0: connection err: -111 [ 111.115296][ T9] usb 4-1: config 0 descriptor?? [ 111.116143][ T9] usb 4-1: can't set config #0, error -71 [ 111.117825][ T9] usb 4-1: USB disconnect, device number 4 [ 111.213235][ T6347] batman_adv: batadv0: Interface activated: ipvlan2 [ 111.254493][ T6357] tipc: Started in network mode [ 111.363147][ T6357] tipc: Node identity 327b639a1262, cluster identity 4711 [ 111.394759][ T30] audit: type=1400 audit(1761990261.708:241): avc: denied { create } for pid=6359 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.414798][ T6357] tipc: Enabled bearer , priority 0 [ 111.459150][ T30] audit: type=1400 audit(1761990261.708:242): avc: denied { read write } for pid=6359 comm="syz.2.99" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.472895][ T6347] vlan2: entered allmulticast mode [ 111.487794][ T6347] hsr_slave_1: entered allmulticast mode [ 111.756239][ T6357] syzkaller0: entered promiscuous mode [ 111.803144][ T6357] syzkaller0: entered allmulticast mode [ 112.873550][ T5824] Bluetooth: hci4: command tx timeout [ 112.881144][ T5858] tipc: Node number set to 538534810 [ 112.908958][ T6358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.98'. [ 113.802525][ T6357] Invalid option length (938168) for dns_resolver key [ 113.908084][ T6365] tipc: Resetting bearer [ 114.089072][ T6356] tipc: Resetting bearer [ 114.330966][ T6356] tipc: Disabling bearer [ 114.987493][ T6377] bond1: Removing last arp target with arp_interval on [ 114.994402][ T6377] bond1: entered allmulticast mode [ 115.081257][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 115.081267][ T30] audit: type=1400 audit(1761990265.388:248): avc: denied { ioctl } for pid=6378 comm="syz.4.104" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9942 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.151038][ T30] audit: type=1400 audit(1761990265.458:249): avc: denied { execute_no_trans } for pid=6384 comm="syz.2.106" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.141586][ T30] audit: type=1400 audit(1761990266.978:250): avc: denied { create } for pid=6397 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.235145][ T30] audit: type=1400 audit(1761990266.988:251): avc: denied { mounton } for pid=6397 comm="syz.1.108" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.382749][ T30] audit: type=1400 audit(1761990269.388:252): avc: denied { write } for pid=6410 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.763867][ T5958] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.143170][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 121.413828][ T5958] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 121.433404][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.448808][ T5958] usb 3-1: Product: syz [ 121.455208][ T5958] usb 3-1: Manufacturer: syz [ 121.573943][ T6441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.017294][ T5958] usb 3-1: SerialNumber: syz [ 122.041022][ T30] audit: type=1400 audit(1761990272.098:253): avc: denied { node_bind } for pid=6439 comm="syz.1.118" saddr=::ffff:127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 122.129183][ T5958] usb 3-1: config 0 descriptor?? [ 122.147613][ T5958] usbtest 3-1:0.0: FX2 device [ 122.159984][ T5958] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 122.421693][ T6451] binder: 6446:6451 ioctl c0046209 0 returned -22 [ 122.919323][ T6450] binder: 6449:6450 ioctl c0306201 0 returned -14 [ 123.322662][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.957063][ T977] usb 3-1: USB disconnect, device number 2 [ 123.964259][ T30] audit: type=1400 audit(1761990274.258:254): avc: denied { watch } for pid=6449 comm="syz.3.120" path="/28/control" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.272170][ T6465] Illegal XDP return value 4294967294 on prog (id 31) dev N/A, expect packet loss! [ 124.649254][ T30] audit: type=1400 audit(1761990274.958:255): avc: denied { connect } for pid=6468 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.706603][ T6478] mkiss: ax0: crc mode is auto. [ 125.389113][ T30] audit: type=1400 audit(1761990274.978:256): avc: denied { write } for pid=6468 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.489658][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 125.541378][ T30] audit: type=1400 audit(1761990275.768:257): avc: denied { create } for pid=6476 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.885755][ T6486] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 125.889052][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.127'. [ 126.736702][ T30] audit: type=1400 audit(1761990277.038:258): avc: denied { getopt } for pid=6487 comm="syz.4.129" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.860119][ T30] audit: type=1400 audit(1761990277.158:259): avc: denied { read write } for pid=6487 comm="syz.4.129" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 126.886140][ T30] audit: type=1400 audit(1761990277.158:260): avc: denied { open } for pid=6487 comm="syz.4.129" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 126.911129][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.216029][ T30] audit: type=1326 audit(1761990277.318:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.1.128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6134b8efc9 code=0x0 [ 127.325999][ T6498] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.130'. [ 128.057316][ T6506] o2cb: This node has not been configured. [ 128.063278][ T6506] o2cb: Cluster check failed. Fix errors before retrying. [ 128.070479][ T6506] (syz.2.131,6506,1):user_dlm_register:674 ERROR: status = -22 [ 128.078181][ T6506] (syz.2.131,6506,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 128.370065][ T30] audit: type=1400 audit(1761990278.368:262): avc: denied { add_name } for pid=6502 comm="syz.2.131" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.480102][ T30] audit: type=1400 audit(1761990278.368:263): avc: denied { create } for pid=6502 comm="syz.2.131" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.500780][ T30] audit: type=1400 audit(1761990278.368:264): avc: denied { associate } for pid=6502 comm="syz.2.131" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.636508][ T6509] exFAT-fs (nullb0): invalid boot record signature [ 128.643599][ T6509] exFAT-fs (nullb0): failed to read boot sector [ 128.649865][ T6509] exFAT-fs (nullb0): failed to recognize exfat type [ 129.250419][ T30] audit: type=1400 audit(1761990279.538:265): avc: denied { ioctl } for pid=6499 comm="syz.1.132" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 130.133096][ T30] audit: type=1400 audit(1761990279.998:266): avc: denied { write } for pid=6518 comm="syz.3.135" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.272108][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.279631][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.088581][ T30] audit: type=1400 audit(1761990281.398:267): avc: denied { write } for pid=6516 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.090860][ T6537] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.724898][ T30] audit: type=1400 audit(1761990281.818:268): avc: denied { ioctl } for pid=6524 comm="syz.4.138" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 131.857006][ T30] audit: type=1400 audit(1761990282.088:269): avc: denied { open } for pid=6541 comm="syz.3.139" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 131.911401][ T30] audit: type=1400 audit(1761990282.088:270): avc: denied { create } for pid=6541 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 132.383571][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.404401][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.507921][ T30] audit: type=1400 audit(1761990282.818:271): avc: denied { connect } for pid=6552 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.642076][ T30] audit: type=1400 audit(1761990282.858:272): avc: denied { read write } for pid=6550 comm="syz.0.141" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.748135][ T6538] bridge_slave_1: left allmulticast mode [ 132.769313][ T30] audit: type=1400 audit(1761990282.858:273): avc: denied { open } for pid=6550 comm="syz.0.141" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.795927][ T6538] bridge_slave_1: left promiscuous mode [ 132.799826][ T30] audit: type=1400 audit(1761990282.858:274): avc: denied { ioctl } for pid=6550 comm="syz.0.141" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.971184][ T30] audit: type=1400 audit(1761990282.858:275): avc: denied { name_connect } for pid=6550 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.994274][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.009384][ T30] audit: type=1400 audit(1761990282.938:276): avc: denied { listen } for pid=6550 comm="syz.0.141" lport=41806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.032314][ T6538] bridge_slave_0: left allmulticast mode [ 133.062075][ T6538] bridge_slave_0: left promiscuous mode [ 133.073856][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.371503][ T30] audit: type=1400 audit(1761990282.938:277): avc: denied { ioctl } for pid=6550 comm="syz.0.141" path="socket:[10807]" dev="sockfs" ino=10807 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.408748][ T30] audit: type=1400 audit(1761990282.938:278): avc: denied { accept } for pid=6550 comm="syz.0.141" lport=41806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.985043][ T30] audit: type=1400 audit(1761990284.298:279): avc: denied { write } for pid=6552 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.205120][ T6568] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 134.304587][ T30] audit: type=1400 audit(1761990284.328:280): avc: denied { write } for pid=6552 comm="syz.4.142" path="socket:[10189]" dev="sockfs" ino=10189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.413395][ T6588] veth0_to_team: entered promiscuous mode [ 135.419171][ T6588] veth0_to_team: entered allmulticast mode [ 135.462711][ T6587] evm: overlay not supported [ 137.703220][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 137.723180][ T30] audit: type=1400 audit(1761990287.978:288): avc: denied { mount } for pid=6603 comm="syz.1.150" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.429454][ T30] audit: type=1400 audit(1761990288.458:289): avc: denied { read } for pid=6604 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.664713][ T30] audit: type=1326 audit(1761990289.878:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6622 comm="syz.0.157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc16298efc9 code=0x0 [ 141.541316][ T30] audit: type=1400 audit(1761990291.848:291): avc: denied { setopt } for pid=6648 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.543186][ T6652] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.161'. [ 141.991434][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 142.288472][ T6656] syz_tun: entered allmulticast mode [ 142.423735][ T6658] binder: 6657:6658 ioctl 89f2 200000000300 returned -22 [ 142.434814][ T30] audit: type=1400 audit(1761990292.638:292): avc: denied { shutdown } for pid=6657 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.493254][ T30] audit: type=1400 audit(1761990292.728:293): avc: denied { connect } for pid=6657 comm="syz.0.164" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.514549][ T30] audit: type=1400 audit(1761990292.798:294): avc: denied { write } for pid=6657 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.535711][ T30] audit: type=1400 audit(1761990292.808:295): avc: denied { write } for pid=6657 comm="syz.0.164" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.690953][ T30] audit: type=1400 audit(1761990292.998:296): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.882198][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 142.928620][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 142.986150][ T30] audit: type=1400 audit(1761990293.298:297): avc: denied { read } for pid=6660 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.709179][ T30] audit: type=1400 audit(1761990293.568:298): avc: denied { create } for pid=6668 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 143.769136][ T30] audit: type=1400 audit(1761990294.008:299): avc: denied { read write } for pid=6660 comm="syz.2.165" name="mouse0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 144.030561][ T30] audit: type=1400 audit(1761990294.008:300): avc: denied { open } for pid=6660 comm="syz.2.165" path="/dev/input/mouse0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 144.132541][ T30] audit: type=1400 audit(1761990294.128:301): avc: denied { ioctl } for pid=6660 comm="syz.2.165" path="/dev/input/mouse0" dev="devtmpfs" ino=983 ioctlcmd=0x54d2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 144.201312][ T30] audit: type=1326 audit(1761990294.128:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.2.165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01c2d8efc9 code=0x0 [ 144.665859][ T30] audit: type=1400 audit(1761990294.758:303): avc: denied { create } for pid=6681 comm="syz.1.170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.841752][ T30] audit: type=1400 audit(1761990294.768:304): avc: denied { write } for pid=6681 comm="syz.1.170" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.879901][ T30] audit: type=1400 audit(1761990294.768:305): avc: denied { open } for pid=6681 comm="syz.1.170" path="/32/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.010658][ T30] audit: type=1400 audit(1761990294.768:306): avc: denied { ioctl } for pid=6681 comm="syz.1.170" path="/32/file0" dev="tmpfs" ino=191 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.530081][ T6704] tmpfs: Bad value for 'mpol' [ 147.746500][ T977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.043946][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 148.074688][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 148.074701][ T30] audit: type=1400 audit(1761990298.388:315): avc: denied { create } for pid=6707 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 148.177434][ T977] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 148.181168][ T30] audit: type=1400 audit(1761990298.428:316): avc: denied { read open } for pid=6713 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.323146][ T980] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.343105][ T30] audit: type=1400 audit(1761990298.428:317): avc: denied { getattr } for pid=6713 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.374668][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.417173][ T977] usb 4-1: Product: syz [ 148.437159][ T30] audit: type=1400 audit(1761990298.748:318): avc: denied { read write } for pid=6715 comm="syz.4.179" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.462463][ T977] usb 4-1: Manufacturer: syz [ 148.691654][ T977] usb 4-1: SerialNumber: syz [ 148.703603][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.715242][ T977] usb 4-1: config 0 descriptor?? [ 149.108851][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.122236][ T980] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.142085][ T30] audit: type=1400 audit(1761990298.748:319): avc: denied { open } for pid=6715 comm="syz.4.179" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.173110][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.176083][ T977] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 149.213136][ T977] 00 00 00 00 00 00 00 00 [ 149.221036][ T977] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 149.271647][ T980] usb 2-1: config 0 descriptor?? [ 149.289247][ T980] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 149.292574][ T6719] bond0: entered promiscuous mode [ 149.301596][ T6719] bond_slave_0: entered promiscuous mode [ 149.307316][ T6719] bond_slave_1: entered promiscuous mode [ 149.314023][ T6719] batadv0: entered promiscuous mode [ 149.320080][ T6719] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.373777][ T30] audit: type=1400 audit(1761990298.948:320): avc: denied { ioctl } for pid=6717 comm="syz.0.178" path="socket:[11816]" dev="sockfs" ino=11816 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.483675][ T6731] fuse: Unknown parameter 'Failures TCPSackFailures TCPLossFailures TCPFastRetrans TCPSlowStartRetrans TCPTimeouts TCPLossProbes TCPLossProbeRecovery TCPRenoRecoveryFail TCPSackRecoveryFail TCPRcvCollapsed TCPBacklogCoalesce TCPDSACKOldSent TCPDSACKOfoSent TCPDSACKRecv TCPDSACKOfoRecv TCPAbortOnData TCPAbortOnClose TCPAbortOnMemory TCPAbortOnTim' [ 149.517452][ T6730] netlink: 156 bytes leftover after parsing attributes in process `syz.2.180'. [ 149.863141][ T30] audit: type=1400 audit(1761990300.168:321): avc: denied { load_policy } for pid=6724 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.517001][ T6727] SELinux: failed to load policy [ 151.261091][ T30] audit: type=1400 audit(1761990301.568:322): avc: denied { add_name } for pid=6710 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.298609][ T5858] usb 2-1: USB disconnect, device number 2 [ 151.928533][ T30] audit: type=1400 audit(1761990301.568:323): avc: denied { create } for pid=6710 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.951456][ T30] audit: type=1400 audit(1761990301.568:324): avc: denied { write } for pid=6710 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=2696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.308824][ T6752] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 152.317290][ T6752] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 152.327257][ T6752] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 152.807886][ T6747] mmap: syz.4.181 (6747) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.491080][ T5952] usb 4-1: USB disconnect, device number 5 [ 153.506493][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 153.506508][ T30] audit: type=1400 audit(1761990303.818:330): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 153.557113][ T6772] netlink: 7 bytes leftover after parsing attributes in process `syz.2.185'. [ 153.609266][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 153.772036][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 154.412947][ T30] audit: type=1400 audit(1761990304.718:331): avc: denied { bind } for pid=6780 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.219374][ T6789] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.188'. [ 155.556784][ T30] audit: type=1400 audit(1761990305.868:332): avc: denied { append } for pid=6787 comm="syz.3.190" name="v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.665708][ T30] audit: type=1400 audit(1761990305.978:333): avc: denied { create } for pid=6795 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.668951][ T30] audit: type=1400 audit(1761990305.978:334): avc: denied { setopt } for pid=6795 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.700025][ T6804] 9pnet_fd: Insufficient options for proto=fd [ 155.700319][ T30] audit: type=1400 audit(1761990305.998:335): avc: denied { bind } for pid=6795 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.759219][ T6777] pim6reg: entered allmulticast mode [ 156.076323][ T30] audit: type=1400 audit(1761990306.388:336): avc: denied { mount } for pid=6805 comm="syz.1.193" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 156.509701][ T30] audit: type=1400 audit(1761990306.668:337): avc: denied { firmware_load } for pid=6797 comm="syz.0.192" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 156.602809][ T6811] syz.0.192 (6811) used greatest stack depth: 19176 bytes left [ 158.937610][ T30] audit: type=1400 audit(1761990309.208:338): avc: denied { setopt } for pid=6826 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.053818][ T30] audit: type=1400 audit(1761990309.248:339): avc: denied { read } for pid=6826 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.794868][ T30] audit: type=1400 audit(1761990310.088:340): avc: denied { append } for pid=6840 comm="syz.3.199" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.178742][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 160.353112][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 160.361517][ T5858] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 160.873192][ T30] audit: type=1400 audit(1761990311.088:341): avc: denied { name_connect } for pid=6850 comm="syz.4.200" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 160.919062][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.943404][ T5858] usb 1-1: Product: syz [ 160.947697][ T30] audit: type=1400 audit(1761990311.148:342): avc: denied { write } for pid=6850 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.967626][ T5858] usb 1-1: Manufacturer: syz [ 160.972232][ T5858] usb 1-1: SerialNumber: syz [ 161.025607][ T5858] usb 1-1: config 0 descriptor?? [ 161.415940][ T6866] bridge_slave_1: left allmulticast mode [ 161.421648][ T6866] bridge_slave_1: left promiscuous mode [ 161.427764][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.910040][ T30] audit: type=1400 audit(1761990311.938:343): avc: denied { setopt } for pid=6870 comm="syz.2.204" lport=52137 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.951811][ T5858] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 161.964080][ T5858] 00 00 00 00 00 00 00 00 [ 161.968596][ T5858] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 161.981754][ T6866] bridge_slave_0: left allmulticast mode [ 162.102821][ T6866] bridge_slave_0: left promiscuous mode [ 162.119894][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.289968][ T5952] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 162.474709][ T5952] usb 3-1: config 228 has an invalid interface number: 80 but max is 0 [ 162.485641][ T5952] usb 3-1: config 228 has no interface number 0 [ 162.491897][ T5952] usb 3-1: config 228 interface 80 altsetting 16 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 162.530607][ T6880] fuse: Bad value for 'fd' [ 162.662004][ T5952] usb 3-1: config 228 interface 80 has no altsetting 0 [ 162.722786][ T5952] usb 3-1: New USB device found, idVendor=2f26, idProduct=e263, bcdDevice= a.eb [ 162.744081][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.778397][ T5952] usb 3-1: Product: syz [ 162.788507][ T5952] usb 3-1: Manufacturer: syz [ 162.799108][ T5952] usb 3-1: SerialNumber: syz [ 162.983567][ T6889] batman_adv: batadv0: Adding interface: ipvlan2 [ 162.990264][ T6889] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.089404][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.093087][ T6890] loop6: detected capacity change from 0 to 524288000 [ 163.153997][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.206322][ T6889] batman_adv: batadv0: Interface activated: ipvlan2 [ 163.415561][ T30] audit: type=1400 audit(1761990313.728:344): avc: denied { create } for pid=6894 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.575605][ T30] audit: type=1400 audit(1761990313.888:345): avc: denied { ioctl } for pid=6894 comm="syz.3.206" path="socket:[12322]" dev="sockfs" ino=12322 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.311882][ T5952] rndis_host 3-1:228.80: invalid descriptor buffer length [ 164.413280][ T5952] usb 3-1: bad CDC descriptors [ 164.431151][ T5952] usb 3-1: USB disconnect, device number 3 [ 164.572423][ T6889] vlan2: entered allmulticast mode [ 164.578401][ T6889] hsr_slave_1: entered allmulticast mode [ 164.930084][ T5958] usb 1-1: USB disconnect, device number 4 [ 165.074050][ T30] audit: type=1400 audit(1761990315.378:346): avc: denied { read write } for pid=6920 comm="syz.2.210" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 165.114703][ T30] audit: type=1400 audit(1761990315.378:347): avc: denied { open } for pid=6920 comm="syz.2.210" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 165.150549][ T6926] tipc: Started in network mode [ 165.155751][ T6926] tipc: Node identity 7f000001, cluster identity 4711 [ 165.165839][ T6926] tipc: Enabled bearer , priority 10 [ 165.187647][ T6926] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 165.197129][ T6926] tipc: Enabled bearer , priority 10 [ 166.275133][ T30] audit: type=1400 audit(1761990316.588:348): avc: denied { create } for pid=6936 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.295586][ T5952] tipc: Node number set to 2130706433 [ 167.117236][ T30] audit: type=1400 audit(1761990317.318:349): avc: denied { getopt } for pid=6936 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.541401][ T30] audit: type=1400 audit(1761990317.318:350): avc: denied { connect } for pid=6936 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.988898][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 168.024265][ T6952] ceph: No mds server is up or the cluster is laggy [ 168.229116][ T30] audit: type=1400 audit(1761990318.498:351): avc: denied { bind } for pid=6953 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.441511][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 168.508229][ T30] audit: type=1400 audit(1761990318.508:352): avc: denied { listen } for pid=6953 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.745334][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 168.842321][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 169.174412][ T5812] Bluetooth: hci4: command 0x0405 tx timeout [ 169.253894][ T6977] program syz.3.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.303953][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 169.712434][ T30] audit: type=1400 audit(1761990319.858:353): avc: denied { setopt } for pid=6970 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.183879][ T30] audit: type=1400 audit(1761990320.498:354): avc: denied { create } for pid=6985 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.338434][ T30] audit: type=1400 audit(1761990320.568:355): avc: denied { shutdown } for pid=6985 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.366818][ T30] audit: type=1400 audit(1761990321.648:356): avc: denied { write } for pid=6994 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 171.494448][ T30] audit: type=1400 audit(1761990321.808:357): avc: denied { read } for pid=7002 comm="syz.2.225" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.824197][ T30] audit: type=1400 audit(1761990321.808:358): avc: denied { open } for pid=7002 comm="syz.2.225" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.307103][ T30] audit: type=1400 audit(1761990322.318:359): avc: denied { ioctl } for pid=7002 comm="syz.2.225" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.491842][ T30] audit: type=1400 audit(1761990322.578:360): avc: denied { getopt } for pid=7002 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.512806][ T30] audit: type=1400 audit(1761990323.608:361): avc: denied { read } for pid=7013 comm="syz.0.227" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 173.555538][ T7022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.574628][ T30] audit: type=1400 audit(1761990323.608:362): avc: denied { open } for pid=7013 comm="syz.0.227" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.023775][ T30] audit: type=1400 audit(1761990323.618:363): avc: denied { ioctl } for pid=7013 comm="syz.0.227" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.762658][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 174.762843][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 174.797176][ T7042] vxfs: WRONG superblock magic 00000000 at 1 [ 174.797389][ T7042] vxfs: WRONG superblock magic 00000000 at 8 [ 174.797399][ T7042] vxfs: can't find superblock. [ 174.903446][ T7022] ceph: No mds server is up or the cluster is laggy [ 175.217168][ T7050] netlink: 'syz.1.230': attribute type 5 has an invalid length. [ 175.977016][ T7049] program syz.0.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.986766][ T7049] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.209794][ T30] audit: type=1400 audit(1761990326.288:364): avc: denied { ioctl } for pid=7045 comm="syz.0.232" path="/dev/sg0" dev="devtmpfs" ino=750 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.642879][ T30] audit: type=1400 audit(1761990328.938:365): avc: denied { listen } for pid=7082 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.204035][ T30] audit: type=1400 audit(1761990328.938:366): avc: denied { accept } for pid=7082 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.226825][ T30] audit: type=1400 audit(1761990328.978:367): avc: denied { setopt } for pid=7079 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.246221][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.264376][ T30] audit: type=1400 audit(1761990329.058:368): avc: denied { mounton } for pid=7079 comm="syz.3.238" path="/53/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 180.954722][ T7102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.005206][ T30] audit: type=1400 audit(1761990331.318:369): avc: denied { write } for pid=7099 comm="syz.3.241" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.155847][ T30] audit: type=1400 audit(1761990331.458:370): avc: denied { listen } for pid=7103 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.769855][ T30] audit: type=1400 audit(1761990331.838:371): avc: denied { connect } for pid=7103 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.850793][ T977] libceph: connect (1)[c::]:6789 error -101 [ 181.858372][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 181.866286][ T7109] ceph: No mds server is up or the cluster is laggy [ 181.877038][ T977] libceph: connect (1)[c::]:6789 error -101 [ 181.884479][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 182.167522][ T977] libceph: connect (1)[c::]:6789 error -101 [ 182.233632][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 182.887091][ T977] libceph: connect (1)[c::]:6789 error -101 [ 182.893295][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 184.820820][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.981874][ T7154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.778497][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 185.792984][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 185.799246][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 185.805389][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 186.296483][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.323089][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.332865][ T5858] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 186.361779][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.467186][ T5858] usb 2-1: config 0 descriptor?? [ 187.548138][ T5858] usbhid 2-1:0.0: can't add hid device: -71 [ 187.563148][ T5858] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 187.574872][ T5858] usb 2-1: USB disconnect, device number 3 [ 188.073398][ T30] audit: type=1400 audit(1761990338.238:372): avc: denied { bind } for pid=7176 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.407648][ T7191] tipc: Enabled bearer , priority 10 [ 189.422443][ T7191] tipc: Enabled bearer , priority 0 [ 192.178946][ T7235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.263154][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.389010][ T7248] Bluetooth: MGMT ver 1.23 [ 193.414496][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 193.459976][ T5858] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.460003][ T5858] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.460020][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.460057][ T5858] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 193.460080][ T5858] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 193.461378][ T5858] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.461403][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.461422][ T5858] usb 3-1: Product: syz [ 193.461436][ T5858] usb 3-1: Manufacturer: syz [ 193.470704][ T5858] cdc_wdm 3-1:1.0: skipping garbage [ 193.470724][ T5858] cdc_wdm 3-1:1.0: skipping garbage [ 193.472324][ T5858] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 193.472342][ T5858] cdc_wdm 3-1:1.0: Unknown control protocol [ 193.832941][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.832994][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.693940][ T30] audit: type=1400 audit(1761990345.998:373): avc: denied { read write } for pid=7238 comm="syz.2.264" name="cdc-wdm0" dev="devtmpfs" ino=2865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 195.693992][ T30] audit: type=1400 audit(1761990345.998:374): avc: denied { open } for pid=7238 comm="syz.2.264" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 298.822977][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 298.822995][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7232/1:b..l [ 298.823462][ C0] rcu: (detected by 0, t=10502 jiffies, g=12957, q=240 ncpus=2) [ 298.823477][ C0] task:syz.3.263 state:R running task stack:25992 pid:7232 tgid:7225 ppid:5808 task_flags:0x400040 flags:0x00080003 [ 298.823533][ C0] Call Trace: [ 298.823539][ C0] [ 298.823550][ C0] __schedule+0x1190/0x5de0 [ 298.823576][ C0] ? mark_held_locks+0x49/0x80 [ 298.823620][ C0] ? __pfx___schedule+0x10/0x10 [ 298.823655][ C0] ? mark_held_locks+0x49/0x80 [ 298.823683][ C0] preempt_schedule_irq+0x51/0x90 [ 298.823707][ C0] irqentry_exit+0x36/0x90 [ 298.823731][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.823750][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 298.823765][ C0] Code: 0f c1 05 a8 db 08 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 bd 99 08 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 298.823781][ C0] RSP: 0018:ffffc900047fec88 EFLAGS: 00000206 [ 298.823795][ C0] RAX: 04dba6fdbc55ab00 RBX: ffffffff8e3c4660 RCX: ffffc900047fec94 [ 298.823806][ C0] RDX: 0000000000000001 RSI: ffffffff8da05686 RDI: ffffffff8bf07040 [ 298.823817][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 298.823827][ C0] R10: 0000000000000000 R11: 000000000008280e R12: ffffffff816c1914 [ 298.823838][ C0] R13: 0000000000000206 R14: ffff88802a372480 R15: 0000000000000002 [ 298.823850][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 298.823887][ C0] unwind_next_frame+0x3f9/0x20a0 [ 298.823905][ C0] ? ___sys_recvmsg+0x114/0x1a0 [ 298.823931][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.823956][ C0] arch_stack_walk+0x94/0x100 [ 298.823981][ C0] ? do_recvmmsg+0x2fe/0x750 [ 298.824006][ C0] stack_trace_save+0x8e/0xc0 [ 298.824028][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 298.824056][ C0] ? __lock_acquire+0x622/0x1c90 [ 298.824081][ C0] save_stack+0x160/0x1f0 [ 298.824113][ C0] ? __pfx_save_stack+0x10/0x10 [ 298.824137][ C0] ? post_alloc_hook+0x1c0/0x230 [ 298.824158][ C0] ? get_page_from_freelist+0x10a3/0x3a30 [ 298.824180][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2470 [ 298.824203][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 298.824220][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 298.824240][ C0] ? vma_alloc_folio_noprof+0xed/0x1e0 [ 298.824260][ C0] ? do_wp_page+0x11d8/0x52b0 [ 298.824277][ C0] ? __handle_mm_fault+0x1ae3/0x2aa0 [ 298.824298][ C0] ? handle_mm_fault+0x589/0xd10 [ 298.824318][ C0] ? do_user_addr_fault+0x7a6/0x1370 [ 298.824334][ C0] ? exc_page_fault+0x64/0xc0 [ 298.824356][ C0] ? asm_exc_page_fault+0x26/0x30 [ 298.824371][ C0] ? __put_user_nocheck_4+0x3/0x10 [ 298.824393][ C0] ? ____sys_recvmsg+0x2ee/0x6b0 [ 298.824417][ C0] ? ___sys_recvmsg+0x114/0x1a0 [ 298.824439][ C0] ? __lock_acquire+0x622/0x1c90 [ 298.824467][ C0] __set_page_owner+0x91/0x560 [ 298.824487][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 298.824504][ C0] ? bad_range+0x261/0x4c0 [ 298.824520][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.824548][ C0] post_alloc_hook+0x1c0/0x230 [ 298.824574][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 298.824608][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 298.824627][ C0] ? rcu_is_watching+0x12/0xc0 [ 298.824651][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 298.824674][ C0] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 298.824699][ C0] ? css_rstat_updated+0x1c2/0x510 [ 298.824724][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 298.824756][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.824779][ C0] ? smp_call_function_many_cond+0x1239/0x1600 [ 298.824802][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.824826][ C0] ? smp_call_function_many_cond+0x457/0x1600 [ 298.824854][ C0] ? __lock_acquire+0x622/0x1c90 [ 298.824882][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.824905][ C0] ? policy_nodemask+0xea/0x4e0 [ 298.824926][ C0] alloc_pages_mpol+0x1fb/0x550 [ 298.824946][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.824972][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 298.824995][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 298.825017][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 298.825039][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 298.825067][ C0] do_wp_page+0x11d8/0x52b0 [ 298.825093][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 298.825119][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.825138][ C0] ? ___pte_offset_map+0x2ad/0x4f0 [ 298.825160][ C0] __handle_mm_fault+0x1ae3/0x2aa0 [ 298.825186][ C0] ? mt_find+0x3e2/0xa20 [ 298.825203][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 298.825223][ C0] ? __pfx_mt_find+0x10/0x10 [ 298.825253][ C0] ? find_vma+0xbf/0x140 [ 298.825269][ C0] ? __pfx_find_vma+0x10/0x10 [ 298.825289][ C0] handle_mm_fault+0x589/0xd10 [ 298.825311][ C0] ? __pkru_allows_pkey+0x11/0xb0 [ 298.825330][ C0] do_user_addr_fault+0x7a6/0x1370 [ 298.825350][ C0] ? rcu_is_watching+0x12/0xc0 [ 298.825373][ C0] exc_page_fault+0x64/0xc0 [ 298.825397][ C0] asm_exc_page_fault+0x26/0x30 [ 298.825413][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 298.825436][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 298.825450][ C0] RSP: 0018:ffffc900047ff9e8 EFLAGS: 00050246 [ 298.825463][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000003e9030 [ 298.825474][ C0] RDX: 0000000000080000 RSI: ffffffff89274e83 RDI: 0000000000000005 [ 298.825484][ C0] RBP: ffffc900047ffd88 R08: 0000000000000005 R09: 0000000000000000 [ 298.825494][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 298.825504][ C0] R13: 00002000003e9000 R14: ffffc900047ffdcc R15: 0000000000000002 [ 298.825522][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 298.825550][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 298.825581][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 298.825614][ C0] ? kfree+0x252/0x6d0 [ 298.825634][ C0] ? kfree+0x1d/0x6d0 [ 298.825660][ C0] ___sys_recvmsg+0x114/0x1a0 [ 298.825682][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 298.825717][ C0] ? __pfx___might_resched+0x10/0x10 [ 298.825743][ C0] do_recvmmsg+0x2fe/0x750 [ 298.825768][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 298.825793][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 298.825829][ C0] ? find_held_lock+0x2b/0x80 [ 298.825851][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 298.825874][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 298.825904][ C0] do_syscall_64+0xcd/0xfa0 [ 298.825930][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.825947][ C0] RIP: 0033:0x7f71d998efc9 [ 298.825960][ C0] RSP: 002b:00007f71da7f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 298.825975][ C0] RAX: ffffffffffffffda RBX: 00007f71d9be6090 RCX: 00007f71d998efc9 [ 298.825986][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 298.825997][ C0] RBP: 00007f71d9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.826007][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 298.826017][ C0] R13: 00007f71d9be6128 R14: 00007f71d9be6090 R15: 00007ffe11593398 [ 298.826042][ C0] [ 298.826048][ C0] rcu: rcu_preempt kthread starved for 10260 jiffies! g12957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 298.826066][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 298.826074][ C0] rcu: RCU grace-period kthread stack dump: [ 298.826080][ C0] task:rcu_preempt state:R running task stack:27904 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 298.826138][ C0] Call Trace: [ 298.826143][ C0] [ 298.826153][ C0] __schedule+0x1190/0x5de0 [ 298.826183][ C0] ? __lock_acquire+0x622/0x1c90 [ 298.826212][ C0] ? __pfx___schedule+0x10/0x10 [ 298.826239][ C0] ? find_held_lock+0x2b/0x80 [ 298.826260][ C0] ? schedule+0x2d7/0x3a0 [ 298.826285][ C0] schedule+0xe7/0x3a0 [ 298.826307][ C0] schedule_timeout+0x123/0x290 [ 298.826328][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 298.826349][ C0] ? __pfx_process_timeout+0x10/0x10 [ 298.826374][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.826398][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 298.826426][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 298.826445][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 298.826462][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.826486][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 298.826500][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 298.826525][ C0] rcu_gp_kthread+0x26d/0x380 [ 298.826542][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 298.826558][ C0] ? rcu_is_watching+0x12/0xc0 [ 298.826578][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.826603][ C0] ? __kthread_parkme+0x19e/0x250 [ 298.826627][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 298.826643][ C0] kthread+0x3c5/0x780 [ 298.826660][ C0] ? __pfx_kthread+0x10/0x10 [ 298.826678][ C0] ? rcu_is_watching+0x12/0xc0 [ 298.826698][ C0] ? __pfx_kthread+0x10/0x10 [ 298.826716][ C0] ret_from_fork+0x675/0x7d0 [ 298.826731][ C0] ? __pfx_kthread+0x10/0x10 [ 298.826747][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.826783][ C0] [ 298.826789][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 298.826798][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 298.826817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.826826][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 298.826848][ C0] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 a5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 298.826862][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 298.826875][ C0] RAX: 000000000147a39d RBX: 0000000000000000 RCX: ffffffff8b6082a9 [ 298.826886][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b048 RDI: ffffffff8bf07040 [ 298.826896][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 298.826907][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 298.826917][ C0] R13: ffffffff8e097a00 R14: ffffffff908203d0 R15: 0000000000000000 [ 298.826928][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 298.826945][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.826956][ C0] CR2: 00007f191b2d40ed CR3: 000000005c448000 CR4: 00000000003526f0 [ 298.826966][ C0] Call Trace: [ 298.826972][ C0] [ 298.826978][ C0] default_idle+0x13/0x20 [ 298.826993][ C0] default_idle_call+0x6c/0xb0 [ 298.827010][ C0] do_idle+0x38d/0x500 [ 298.827032][ C0] ? __pfx_do_idle+0x10/0x10 [ 298.827053][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 298.827075][ C0] cpu_startup_entry+0x4f/0x60 [ 298.827095][ C0] rest_init+0x16b/0x2b0 [ 298.827118][ C0] ? acpi_subsystem_init+0x133/0x180 [ 298.827139][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 298.827162][ C0] start_kernel+0x3f6/0x4e0 [ 298.827182][ C0] x86_64_start_reservations+0x18/0x30 [ 298.827203][ C0] x86_64_start_kernel+0x130/0x190 [ 298.827224][ C0] common_startup_64+0x13e/0x148 [ 298.827253][ C0] [ 331.763536][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [aoe_tx0:1297] [ 331.763554][ C1] Modules linked in: [ 331.763563][ C1] irq event stamp: 541495179 [ 331.763568][ C1] hardirqs last enabled at (541495178): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 331.763602][ C1] hardirqs last disabled at (541495179): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 331.763625][ C1] softirqs last enabled at (5346): [] __dev_queue_xmit+0xaf1/0x4490 [ 331.763638][ C1] softirqs last disabled at (5350): [] __dev_queue_xmit+0x276/0x4490 [ 331.763653][ C1] CPU: 1 UID: 0 PID: 1297 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 331.763664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.763669][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 331.763684][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 ba 35 f6 48 89 df e8 1e 0e 36 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 16 26 f6 65 8b 05 7e 55 3e 08 85 c0 74 16 5b [ 331.763696][ C1] RSP: 0018:ffffc9000469f968 EFLAGS: 00000246 [ 331.763708][ C1] RAX: 0000000000000002 RBX: ffffffff9add9280 RCX: 0000000000000002 [ 331.763717][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b048 RDI: ffffffff8bf07040 [ 331.763726][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 331.763735][ C1] R10: ffffffff908203d7 R11: 0000000000000001 R12: ffffffff9add9388 [ 331.763744][ C1] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 331.763752][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 331.763768][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.763775][ C1] CR2: 000000110c3c5b26 CR3: 000000005cbfa000 CR4: 00000000003526f0 [ 331.763781][ C1] Call Trace: [ 331.763786][ C1] [ 331.763792][ C1] uart_write+0x4c1/0xb30 [ 331.763810][ C1] handle_tx+0x204/0x630 [ 331.763829][ C1] dev_hard_start_xmit+0x97/0x740 [ 331.763850][ C1] __dev_queue_xmit+0xa46/0x4490 [ 331.763870][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.763892][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 331.763913][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.763926][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 331.763936][ C1] ? __schedule+0x11a3/0x5de0 [ 331.763951][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 331.763967][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 331.763990][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 331.764009][ C1] ? find_held_lock+0x2b/0x80 [ 331.764027][ C1] ? skb_dequeue+0x126/0x180 [ 331.764041][ C1] ? find_held_lock+0x2b/0x80 [ 331.764060][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.764074][ C1] tx+0xcc/0x190 [ 331.764085][ C1] ? __pfx_tx+0x10/0x10 [ 331.764093][ C1] kthread+0x1e4/0x3e0 [ 331.764109][ C1] ? find_held_lock+0x2b/0x80 [ 331.764120][ C1] ? __pfx_kthread+0x10/0x10 [ 331.764143][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 331.764162][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.764184][ C1] ? __kthread_parkme+0x19e/0x250 [ 331.764205][ C1] ? __pfx_kthread+0x10/0x10 [ 331.764219][ C1] kthread+0x3c5/0x780 [ 331.764229][ C1] ? __pfx_kthread+0x10/0x10 [ 331.764239][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.764251][ C1] ? __pfx_kthread+0x10/0x10 [ 331.764261][ C1] ret_from_fork+0x675/0x7d0 [ 331.764272][ C1] ? __pfx_kthread+0x10/0x10 [ 331.764287][ C1] ret_from_fork_asm+0x1a/0x30 [ 331.764320][ C1] [ 331.764325][ C1] Sending NMI from CPU 1 to CPUs 0: [ 331.764345][ C0] NMI backtrace for cpu 0 [ 331.764354][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 331.764368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.764375][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 331.764394][ C0] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 a5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 331.764406][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 331.764419][ C0] RAX: 00000000017f9dab RBX: 0000000000000000 RCX: ffffffff8b6082a9 [ 331.764428][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b048 RDI: ffffffff8bf07040 [ 331.764437][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 331.764445][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 331.764453][ C0] R13: ffffffff8e097a00 R14: ffffffff908203d0 R15: 0000000000000000 [ 331.764462][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 331.764476][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.764485][ C0] CR2: 00007f191b2d40ed CR3: 000000005c448000 CR4: 00000000003526f0 [ 331.764494][ C0] Call Trace: [ 331.764498][ C0] [ 331.764503][ C0] default_idle+0x13/0x20 [ 331.764515][ C0] default_idle_call+0x6c/0xb0 [ 331.764528][ C0] do_idle+0x38d/0x500 [ 331.764545][ C0] ? __pfx_do_idle+0x10/0x10 [ 331.764561][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 331.764577][ C0] cpu_startup_entry+0x4f/0x60 [ 331.764592][ C0] rest_init+0x16b/0x2b0 [ 331.764606][ C0] ? acpi_subsystem_init+0x133/0x180 [ 331.764622][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 331.764640][ C0] start_kernel+0x3f6/0x4e0 [ 331.764656][ C0] x86_64_start_reservations+0x18/0x30 [ 331.764673][ C0] x86_64_start_kernel+0x130/0x190 [ 331.764689][ C0] common_startup_64+0x13e/0x148 [ 331.764708][ C0] [ 331.765344][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 331.765354][ C1] CPU: 1 UID: 0 PID: 1297 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.765368][ C1] Tainted: [L]=SOFTLOCKUP [ 331.765371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.765377][ C1] Call Trace: [ 331.765381][ C1] [ 331.765385][ C1] dump_stack_lvl+0x3d/0x1f0 [ 331.765402][ C1] vpanic+0x640/0x6f0 [ 331.765420][ C1] panic+0xca/0xd0 [ 331.765442][ C1] ? __pfx_panic+0x10/0x10 [ 331.765463][ C1] ? nmi_backtrace_stall_check+0x6e/0x540 [ 331.765479][ C1] ? irq_work_queue+0xce/0x100 [ 331.765498][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.765513][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 331.765524][ C1] ? watchdog_timer_fn+0x5ee/0x780 [ 331.765538][ C1] ? watchdog_timer_fn+0x5e1/0x780 [ 331.765552][ C1] watchdog_timer_fn+0x5ff/0x780 [ 331.765574][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 331.765593][ C1] __hrtimer_run_queues+0x5ed/0xad0 [ 331.765620][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 331.765637][ C1] ? read_tsc+0x9/0x20 [ 331.765654][ C1] hrtimer_interrupt+0x397/0x8e0 [ 331.765672][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 331.765683][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 331.765698][ C1] [ 331.765701][ C1] [ 331.765707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.765724][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 331.765746][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 ba 35 f6 48 89 df e8 1e 0e 36 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 16 26 f6 65 8b 05 7e 55 3e 08 85 c0 74 16 5b [ 331.765760][ C1] RSP: 0018:ffffc9000469f968 EFLAGS: 00000246 [ 331.765771][ C1] RAX: 0000000000000002 RBX: ffffffff9add9280 RCX: 0000000000000002 [ 331.765781][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b048 RDI: ffffffff8bf07040 [ 331.765788][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 331.765794][ C1] R10: ffffffff908203d7 R11: 0000000000000001 R12: ffffffff9add9388 [ 331.765801][ C1] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 331.765813][ C1] uart_write+0x4c1/0xb30 [ 331.765832][ C1] handle_tx+0x204/0x630 [ 331.765850][ C1] dev_hard_start_xmit+0x97/0x740 [ 331.765872][ C1] __dev_queue_xmit+0xa46/0x4490 [ 331.765892][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.765914][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 331.765932][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.765945][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 331.765956][ C1] ? __schedule+0x11a3/0x5de0 [ 331.765970][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 331.765987][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 331.766013][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 331.766031][ C1] ? find_held_lock+0x2b/0x80 [ 331.766049][ C1] ? skb_dequeue+0x126/0x180 [ 331.766063][ C1] ? find_held_lock+0x2b/0x80 [ 331.766080][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.766094][ C1] tx+0xcc/0x190 [ 331.766104][ C1] ? __pfx_tx+0x10/0x10 [ 331.766113][ C1] kthread+0x1e4/0x3e0 [ 331.766128][ C1] ? find_held_lock+0x2b/0x80 [ 331.766143][ C1] ? __pfx_kthread+0x10/0x10 [ 331.766166][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 331.766185][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.766208][ C1] ? __kthread_parkme+0x19e/0x250 [ 331.766226][ C1] ? __pfx_kthread+0x10/0x10 [ 331.766240][ C1] kthread+0x3c5/0x780 [ 331.766250][ C1] ? __pfx_kthread+0x10/0x10 [ 331.766261][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.766273][ C1] ? __pfx_kthread+0x10/0x10 [ 331.766286][ C1] ret_from_fork+0x675/0x7d0 [ 331.766300][ C1] ? __pfx_kthread+0x10/0x10 [ 331.766315][ C1] ret_from_fork_asm+0x1a/0x30 [ 331.766347][ C1] [ 331.766580][ C1] Kernel Offset: disabled