last executing test programs: 24.50727853s ago: executing program 4 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x100c000, 0x83e, 0x0, 0x3}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0x0, 0x128200}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x1c, 0x1d, 0x21, 0x0, 0x0, {0x1d}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) socket(0xa, 0x3, 0x3a) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000780050003001f0000000c000180080001400000000005000500020000000500010006000000bbf0a4ffded3597ad1a5c2e1f233a5b368cc8b55c975ea5a2db81deb946f3022e4068e4f6e4ec4757eed002fa36c743452ae2d835ffc146aa57c27113287564cf1917059f772f85f94f4788f107d84eb4ba05f9d6a4329adde9f66ada0c313219d59f76a8fb4b9cc50f427cac226bf77cfd5390965cb6081e73f48aeeff2bb679a62991501f007f712c2530c0d218325ee2c29c086710d1c2afcf8c6de88293df4cca6caffdb056116fceec715b5a70915e8d9db47c6f3cd8443676198000df3115587bb8f05489c56bb49cbf780a616f44330ca3c032481944115d73425c1dad3bbe191737adfd2efc5c893b0942dee59a40dc34d0f6ee923ee543f63d2b7dc048350a9a5bbe13b22e97f3f46d15c322c88397291cb4fe774117a4e7957b9625d848b7b29e041544a2e303a76b209b7a86df68ede78362f657805341dbfbb96b2c51422879d947eef546a65cff67bd2af7aeda5e48d02afc1e8138d1dc797f1a24cf7e2a3e7724f67419d51db2fc522ad00d8977547544e133a7c9df7b413e88a6ef8c1f2a4b0b379c782b836acefc5cd7cbb689ce37447cbd17b5b43"], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000300050000000500a6a4171bd0010007000000090073797a31000000003eaa52e5a579681068d73f1c3d2bf749709d000a2dc448c50b0173fe4e1934b724d521497b6402cd7952f9d2b0af416cf9c15fdaedff01f101d8184f892e1e39d8b54e4f5a11a31b16163ca543fd10c63d4c68309796863a5efe65e0406ec19cede9100c7f5069da34e73570524a11c6fe3d95fa3b8221c09b7ab083d368778950e3a1f48ec6f6ea52ecba183652105c045ee3d672bf36e1be1491fbc44d15624883f180afb1efa5e19647878263676fcbc2e6001dcfaac81c48bd40751afc915b0457495566a7e45cb987c9a6c330ce4e591127d995baa47c2a3719372ed1178abc2b933dc0066e3583c395c62a750bd90b"], 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) 22.047967872s ago: executing program 1 (id=214): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe80000000fffffff5000000000000aa3a020201"], 0x0) 18.5526421s ago: executing program 1 (id=218): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x2000c0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x9) unshare(0x2010000) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000044b000/0x2000)=nil, 0x2000, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r4 = socket(0x25, 0x80801, 0xfffffffe) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0x52) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) listen(0xffffffffffffffff, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) 17.711395549s ago: executing program 4 (id=222): socket(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) request_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 16.286323056s ago: executing program 1 (id=224): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x2208040, 0x0) (fail_nth: 14) 15.266918048s ago: executing program 1 (id=226): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc9, @any, 0x2, 0x2, 0x1, 0xb45d, 0x8001, 0x5}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f00000000c0)={0x200000000001, 0xc, 0x9, 0x4, 0x8000, 0x0, "a2a0069f416e002604d1690ea4e7e0ef", 0x3, 0x7, 0x2, 0x9, 0xa, 0xf4, 0xff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x10001, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 15.248245845s ago: executing program 4 (id=227): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000010f9ffffff00000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 15.127895101s ago: executing program 3 (id=228): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14.718748208s ago: executing program 4 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000100)) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) symlinkat(&(0x7f0000000040)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0xe5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') lseek(r8, 0xffffffffffffffff, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r10, r9) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r7) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000007700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r12, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "135f09d01b407a912195c726a7465f00"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getdents64(r6, 0x0, 0x0) lseek(r6, 0x9, 0x0) 14.611674629s ago: executing program 3 (id=230): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="848477b5a1f1", 0x6}], 0x1}}], 0x1, 0x4400c800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2}, 0x20) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100f03ba4456829ae5a180000001800000002"], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000001500)={{@local, 0x80000001}, @host, 0x4, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x85}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3ff, 0x3f14e3f5e7c0dae) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 14.307894991s ago: executing program 0 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000090000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 13.793178592s ago: executing program 1 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18006182b708dc6ee473000000000000003cf19f93d54dad48"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x10, @empty, 0xffffcd92}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) sendto$inet6(r2, &(0x7f00000005c0)="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", 0x1000, 0x4, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @private1, 0x6}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000005c0)="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", 0x1000, 0x4, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @private1, 0x6}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="d0c1fba5f62e8830", 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25100000000e0001006e657464657673696d0000000f0002006e0400000006001100200000000005001400"/63], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x20004000) 12.623651515s ago: executing program 3 (id=233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000070000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000006000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.485338596s ago: executing program 2 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x97}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xbc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x67}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) 12.476985095s ago: executing program 4 (id=235): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x11000000) 12.271789155s ago: executing program 0 (id=236): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0xb34}, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/173, 0xad}], 0x1, 0x1, 0x800) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7e656000) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00008f5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, 0x0, 0x0) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000004c0)={0x23d17, 0x0, 0xfffffffd, 0x3, 0x0, "7e12105588f633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x2) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000a8f000/0x4000)=nil, 0x4000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc34d, @void, @value}, 0x94) setuid(0xee01) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x8b}, 0x0) 12.269414652s ago: executing program 3 (id=237): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab780ef39f8b910d96072000001ea800000000fdfffffff700fa0a02000000000000004000000000000000000000000000000000000000000000000300", "2809e8dbe108590100224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001700", "aabe8b02bd0000020000140000000001000010000000002000"}}) 11.49102525s ago: executing program 2 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000300000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 4.85207177s ago: executing program 3 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x5192b310db075dd6, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0x1261) 4.594774555s ago: executing program 4 (id=240): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a700000020000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000240)={0x0, 0xfffffffd, 0x8000, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffffeff000000000900f9a4477242a49ea10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x0, "a94c67ae02ab48229ca5fa0755813900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b0149769d94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x82100, 0xaa) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000003c0)={0xd8}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 4.43856831s ago: executing program 0 (id=241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r2, @ANYBLOB="000000000000f00028001280090001007665746800000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10004040}, 0x0) 4.314233054s ago: executing program 1 (id=242): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc9, @any, 0x2, 0x2, 0x1, 0xb45d, 0x8001, 0x5}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f00000000c0)={0x200000000001, 0xc, 0x9, 0x4, 0x8000, 0x0, "a2a0069f416e002604d1690ea4e7e0ef", 0x3, 0x7, 0x2, 0x9, 0xa, 0xf4, 0xff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x10001, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 4.208485162s ago: executing program 2 (id=243): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3.580298971s ago: executing program 0 (id=244): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0xfffd}, 'syz0\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) symlink(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7ffffffe}]}) r1 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18c0ff0000001c0a283871e41304b5f687d9000000000000000000059500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='f2fs_unlink_enter\x00', r5}, 0x18) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0xf000, 0x4, 0x1, 0x5, 0x0, [{0x93, 0x33, 0x3, '\x00', 0xa6}, {0xd, 0xfc, 0xb, '\x00', 0xf4}, {0x5, 0x2, 0xba}, {0x2, 0x3, 0x3, '\x00', 0x5}, {0x9, 0x5, 0x51, '\x00', 0x7}, {0xb9, 0x5, 0x9, '\x00', 0x9}, {0x1, 0x2, 0x9, '\x00', 0x3}, {0x8, 0x4, 0x6, '\x00', 0x6}, {0x1c, 0x3d, 0x1, '\x00', 0xf}, {0xf2, 0x56, 0x2, '\x00', 0x98}, {0x4, 0x8, 0x8, '\x00', 0x2}, {0x12, 0x9, 0x8, '\x00', 0x5}, {0x1, 0x4, 0x0, '\x00', 0xd}, {0xfb, 0x7, 0x9, '\x00', 0xf}, {0x5e, 0xa2, 0x5f, '\x00', 0x8}, {0xff, 0x6, 0x0, '\x00', 0x7}, {0x0, 0x7, 0xae, '\x00', 0xe}, {0x1, 0x0, 0x2, '\x00', 0x10}, {0x2, 0x7, 0x4, '\x00', 0x97}, {0xf7, 0xf, 0x1, '\x00', 0x4}, {0xa3, 0x1, 0x7f, '\x00', 0x7}, {0x4, 0x3, 0xc, '\x00', 0x1}, {0x6, 0x10, 0x18, '\x00', 0xff}, {0x6, 0xb, 0x8, '\x00', 0x3}]}}) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000140)={0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103) llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0xffde) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) pipe2(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000000c0)={0x50, 0x6, 0x9, {0x2, 0xb}, {0x8000, 0x7}, @period={0x58, 0x81, 0x9, 0x8, 0xffff, {0xfff7, 0x1, 0x1, 0xffff}, 0x0, 0x0}}) 1.881777854s ago: executing program 2 (id=245): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000e900b703000000008a83850000000480000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) getpid() (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xfffc, 0x0, 0xb021, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.87884496s ago: executing program 3 (id=246): r0 = socket(0x10, 0x0, 0xfffffffc) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf2503000000485553784283f877b9c5c0d36dcfcde68fb43ede26ff2da500"/48], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000054) sendto$inet6(r1, 0x0, 0x0, 0x4000041, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0xff00000000000000, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = timerfd_create(0x9, 0x800) timerfd_settime(r3, 0x3, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYRES32=r2], 0x0) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003020000000203f8316bc5485ddce3156843c48794bb2c6edab1f97befac677282f3d013eaf25dcbd2cff8c5a43a6f3aa7d7ccf7c77cb062ad207127868b990503781b2e17417c4bb6"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000700)=ANY=[]}, 0x0) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc1485544, 0x0) ftruncate(r5, 0x2000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000100)="0afd3cb64146ed28951933b68f4410e0e0c963585282312339c9d20407291547d93010e4504f7fa6607c3f0844133359d2c87c3933b27b30ccf2c39e4c29eb78924e1e94045d3523eba51ddb000503e5f8842eed75eea6a8767360d137b4f93aad0d4ef4517261512a2a1b1dde7e893f8c367f309555f4e1a3cf6173", &(0x7f0000000200)=@tcp=r0, 0x4}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a", 0x21}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000440)=""/247, 0x26) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000340)={0x31, @time={0x7, 0xfffffff7}, 0x0, {}, 0x9, 0x2}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0xc02c5341, &(0x7f0000000100)={{0x22, 0xf8}, {0xda, 0x80}, 0x8003, 0x2, 0x9b}) 1.015938989s ago: executing program 2 (id=247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x2ea1, &(0x7f0000000180)={0x0, 0xc62f}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000000c0)={&(0x7f0000000040)=""/76, 0x4c}) 725.275977ms ago: executing program 0 (id=248): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000300000000000000020000001400020070696d36726567310000000000000000090001"], 0x34}}, 0x0) (async) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc08}}, 0x120) (async) r3 = syz_open_dev$sg(&(0x7f0000000200), 0x101, 0x2000) r4 = getpid() ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0x4, 0x7fffffff, 0x7, 0x8, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) syz_open_procfs(r7, &(0x7f0000000100)='net/fib_triestat\x00') (async, rerun: 64) accept(r6, 0x0, 0x0) (rerun: 64) write$UHID_DESTROY(r0, &(0x7f00000016c0), 0x4) 498.438682ms ago: executing program 2 (id=249): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x8000) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000600)={0xa8, 0x0, 0x3}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x34d02, 0x0) (async) r0 = socket$kcm(0xa, 0x3, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) fanotify_mark(r2, 0x2, 0x4800107b, r3, 0x0) (async) read$msr(r1, &(0x7f0000019bc0)=""/102400, 0x19000) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={r6, 0xda, "8cf6785c9af21cb21b15d879a13f77c92ca119293ee9d163db1186329b09e80b87015391803e39f3e138528a9e5ce17cb551b6abff7bf439d015f7bde1829cebcf5013c749564e1961d7d9d925b20fedbf4204a899104d57d65e20f3f56084f68397fbb2113143de43eee84a29f0671db4bd2e7325246d945fd3799390b2df22fbcad28c32160948ffaecfac13157075c1b216f47e870bc99abe994a86a2cbc9ad5ceea264f9fde7a8b91211c50557a6dc4462a844c1121b0d4e71b910fdc7c39c0270a3f7e54e4d94890fd702adebe2b21d51f36a93c4280966"}, &(0x7f0000000240)=0xe2) (async) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf4fd, 0x2000}, &(0x7f00000000c0), 0x0) r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8802, 0x0) dup(r7) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200b10100000000e0ffffff07"], 0x28}}, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x21, 0x0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 55.706996][ T29] audit: type=1400 audit(1741000695.904:88): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.711192][ T5803] cgroup: Unknown subsys name 'net' [ 55.729751][ T29] audit: type=1400 audit(1741000695.904:89): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.759925][ T29] audit: type=1400 audit(1741000695.964:90): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.894126][ T5803] cgroup: Unknown subsys name 'cpuset' [ 55.901546][ T5803] cgroup: Unknown subsys name 'rlimit' [ 56.027985][ T29] audit: type=1400 audit(1741000696.224:91): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.059381][ T29] audit: type=1400 audit(1741000696.224:92): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.091730][ T29] audit: type=1400 audit(1741000696.224:93): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.110073][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.112588][ T29] audit: type=1400 audit(1741000696.224:94): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.141442][ T29] audit: type=1400 audit(1741000696.234:95): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.166607][ T29] audit: type=1400 audit(1741000696.234:96): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.190062][ T29] audit: type=1400 audit(1741000696.274:97): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.090532][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.109511][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 61.109526][ T29] audit: type=1400 audit(1741000701.304:103): avc: denied { create } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.171143][ T29] audit: type=1400 audit(1741000701.304:104): avc: denied { read write } for pid=5813 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.198831][ T29] audit: type=1400 audit(1741000701.304:105): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.223259][ T29] audit: type=1400 audit(1741000701.344:106): avc: denied { ioctl } for pid=5814 comm="syz-executor" path="socket:[4749]" dev="sockfs" ino=4749 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.224276][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.259188][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.266831][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.276182][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.283758][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.291281][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.299254][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.306392][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.313866][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.314246][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.329255][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.329708][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.339376][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.344105][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.350288][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.357969][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.366529][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.378148][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.378633][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.386879][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.394674][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.400778][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.414237][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.414480][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.431496][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.438680][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.438728][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.445843][ T29] audit: type=1400 audit(1741000701.614:107): avc: denied { read } for pid=5814 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.476008][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.486847][ T29] audit: type=1400 audit(1741000701.614:108): avc: denied { open } for pid=5814 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.511001][ T29] audit: type=1400 audit(1741000701.614:109): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.536722][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.544761][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.761477][ T29] audit: type=1400 audit(1741000701.954:110): avc: denied { module_request } for pid=5814 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.847735][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 61.896508][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 61.942045][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 61.973731][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 62.090390][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.098628][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.106139][ T5814] bridge_slave_0: entered allmulticast mode [ 62.112662][ T5814] bridge_slave_0: entered promiscuous mode [ 62.120016][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.127971][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.135164][ T5813] bridge_slave_0: entered allmulticast mode [ 62.141732][ T5813] bridge_slave_0: entered promiscuous mode [ 62.150771][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.158077][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.165205][ T5813] bridge_slave_1: entered allmulticast mode [ 62.171823][ T5813] bridge_slave_1: entered promiscuous mode [ 62.187437][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.194641][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.201838][ T5814] bridge_slave_1: entered allmulticast mode [ 62.208219][ T5814] bridge_slave_1: entered promiscuous mode [ 62.219136][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 62.263418][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.270492][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.280042][ T5815] bridge_slave_0: entered allmulticast mode [ 62.286975][ T5815] bridge_slave_0: entered promiscuous mode [ 62.294507][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.301643][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.308720][ T5815] bridge_slave_1: entered allmulticast mode [ 62.315552][ T5815] bridge_slave_1: entered promiscuous mode [ 62.323827][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.334986][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.351804][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.384133][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.412856][ T5813] team0: Port device team_slave_0 added [ 62.418802][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.426640][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.434173][ T5822] bridge_slave_0: entered allmulticast mode [ 62.440567][ T5822] bridge_slave_0: entered promiscuous mode [ 62.460552][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.476808][ T5813] team0: Port device team_slave_1 added [ 62.482642][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.489752][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.496972][ T5822] bridge_slave_1: entered allmulticast mode [ 62.503923][ T5822] bridge_slave_1: entered promiscuous mode [ 62.517318][ T5814] team0: Port device team_slave_0 added [ 62.525472][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.569085][ T5814] team0: Port device team_slave_1 added [ 62.590716][ T5815] team0: Port device team_slave_0 added [ 62.597359][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.604847][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.631046][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.644604][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.651762][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.680167][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.693622][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.715582][ T5815] team0: Port device team_slave_1 added [ 62.731261][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.762496][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.769454][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.795584][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.819553][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.826516][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.852462][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.865693][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.872934][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.880059][ T5826] bridge_slave_0: entered allmulticast mode [ 62.886596][ T5826] bridge_slave_0: entered promiscuous mode [ 62.894583][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.901771][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.908867][ T5826] bridge_slave_1: entered allmulticast mode [ 62.915387][ T5826] bridge_slave_1: entered promiscuous mode [ 62.922151][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.929113][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.955281][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.971829][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.978767][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.009172][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.048078][ T5822] team0: Port device team_slave_0 added [ 63.063101][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.073689][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.090896][ T5822] team0: Port device team_slave_1 added [ 63.099537][ T5813] hsr_slave_0: entered promiscuous mode [ 63.108156][ T5813] hsr_slave_1: entered promiscuous mode [ 63.131739][ T5814] hsr_slave_0: entered promiscuous mode [ 63.137777][ T5814] hsr_slave_1: entered promiscuous mode [ 63.143971][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.151919][ T5814] Cannot create hsr debugfs directory [ 63.186734][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.196133][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.222573][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.242385][ T5815] hsr_slave_0: entered promiscuous mode [ 63.248565][ T5815] hsr_slave_1: entered promiscuous mode [ 63.254577][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.262144][ T5815] Cannot create hsr debugfs directory [ 63.270033][ T5826] team0: Port device team_slave_0 added [ 63.283198][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.290131][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.316357][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.348338][ T5826] team0: Port device team_slave_1 added [ 63.387790][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.395015][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.421253][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.452694][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.459640][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.486312][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.486323][ T5824] Bluetooth: hci1: command tx timeout [ 63.497447][ T5825] Bluetooth: hci0: command tx timeout [ 63.540881][ T5822] hsr_slave_0: entered promiscuous mode [ 63.546865][ T5822] hsr_slave_1: entered promiscuous mode [ 63.551550][ T5824] Bluetooth: hci2: command tx timeout [ 63.553226][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.565508][ T5822] Cannot create hsr debugfs directory [ 63.621525][ T5824] Bluetooth: hci3: command tx timeout [ 63.631842][ T5824] Bluetooth: hci4: command tx timeout [ 63.646367][ T5826] hsr_slave_0: entered promiscuous mode [ 63.654798][ T5826] hsr_slave_1: entered promiscuous mode [ 63.660604][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.668450][ T5826] Cannot create hsr debugfs directory [ 63.798340][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.808201][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.829333][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.843888][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.884259][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.906997][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.924031][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.942918][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.989204][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.998540][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.014699][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.030019][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.079981][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.090932][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.114282][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.135328][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.146784][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.157958][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.166939][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.197261][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.248587][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.294311][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.315279][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.353070][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.360408][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.372869][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.379905][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.400880][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.421116][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.436410][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.453839][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.460915][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.484049][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.491121][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.503530][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.520103][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.545275][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.554971][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.562080][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.584385][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.591455][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.612628][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.620128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.634093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.641166][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.666993][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.684264][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.730875][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.748340][ T29] audit: type=1400 audit(1741000704.944:111): avc: denied { sys_module } for pid=5814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.780421][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.795715][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.802823][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.813188][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.820630][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.017252][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.039556][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.068926][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.155082][ T5815] veth0_vlan: entered promiscuous mode [ 65.190511][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.214953][ T5815] veth1_vlan: entered promiscuous mode [ 65.224340][ T5814] veth0_vlan: entered promiscuous mode [ 65.256460][ T5814] veth1_vlan: entered promiscuous mode [ 65.288893][ T5815] veth0_macvtap: entered promiscuous mode [ 65.299441][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.337374][ T5813] veth0_vlan: entered promiscuous mode [ 65.343687][ T5815] veth1_macvtap: entered promiscuous mode [ 65.376729][ T5813] veth1_vlan: entered promiscuous mode [ 65.386588][ T5814] veth0_macvtap: entered promiscuous mode [ 65.407094][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.425084][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.440749][ T5814] veth1_macvtap: entered promiscuous mode [ 65.455569][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.467259][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.476366][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.485143][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.507435][ T5826] veth0_vlan: entered promiscuous mode [ 65.527381][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.538198][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.548155][ T5824] Bluetooth: hci0: command tx timeout [ 65.551554][ T5824] Bluetooth: hci1: command tx timeout [ 65.556121][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.576825][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.588058][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599454][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.621848][ T5824] Bluetooth: hci2: command tx timeout [ 65.632803][ T5826] veth1_vlan: entered promiscuous mode [ 65.648579][ T5822] veth0_vlan: entered promiscuous mode [ 65.662242][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.670941][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685306][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.695744][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.709878][ T5813] veth0_macvtap: entered promiscuous mode [ 65.711941][ T5824] Bluetooth: hci4: command tx timeout [ 65.717594][ T5825] Bluetooth: hci3: command tx timeout [ 65.759457][ T5813] veth1_macvtap: entered promiscuous mode [ 65.767718][ T5822] veth1_vlan: entered promiscuous mode [ 65.800559][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.809417][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.847784][ T5826] veth0_macvtap: entered promiscuous mode [ 65.871174][ T5826] veth1_macvtap: entered promiscuous mode [ 65.878782][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.889965][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.900214][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.910825][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.925489][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.939936][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.949653][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.961152][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.973031][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.980622][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.992170][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.003172][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.019013][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.030925][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.040083][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.054321][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.078165][ T29] audit: type=1400 audit(1741000706.274:112): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.tHqee6/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.094276][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.116701][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.128386][ T29] audit: type=1400 audit(1741000706.274:113): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.137171][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.150879][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.168006][ T29] audit: type=1400 audit(1741000706.274:114): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.tHqee6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.174369][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.210585][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.221331][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.224051][ T29] audit: type=1400 audit(1741000706.274:115): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.238347][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.259171][ T29] audit: type=1400 audit(1741000706.274:116): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.tHqee6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.266598][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.314218][ T29] audit: type=1400 audit(1741000706.274:117): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.tHqee6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.345127][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.348647][ T29] audit: type=1400 audit(1741000706.274:118): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.382320][ T5822] veth0_macvtap: entered promiscuous mode [ 66.385482][ T29] audit: type=1400 audit(1741000706.324:119): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.395085][ T5822] veth1_macvtap: entered promiscuous mode [ 66.417017][ T29] audit: type=1400 audit(1741000706.324:120): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=5950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.443137][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.453706][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.464452][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.475129][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.485751][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.488314][ T29] audit: type=1400 audit(1741000706.404:121): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 66.496672][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.524662][ T29] audit: type=1400 audit(1741000706.404:122): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 66.531788][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.623066][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.632098][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640830][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.651340][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.675128][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.694491][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.704381][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.715153][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.725496][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.736188][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.750997][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.767727][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.779433][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.788618][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.789548][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.809134][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.812038][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.826903][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.837441][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.847339][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.858028][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.868912][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.879888][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.891777][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.926709][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.936445][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.946266][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.955237][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.983365][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.003006][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.125103][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.148338][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.310168][ T5912] FAULT_INJECTION: forcing a failure. [ 67.310168][ T5912] name failslab, interval 1, probability 0, space 0, times 1 [ 67.325979][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.345119][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.1.6 Not tainted 6.14.0-rc5-syzkaller #0 [ 67.345142][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.345155][ T5912] Call Trace: [ 67.345160][ T5912] [ 67.345170][ T5912] dump_stack_lvl+0x16c/0x1f0 [ 67.345208][ T5912] should_fail_ex+0x50a/0x650 [ 67.345235][ T5912] ? fs_reclaim_acquire+0xae/0x150 [ 67.345262][ T5912] ? iter_file_splice_write+0x1cd/0x10b0 [ 67.345289][ T5912] should_failslab+0xc2/0x120 [ 67.345309][ T5912] __kmalloc_noprof+0xcb/0x510 [ 67.345326][ T5912] ? ktime_get_coarse_real_ts64_mg+0x26c/0x320 [ 67.345363][ T5912] iter_file_splice_write+0x1cd/0x10b0 [ 67.345400][ T5912] ? __pfx___lock_acquire+0x10/0x10 [ 67.345427][ T5912] ? __pfx_iter_file_splice_write+0x10/0x10 [ 67.345453][ T5912] ? touch_atime+0x90/0x5d0 [ 67.345485][ T5912] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.345515][ T5912] ? splice_direct_to_actor+0x346/0xa40 [ 67.345544][ T5912] ? __pfx_iter_file_splice_write+0x10/0x10 [ 67.345572][ T5912] direct_splice_actor+0x18f/0x6c0 [ 67.345601][ T5912] splice_direct_to_actor+0x346/0xa40 [ 67.345628][ T5912] ? __pfx_direct_splice_actor+0x10/0x10 [ 67.345659][ T5912] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 67.345685][ T5912] ? __pfx_file_has_perm+0x10/0x10 [ 67.345712][ T5912] do_splice_direct+0x178/0x250 [ 67.345738][ T5912] ? __pfx_do_splice_direct+0x10/0x10 [ 67.345764][ T5912] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 67.345795][ T5912] ? rw_verify_area+0xcf/0x680 [ 67.345822][ T5912] do_sendfile+0xafb/0xe40 [ 67.345853][ T5912] ? __pfx_do_sendfile+0x10/0x10 [ 67.345878][ T5912] ? __fget_files+0x206/0x3a0 [ 67.345903][ T5912] __x64_sys_sendfile64+0x1da/0x220 [ 67.345923][ T5912] ? ksys_write+0x1ba/0x250 [ 67.345948][ T5912] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 67.345980][ T5912] do_syscall_64+0xcd/0x250 [ 67.346004][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.346029][ T5912] RIP: 0033:0x7f862918d169 [ 67.346047][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.346066][ T5912] RSP: 002b:00007f8629feb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.346083][ T5912] RAX: ffffffffffffffda RBX: 00007f86293a6080 RCX: 00007f862918d169 [ 67.346095][ T5912] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 67.346105][ T5912] RBP: 00007f8629feb090 R08: 0000000000000000 R09: 0000000000000000 [ 67.346116][ T5912] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000002 [ 67.346126][ T5912] R13: 0000000000000000 R14: 00007f86293a6080 R15: 00007ffdb62a7408 [ 67.346151][ T5912] [ 67.349722][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.621660][ T5825] Bluetooth: hci1: command tx timeout [ 67.622086][ T5824] Bluetooth: hci0: command tx timeout [ 67.652568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.661040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.681554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.713575][ T5824] Bluetooth: hci2: command tx timeout [ 67.782032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.782187][ T5824] Bluetooth: hci3: command tx timeout [ 67.800633][ T5824] Bluetooth: hci4: command tx timeout [ 67.801749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.092001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.105852][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.133678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.180186][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.222480][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.291738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.301464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 68.321686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.803530][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.847770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.702796][ T5825] Bluetooth: hci0: command tx timeout [ 69.702830][ T5824] Bluetooth: hci1: command tx timeout [ 69.791631][ T5824] Bluetooth: hci2: command tx timeout [ 69.853175][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 69.872006][ T5824] Bluetooth: hci4: command tx timeout [ 69.875627][ T5825] Bluetooth: hci3: command tx timeout [ 70.346342][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 70.356081][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/u9:4 Not tainted 6.14.0-rc5-syzkaller #0 [ 70.356105][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.356118][ T5825] Workqueue: hci0 hci_rx_work [ 70.356157][ T5825] Call Trace: [ 70.356164][ T5825] [ 70.356172][ T5825] dump_stack_lvl+0x16c/0x1f0 [ 70.356199][ T5825] sysfs_warn_dup+0x7f/0xa0 [ 70.356227][ T5825] sysfs_create_dir_ns+0x24d/0x2b0 [ 70.356256][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 70.356286][ T5825] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.356307][ T5825] ? kobject_add_internal+0x12d/0x990 [ 70.356334][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 70.356356][ T5825] kobject_add_internal+0x2c8/0x990 [ 70.356387][ T5825] kobject_add+0x16f/0x240 [ 70.356413][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 70.356437][ T5825] ? class_to_subsys+0x3e/0x160 [ 70.356463][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 70.356483][ T5825] ? kobject_put+0xab/0x5a0 [ 70.356517][ T5825] device_add+0x289/0x1a70 [ 70.356542][ T5825] ? __pfx_dev_set_name+0x10/0x10 [ 70.356569][ T5825] ? __pfx_device_add+0x10/0x10 [ 70.356594][ T5825] ? mgmt_send_event_skb+0x2f2/0x460 [ 70.356630][ T5825] hci_conn_add_sysfs+0x17e/0x230 [ 70.356660][ T5825] le_conn_complete_evt+0x107f/0x1da0 [ 70.356693][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.356716][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 70.356757][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 70.356791][ T5825] hci_le_meta_evt+0x2e2/0x5d0 [ 70.356818][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 70.356850][ T5825] hci_event_packet+0x666/0x1180 [ 70.356877][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 70.356905][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 70.356937][ T5825] ? kcov_remote_start+0x3df/0x6e0 [ 70.356972][ T5825] hci_rx_work+0x2c5/0x16b0 [ 70.357000][ T5825] ? process_one_work+0x921/0x1ba0 [ 70.357030][ T5825] process_one_work+0x9c5/0x1ba0 [ 70.357068][ T5825] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.357095][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 70.357129][ T5825] ? assign_work+0x1a0/0x250 [ 70.357169][ T5825] worker_thread+0x6c8/0xf00 [ 70.357207][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 70.357235][ T5825] kthread+0x3af/0x750 [ 70.357261][ T5825] ? __pfx_kthread+0x10/0x10 [ 70.357284][ T5825] ? lock_acquire+0x2f/0xb0 [ 70.357314][ T5825] ? __pfx_kthread+0x10/0x10 [ 70.357338][ T5825] ret_from_fork+0x45/0x80 [ 70.357363][ T5825] ? __pfx_kthread+0x10/0x10 [ 70.357386][ T5825] ret_from_fork_asm+0x1a/0x30 [ 70.357422][ T5825] [ 70.357588][ T5825] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.607125][ T5960] netlink: 'syz.0.12': attribute type 178 has an invalid length. [ 70.609810][ T5825] Bluetooth: hci0: failed to register connection device [ 70.883382][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 70.975021][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 71.041937][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.082386][ T5964] ceph: No mds server is up or the cluster is laggy [ 71.211792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.321778][ T25] usb 1-1: device descriptor read/64, error -71 [ 71.546957][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.599759][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.673252][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.733455][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 71.733464][ T29] audit: type=1400 audit(1741000711.934:157): avc: denied { read write } for pid=5978 comm="syz.3.16" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.819233][ T29] audit: type=1400 audit(1741000711.964:158): avc: denied { open } for pid=5978 comm="syz.3.16" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.843835][ T25] usb 1-1: device descriptor read/64, error -71 [ 71.891007][ T29] audit: type=1400 audit(1741000711.964:159): avc: denied { map } for pid=5978 comm="syz.3.16" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.959607][ T29] audit: type=1400 audit(1741000712.114:160): avc: denied { create } for pid=5986 comm="syz.3.19" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.985558][ T25] usb usb1-port1: attempt power cycle [ 72.048876][ T29] audit: type=1400 audit(1741000712.114:161): avc: denied { create } for pid=5986 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.068511][ T29] audit: type=1400 audit(1741000712.114:162): avc: denied { bind } for pid=5986 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.088507][ T29] audit: type=1400 audit(1741000712.124:163): avc: denied { unlink } for pid=5986 comm="syz.3.19" name="#1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.111087][ T29] audit: type=1400 audit(1741000712.124:164): avc: denied { mount } for pid=5986 comm="syz.3.19" name="/" dev="overlay" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.139581][ T29] audit: type=1400 audit(1741000712.294:165): avc: denied { read write } for pid=5985 comm="syz.4.18" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.309741][ T5992] Zero length message leads to an empty skb [ 72.676946][ T29] audit: type=1400 audit(1741000712.294:166): avc: denied { open } for pid=5985 comm="syz.4.18" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.719118][ T5990] input: syz0 as /devices/virtual/input/input5 [ 72.734147][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.851299][ T25] usb 1-1: device descriptor read/8, error -71 [ 73.211531][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 73.219498][ T5999] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 73.270132][ T25] usb 1-1: device descriptor read/8, error -71 [ 73.425414][ T25] usb usb1-port1: unable to enumerate USB device [ 73.499228][ T6004] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 73.508306][ T6004] syz_tun: entered promiscuous mode [ 73.756788][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.556087][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.606367][ T5988] syz.4.18 (5988): drop_caches: 2 [ 74.668744][ T6014] fuse: Unknown parameter 'm' [ 74.805874][ T6018] dccp_invalid_packet: invalid packet type [ 76.247339][ T6022] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 76.254033][ T6022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.262570][ T6022] vhci_hcd vhci_hcd.0: Device attached [ 77.209722][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 77.209740][ T29] audit: type=1400 audit(1741000717.024:189): avc: denied { name_bind } for pid=6030 comm="syz.3.34" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.237283][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 77.610526][ T29] audit: type=1400 audit(1741000717.024:190): avc: denied { node_bind } for pid=6030 comm="syz.3.34" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.632890][ T971] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 77.694190][ T6047] FAULT_INJECTION: forcing a failure. [ 77.694190][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 77.721537][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.3.37 Not tainted 6.14.0-rc5-syzkaller #0 [ 77.721560][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.721570][ T6047] Call Trace: [ 77.721576][ T6047] [ 77.721583][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 77.721610][ T6047] should_fail_ex+0x50a/0x650 [ 77.721636][ T6047] ? fs_reclaim_acquire+0xae/0x150 [ 77.721664][ T6047] should_failslab+0xc2/0x120 [ 77.721685][ T6047] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 77.721705][ T6047] ? __alloc_skb+0x2b1/0x380 [ 77.721728][ T6047] ? __dev_queue_xmit+0x89b/0x43e0 [ 77.721751][ T6047] __alloc_skb+0x2b1/0x380 [ 77.721773][ T6047] ? __pfx___alloc_skb+0x10/0x10 [ 77.721794][ T6047] ? hlock_class+0x4e/0x130 [ 77.721813][ T6047] ? mark_lock+0xa0/0xc60 [ 77.721836][ T6047] ? __dev_queue_xmit+0x89b/0x43e0 [ 77.721855][ T6047] ? __local_bh_enable_ip+0xa4/0x120 [ 77.721880][ T6047] ? __dev_queue_xmit+0x89b/0x43e0 [ 77.721904][ T6047] alloc_skb_with_frags+0xe4/0x850 [ 77.721930][ T6047] ? __lock_acquire+0x15a9/0x3c40 [ 77.721959][ T6047] sock_alloc_send_pskb+0x7f1/0x980 [ 77.721981][ T6047] ? orangefs_d_revalidate+0xbad/0x11d0 [ 77.722014][ T6047] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 77.722042][ T6047] ? __pfx_mark_lock+0x10/0x10 [ 77.722066][ T6047] ? __pfx___lock_acquire+0x10/0x10 [ 77.722095][ T6047] __ip6_append_data.isra.0+0x2ad4/0x4650 [ 77.722125][ T6047] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 77.722160][ T6047] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 77.722183][ T6047] ? ip6_mtu+0x231/0x4a0 [ 77.722201][ T6047] ? ip6_setup_cork+0xc7c/0x14d0 [ 77.722225][ T6047] ip6_make_skb+0x30b/0x4e0 [ 77.722251][ T6047] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 77.722275][ T6047] ? __pfx_ip6_make_skb+0x10/0x10 [ 77.722308][ T6047] ? sk_dst_check+0x1da/0x540 [ 77.722336][ T6047] ? udpv6_sendmsg+0x2553/0x3080 [ 77.722366][ T6047] udpv6_sendmsg+0x2553/0x3080 [ 77.722393][ T6047] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 77.722423][ T6047] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 77.722464][ T6047] ? __pfx___lock_acquire+0x10/0x10 [ 77.722486][ T6047] ? kasan_save_free_info+0x3b/0x60 [ 77.722511][ T6047] ? ___sys_sendmsg+0x142/0x1e0 [ 77.722533][ T6047] ? __sys_sendmmsg+0x201/0x420 [ 77.722556][ T6047] ? __x64_sys_sendmmsg+0x9c/0x100 [ 77.722579][ T6047] ? do_syscall_64+0xcd/0x250 [ 77.722620][ T6047] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 77.722648][ T6047] ? inet6_sendmsg+0x105/0x140 [ 77.722665][ T6047] inet6_sendmsg+0x105/0x140 [ 77.722684][ T6047] ____sys_sendmsg+0x68c/0xc90 [ 77.722703][ T6047] ? copy_msghdr_from_user+0x10b/0x160 [ 77.722727][ T6047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.722744][ T6047] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.722768][ T6047] ? hlock_class+0x4e/0x130 [ 77.722787][ T6047] ? __lock_acquire+0x15a9/0x3c40 [ 77.722816][ T6047] ___sys_sendmsg+0x135/0x1e0 [ 77.722840][ T6047] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.722861][ T6047] ? __pfx___lock_acquire+0x10/0x10 [ 77.722905][ T6047] ? __pfx___might_resched+0x10/0x10 [ 77.722929][ T6047] ? __might_fault+0xe3/0x190 [ 77.722951][ T6047] __sys_sendmmsg+0x201/0x420 [ 77.722975][ T6047] ? __pfx___sys_sendmmsg+0x10/0x10 [ 77.723004][ T6047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.723036][ T6047] ? fput+0x67/0x440 [ 77.723056][ T6047] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 77.723080][ T6047] ? syscall_user_dispatch+0x7a/0x130 [ 77.723111][ T6047] __x64_sys_sendmmsg+0x9c/0x100 [ 77.723136][ T6047] do_syscall_64+0xcd/0x250 [ 77.723157][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.723181][ T6047] RIP: 0033:0x7f798518d169 [ 77.723195][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.723210][ T6047] RSP: 002b:00007f7985f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 77.723226][ T6047] RAX: ffffffffffffffda RBX: 00007f79853a5fa0 RCX: 00007f798518d169 [ 77.723237][ T6047] RDX: 0400000000000172 RSI: 0000400000003cc0 RDI: 0000000000000004 [ 77.723248][ T6047] RBP: 00007f7985f72090 R08: 0000000000000000 R09: 0000000000000000 [ 77.723258][ T6047] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 77.723268][ T6047] R13: 0000000000000000 R14: 00007f79853a5fa0 R15: 00007ffe92b16478 [ 77.723290][ T6047] [ 77.735659][ T29] audit: type=1400 audit(1741000717.474:191): avc: denied { ioctl } for pid=6019 comm="syz.4.31" path="socket:[7807]" dev="sockfs" ino=7807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.896187][ T6050] netlink: 168 bytes leftover after parsing attributes in process `syz.3.40'. [ 77.986160][ T29] audit: type=1400 audit(1741000717.494:192): avc: denied { read write } for pid=6019 comm="syz.4.31" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.851659][ T6033] vhci_hcd: connection reset by peer [ 78.909040][ T6027] vhci_hcd: stop threads [ 78.913895][ T6027] vhci_hcd: release socket [ 78.918893][ T6027] vhci_hcd: disconnect device [ 79.121485][ T5866] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.142311][ T29] audit: type=1400 audit(1741000717.494:193): avc: denied { open } for pid=6019 comm="syz.4.31" path="/dev/vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.167816][ T29] audit: type=1400 audit(1741000717.494:194): avc: denied { ioctl } for pid=6019 comm="syz.4.31" path="/dev/vbi6" dev="devtmpfs" ino=993 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.213464][ T6077] 9pnet_fd: Insufficient options for proto=fd [ 79.234288][ T6077] 9pnet_fd: Insufficient options for proto=fd [ 79.239482][ T29] audit: type=1400 audit(1741000717.544:195): avc: denied { ioctl } for pid=6030 comm="syz.3.34" path="socket:[7835]" dev="sockfs" ino=7835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.281581][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 79.286178][ T6077] capability: warning: `syz.4.47' uses deprecated v2 capabilities in a way that may be insecure [ 79.307055][ T5866] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 79.315740][ T29] audit: type=1400 audit(1741000717.794:196): avc: denied { create } for pid=6044 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.337851][ T5866] usb 3-1: config 0 has no interface number 0 [ 79.348516][ T5866] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 79.386002][ T29] audit: type=1400 audit(1741000717.844:197): avc: denied { setopt } for pid=6044 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.407304][ T5866] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.420276][ T5866] usb 3-1: config 0 interface 41 has no altsetting 0 [ 79.439166][ T5866] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 79.450427][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.471555][ T29] audit: type=1400 audit(1741000717.864:198): avc: denied { create } for pid=6040 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.520732][ T5866] usb 3-1: Product: syz [ 79.536518][ T5866] usb 3-1: Manufacturer: syz [ 79.543908][ T5866] usb 3-1: SerialNumber: syz [ 79.566629][ T6087] use of bytesused == 0 is deprecated and will be removed in the future, [ 79.573673][ T5866] usb 3-1: config 0 descriptor?? [ 79.586667][ T6087] use the actual size instead. [ 79.608740][ T6070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.652625][ T6070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.864891][ T6070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.894878][ T6070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.195342][ T5824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 80.205161][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: kworker/u9:3 Not tainted 6.14.0-rc5-syzkaller #0 [ 80.205194][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.205208][ T5824] Workqueue: hci1 hci_rx_work [ 80.205240][ T5824] Call Trace: [ 80.205247][ T5824] [ 80.205255][ T5824] dump_stack_lvl+0x16c/0x1f0 [ 80.205284][ T5824] sysfs_warn_dup+0x7f/0xa0 [ 80.205314][ T5824] sysfs_create_dir_ns+0x24d/0x2b0 [ 80.205340][ T5824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 80.205369][ T5824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.205391][ T5824] ? kobject_add_internal+0x12d/0x990 [ 80.205419][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 80.205440][ T5824] kobject_add_internal+0x2c8/0x990 [ 80.205471][ T5824] kobject_add+0x16f/0x240 [ 80.205497][ T5824] ? __pfx_kobject_add+0x10/0x10 [ 80.205528][ T5824] ? kobject_put+0xab/0x5a0 [ 80.205562][ T5824] device_add+0x289/0x1a70 [ 80.205587][ T5824] ? __pfx_dev_set_name+0x10/0x10 [ 80.205615][ T5824] ? __pfx_device_add+0x10/0x10 [ 80.205640][ T5824] ? mgmt_send_event_skb+0x2f2/0x460 [ 80.205676][ T5824] hci_conn_add_sysfs+0x17e/0x230 [ 80.205707][ T5824] le_conn_complete_evt+0x107f/0x1da0 [ 80.205740][ T5824] ? __pfx_lock_release+0x10/0x10 [ 80.205766][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 80.205794][ T5824] ? __mutex_lock+0x1cc/0xb10 [ 80.205816][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.205849][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 80.205883][ T5824] hci_le_meta_evt+0x2e2/0x5d0 [ 80.205910][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 80.205942][ T5824] hci_event_packet+0x666/0x1180 [ 80.205968][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 80.205997][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 80.206029][ T5824] ? kcov_remote_start+0x3df/0x6e0 [ 80.206064][ T5824] hci_rx_work+0x2c5/0x16b0 [ 80.206093][ T5824] ? process_one_work+0x921/0x1ba0 [ 80.206123][ T5824] process_one_work+0x9c5/0x1ba0 [ 80.206158][ T5824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 80.206192][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 80.206228][ T5824] ? assign_work+0x1a0/0x250 [ 80.206258][ T5824] worker_thread+0x6c8/0xf00 [ 80.206297][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 80.206325][ T5824] kthread+0x3af/0x750 [ 80.206350][ T5824] ? __pfx_kthread+0x10/0x10 [ 80.206372][ T5824] ? lock_acquire+0x2f/0xb0 [ 80.206402][ T5824] ? __pfx_kthread+0x10/0x10 [ 80.206426][ T5824] ret_from_fork+0x45/0x80 [ 80.206450][ T5824] ? __pfx_kthread+0x10/0x10 [ 80.206473][ T5824] ret_from_fork_asm+0x1a/0x30 [ 80.206510][ T5824] [ 80.206732][ T5824] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.469857][ T5824] Bluetooth: hci1: failed to register connection device [ 80.485249][ T5866] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 80.495510][ T5866] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 80.519594][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 80.522027][ T5866] usb 3-1: USB disconnect, device number 2 [ 81.802312][ T45] cfg80211: failed to load regulatory.db [ 82.178846][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.195283][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.211734][ T6110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.222839][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.256101][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 82.256113][ T29] audit: type=1400 audit(1741000722.444:215): avc: denied { create } for pid=6107 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.282029][ T6112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.293821][ T29] audit: type=1400 audit(1741000722.444:216): avc: denied { read } for pid=6107 comm="syz.2.58" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.705632][ T29] audit: type=1400 audit(1741000722.444:217): avc: denied { open } for pid=6107 comm="syz.2.58" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.711535][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.770735][ T3073] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.801120][ T29] audit: type=1400 audit(1741000722.984:218): avc: denied { ioctl } for pid=6107 comm="syz.2.58" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.825884][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.832496][ T971] vhci_hcd: vhci_device speed not set [ 83.258988][ T29] audit: type=1400 audit(1741000722.984:219): avc: denied { name_connect } for pid=6107 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 83.283313][ T3073] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.293491][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.305209][ T3073] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 83.320945][ T5913] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 83.337425][ T29] audit: type=1400 audit(1741000722.994:220): avc: denied { listen } for pid=6107 comm="syz.2.58" lport=52298 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.343610][ T3073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.372072][ T6126] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 83.379836][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.396807][ T29] audit: type=1400 audit(1741000723.044:221): avc: denied { accept } for pid=6107 comm="syz.2.58" lport=52298 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.437631][ T5913] usb 5-1: config 0 descriptor?? [ 83.461880][ T3073] usb 2-1: config 0 descriptor?? [ 83.497322][ T29] audit: type=1400 audit(1741000723.174:222): avc: denied { setopt } for pid=6124 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.517397][ T29] audit: type=1400 audit(1741000723.184:223): avc: denied { write } for pid=6124 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.537150][ T29] audit: type=1400 audit(1741000723.484:224): avc: denied { create } for pid=6107 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.625878][ T6138] loop9: detected capacity change from 0 to 7 [ 83.659762][ T6138] Dev loop9: unable to read RDB block 7 [ 83.670673][ T6138] loop9: unable to read partition table [ 83.677565][ T6138] loop9: partition table beyond EOD, truncated [ 83.700958][ T6138] loop_reread_partitions: partition scan of loop9 (被x󟋑 ) failed (rc=-5) [ 83.970832][ T3073] ath6kl: Failed to read usb control message: -71 [ 83.978759][ T5913] ath6kl: Failed to read usb control message: -71 [ 83.985549][ T3073] ath6kl: Unable to read the bmi data from the device: -71 [ 83.994323][ T5913] ath6kl: Unable to read the bmi data from the device: -71 [ 84.001890][ T3073] ath6kl: Unable to recv target info: -71 [ 84.015177][ T5913] ath6kl: Unable to recv target info: -71 [ 84.021230][ T3073] ath6kl: Failed to init ath6kl core: -71 [ 84.027557][ T5913] ath6kl: Failed to init ath6kl core: -71 [ 84.034065][ T25] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 84.044537][ T3073] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 84.058679][ T5913] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 84.101963][ T3073] usb 2-1: USB disconnect, device number 2 [ 84.278839][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.430861][ T5824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 84.440852][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:3 Not tainted 6.14.0-rc5-syzkaller #0 [ 84.440885][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.440899][ T5824] Workqueue: hci4 hci_rx_work [ 84.440932][ T5824] Call Trace: [ 84.440938][ T5824] [ 84.440947][ T5824] dump_stack_lvl+0x16c/0x1f0 [ 84.440974][ T5824] sysfs_warn_dup+0x7f/0xa0 [ 84.441004][ T5824] sysfs_create_dir_ns+0x24d/0x2b0 [ 84.441034][ T5824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.441063][ T5824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.441084][ T5824] ? kobject_add_internal+0x12d/0x990 [ 84.441112][ T5824] ? do_raw_spin_unlock+0x172/0x230 [ 84.441134][ T5824] kobject_add_internal+0x2c8/0x990 [ 84.441165][ T5824] kobject_add+0x16f/0x240 [ 84.441190][ T5824] ? __pfx_kobject_add+0x10/0x10 [ 84.441221][ T5824] ? kobject_put+0xab/0x5a0 [ 84.441255][ T5824] device_add+0x289/0x1a70 [ 84.441280][ T5824] ? __pfx_dev_set_name+0x10/0x10 [ 84.441307][ T5824] ? __pfx_device_add+0x10/0x10 [ 84.441332][ T5824] ? mgmt_send_event_skb+0x2f2/0x460 [ 84.441370][ T5824] hci_conn_add_sysfs+0x17e/0x230 [ 84.441403][ T5824] le_conn_complete_evt+0x107f/0x1da0 [ 84.441432][ T5824] ? io_schedule_timeout+0x110/0x150 [ 84.441461][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 84.441490][ T5824] ? mark_held_locks+0x9f/0xe0 [ 84.441517][ T5824] ? irqentry_exit+0x3b/0x90 [ 84.441539][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.441565][ T5824] hci_le_conn_complete_evt+0x23c/0x370 [ 84.441599][ T5824] hci_le_meta_evt+0x2e2/0x5d0 [ 84.441626][ T5824] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 84.441658][ T5824] hci_event_packet+0x666/0x1180 [ 84.441685][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 84.441713][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 84.441739][ T5824] ? mark_held_locks+0x9f/0xe0 [ 84.441765][ T5824] ? kcov_remote_start+0x3cf/0x6e0 [ 84.441793][ T5824] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.441822][ T5824] hci_rx_work+0x2c5/0x16b0 [ 84.441851][ T5824] ? process_one_work+0x921/0x1ba0 [ 84.441887][ T5824] process_one_work+0x9c5/0x1ba0 [ 84.441924][ T5824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.441953][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 84.441989][ T5824] ? assign_work+0x1a0/0x250 [ 84.442020][ T5824] worker_thread+0x6c8/0xf00 [ 84.442057][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 84.442084][ T5824] kthread+0x3af/0x750 [ 84.442108][ T5824] ? __pfx_kthread+0x10/0x10 [ 84.442129][ T5824] ? lock_acquire+0x2f/0xb0 [ 84.442159][ T5824] ? __pfx_kthread+0x10/0x10 [ 84.442183][ T5824] ret_from_fork+0x45/0x80 [ 84.442207][ T5824] ? __pfx_kthread+0x10/0x10 [ 84.442230][ T5824] ret_from_fork_asm+0x1a/0x30 [ 84.442266][ T5824] [ 84.724296][ T5824] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.738488][ T5824] Bluetooth: hci4: failed to register connection device [ 84.835644][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.847908][ T25] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 84.857054][ T25] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 84.865090][ T25] usb 3-1: Manufacturer: syz [ 84.884536][ T5913] usb 5-1: USB disconnect, device number 2 [ 84.939683][ T25] usb 3-1: config 0 descriptor?? [ 85.283350][ T5866] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.374179][ T3073] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.394424][ T25] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 85.511539][ T5866] usb 4-1: device descriptor read/64, error -71 [ 85.542669][ T3073] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.571416][ T3073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 85.582837][ T3073] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.622452][ T3073] usb 2-1: language id specifier not provided by device, defaulting to English [ 85.639630][ T3073] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 85.651062][ T6160] input: syz0 as /devices/virtual/input/input6 [ 85.657310][ T3073] usb 2-1: New USB device strings: Mfr=125, Product=2, SerialNumber=3 [ 85.668841][ T25] usb 3-1: USB disconnect, device number 3 [ 85.683558][ T3073] usb 2-1: Manufacturer: syz [ 85.692055][ T3073] usb 2-1: SerialNumber: 紙ဘᎪ࣪ᛑ쉾䶨宺ϳꋊꙆ芑邔톝 [ 85.733798][ T3073] usb 2-1: config 0 descriptor?? [ 85.744183][ T3073] em28xx 2-1:0.0: New device syz @ 480 Mbps (2013:0251, interface 0, class 0) [ 85.753230][ T5866] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.760906][ T3073] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 85.884611][ T6163] overlayfs: workdir and upperdir must be separate subtrees [ 85.892233][ T5866] usb 4-1: device descriptor read/64, error -71 [ 86.001951][ T5866] usb usb4-port1: attempt power cycle [ 86.821534][ T5866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.826934][ T3073] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 86.829041][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 86.843060][ T3073] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 86.850560][ T3073] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 86.871838][ T5866] usb 4-1: device descriptor read/8, error -71 [ 86.887348][ T3073] em28xx 2-1:0.0: No AC97 audio processor [ 86.997771][ T3073] usb 2-1: USB disconnect, device number 3 [ 87.109843][ T3073] em28xx 2-1:0.0: Disconnecting em28xx [ 87.314052][ T3073] em28xx 2-1:0.0: Freeing device [ 87.317793][ T6173] ======================================================= [ 87.317793][ T6173] WARNING: The mand mount option has been deprecated and [ 87.317793][ T6173] and is ignored by this kernel. Remove the mand [ 87.317793][ T6173] option from the mount to silence this warning. [ 87.317793][ T6173] ======================================================= [ 87.319073][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 87.319085][ T29] audit: type=1400 audit(1741000727.514:240): avc: denied { mounton } for pid=6172 comm="syz.0.75" path="/18/file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.353778][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.361997][ T5866] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.555191][ T5866] usb 4-1: device descriptor read/8, error -71 [ 87.670303][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 87.805814][ T5866] usb usb4-port1: unable to enumerate USB device [ 88.051825][ T5825] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 88.581484][ T3073] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 88.767109][ T3073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.816671][ T3073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.834925][ T3073] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 88.897518][ T3073] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 88.946305][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 88.952599][ T3073] usb 5-1: Manufacturer: syz [ 89.012308][ T5866] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.016915][ T3073] usb 5-1: config 0 descriptor?? [ 89.481071][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.781202][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.801127][ T3073] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 89.855624][ T5866] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 89.901514][ T5866] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 89.919806][ T5866] usb 3-1: Manufacturer: syz [ 89.935612][ T5866] usb 3-1: config 0 descriptor?? [ 89.950450][ T29] audit: type=1400 audit(1741000730.144:241): avc: denied { getopt } for pid=6210 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.385752][ T29] audit: type=1400 audit(1741000730.564:242): avc: denied { write } for pid=6210 comm="syz.0.89" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.424630][ T29] audit: type=1400 audit(1741000730.574:243): avc: denied { open } for pid=6210 comm="syz.0.89" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.428837][ T6190] overlayfs: failed to set uuid (14/file1, err=-1); falling back to uuid=null. [ 90.447479][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.458945][ T29] audit: type=1400 audit(1741000730.614:244): avc: denied { ioctl } for pid=6210 comm="syz.0.89" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.521960][ T29] audit: type=1400 audit(1741000730.714:245): avc: denied { read } for pid=6217 comm="syz.3.92" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 90.545929][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.562401][ T6190] overlayfs: failed to verify upper root origin [ 90.563801][ T29] audit: type=1400 audit(1741000730.714:246): avc: denied { open } for pid=6217 comm="syz.3.92" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 90.593429][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.646681][ T29] audit: type=1400 audit(1741000730.714:247): avc: denied { ioctl } for pid=6217 comm="syz.3.92" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 90.646942][ T5866] cougar 0003:060B:700A.0003: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 90.979576][ T29] audit: type=1400 audit(1741000730.884:248): avc: denied { create } for pid=6217 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.050613][ T5866] usb 3-1: USB disconnect, device number 4 [ 91.150703][ T971] usb 5-1: USB disconnect, device number 3 [ 91.568834][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 93.519374][ T29] audit: type=1400 audit(1741000733.714:249): avc: denied { accept } for pid=6259 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 93.991746][ T29] audit: type=1400 audit(1741000734.084:250): avc: denied { mount } for pid=6259 comm="syz.4.104" name="/" dev="mqueue" ino=4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.130634][ T29] audit: type=1400 audit(1741000734.104:251): avc: denied { write } for pid=6259 comm="syz.4.104" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.421540][ T29] audit: type=1400 audit(1741000734.104:252): avc: denied { open } for pid=6259 comm="syz.4.104" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.477059][ T29] audit: type=1400 audit(1741000734.114:253): avc: denied { ioctl } for pid=6259 comm="syz.4.104" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x54a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.511964][ T971] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 94.676913][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.821490][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 94.847886][ T29] audit: type=1400 audit(1741000734.294:254): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.125711][ T6279] evm: overlay not supported [ 95.459341][ T3073] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.465645][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.563913][ T29] audit: type=1400 audit(1741000734.764:255): avc: denied { mount } for pid=6238 comm="syz.2.98" name="/" dev="rpc_pipefs" ino=9490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 95.586897][ T971] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 95.586925][ T971] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 95.586945][ T971] usb 1-1: Manufacturer: syz [ 95.588989][ T971] usb 1-1: config 0 descriptor?? [ 95.636869][ T29] audit: type=1400 audit(1741000734.834:256): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.685727][ T3073] usb 5-1: Using ep0 maxpacket: 32 [ 95.693211][ T3073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.708192][ T3073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.708332][ T29] audit: type=1400 audit(1741000734.834:257): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.746830][ T29] audit: type=1400 audit(1741000734.844:258): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.862258][ T3073] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.873841][ T3073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.931171][ T3073] usb 5-1: config 0 descriptor?? [ 96.056174][ T3073] hub 5-1:0.0: USB hub found [ 96.790337][ T971] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 96.932983][ T3073] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 96.948346][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.111'. [ 97.036429][ T9] usb 1-1: USB disconnect, device number 6 [ 97.097765][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.113'. [ 97.194152][ T3073] usbhid 5-1:0.0: can't add hid device: -71 [ 97.200146][ T3073] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.234667][ T3073] usb 5-1: USB disconnect, device number 4 [ 97.977163][ T5833] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 98.438942][ T6312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.534172][ T6318] capability: warning: `syz.3.120' uses 32-bit capabilities (legacy support in use) [ 98.609465][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 98.609477][ T29] audit: type=1400 audit(1741000738.804:262): avc: denied { watch watch_reads } for pid=6317 comm="syz.3.120" path="/28" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.721726][ T6321] input: syz0 as /devices/virtual/input/input7 [ 99.745488][ T29] audit: type=1400 audit(1741000739.124:263): avc: denied { setopt } for pid=6313 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.324465][ T6338] xt_CT: No such helper "snmp" [ 100.581567][ T29] audit: type=1400 audit(1741000740.744:264): avc: denied { setattr } for pid=6335 comm="syz.0.124" path="/dev/mixer" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 102.380855][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.469474][ T29] audit: type=1400 audit(1741000742.644:265): avc: denied { create } for pid=6363 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.615696][ T29] audit: type=1400 audit(1741000742.644:266): avc: denied { ioctl } for pid=6363 comm="syz.2.133" path="socket:[10400]" dev="sockfs" ino=10400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.650661][ T29] audit: type=1400 audit(1741000742.644:267): avc: denied { bind } for pid=6363 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.391967][ T6367] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 103.470585][ T6367] syz_tun: entered promiscuous mode [ 103.561447][ T29] audit: type=1400 audit(1741000743.744:268): avc: denied { read append } for pid=6375 comm="syz.2.136" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.773172][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 103.803533][ T3073] libceph: connect (1)[c::]:6789 error -101 [ 103.812183][ T3073] libceph: mon0 (1)[c::]:6789 connect error [ 103.908014][ T29] audit: type=1400 audit(1741000744.084:269): avc: denied { connect } for pid=6377 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.005391][ T29] audit: type=1400 audit(1741000744.124:270): avc: denied { write } for pid=6377 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.025340][ T6383] ceph: No mds server is up or the cluster is laggy [ 104.107994][ T29] audit: type=1400 audit(1741000744.304:271): avc: denied { shutdown } for pid=6392 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.209759][ T29] audit: type=1400 audit(1741000744.334:272): avc: denied { search } for pid=6392 comm="syz.0.141" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.381607][ T3073] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.804804][ T3073] usb 3-1: Using ep0 maxpacket: 8 [ 104.821623][ T3073] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 104.839895][ T3073] usb 3-1: config 150 has no interface number 0 [ 104.849704][ T3073] usb 3-1: config 150 interface 204 has no altsetting 0 [ 104.869569][ T3073] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 104.890381][ T3073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.925144][ T3073] usb 3-1: Product: syz [ 104.929324][ T3073] usb 3-1: Manufacturer: syz [ 104.941412][ T3073] usb 3-1: SerialNumber: syz [ 106.405438][ T6424] Cannot find del_set index 4 as target [ 106.701051][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.979392][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.018275][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.163563][ T6437] FAULT_INJECTION: forcing a failure. [ 107.163563][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 107.285843][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.1.155 Not tainted 6.14.0-rc5-syzkaller #0 [ 107.285867][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.285880][ T6437] Call Trace: [ 107.285886][ T6437] [ 107.285893][ T6437] dump_stack_lvl+0x16c/0x1f0 [ 107.285921][ T6437] should_fail_ex+0x50a/0x650 [ 107.285947][ T6437] ? fs_reclaim_acquire+0xae/0x150 [ 107.285975][ T6437] ? tomoyo_encode2+0x100/0x3e0 [ 107.285999][ T6437] should_failslab+0xc2/0x120 [ 107.286020][ T6437] __kmalloc_noprof+0xcb/0x510 [ 107.286039][ T6437] ? __pfx_lock_release+0x10/0x10 [ 107.286063][ T6437] ? trace_lock_acquire+0x14e/0x1f0 [ 107.286088][ T6437] tomoyo_encode2+0x100/0x3e0 [ 107.286117][ T6437] tomoyo_encode+0x29/0x50 [ 107.286141][ T6437] tomoyo_mount_acl+0x145/0x880 [ 107.286164][ T6437] ? hlock_class+0x4e/0x130 [ 107.286182][ T6437] ? __lock_acquire+0x15a9/0x3c40 [ 107.286215][ T6437] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 107.286249][ T6437] ? __pfx___lock_acquire+0x10/0x10 [ 107.286273][ T6437] ? stack_trace_save+0x95/0xd0 [ 107.286315][ T6437] ? trace_lock_acquire+0x14e/0x1f0 [ 107.286336][ T6437] ? tomoyo_mount_permission+0x149/0x420 [ 107.286361][ T6437] ? lock_acquire+0x2f/0xb0 [ 107.286384][ T6437] ? tomoyo_mount_permission+0x149/0x420 [ 107.286411][ T6437] tomoyo_mount_permission+0x16e/0x420 [ 107.286434][ T6437] ? tomoyo_mount_permission+0x149/0x420 [ 107.286466][ T6437] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 107.286503][ T6437] ? get_current_fs_domain+0x184/0x1f0 [ 107.286527][ T6437] security_sb_mount+0x9b/0x260 [ 107.286552][ T6437] path_mount+0x129/0x1f10 [ 107.286574][ T6437] ? kmem_cache_free+0x2e2/0x4d0 [ 107.286593][ T6437] ? __pfx_path_mount+0x10/0x10 [ 107.286617][ T6437] ? putname+0x13c/0x180 [ 107.286641][ T6437] __x64_sys_mount+0x28f/0x310 [ 107.286662][ T6437] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.286691][ T6437] do_syscall_64+0xcd/0x250 [ 107.286716][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.286740][ T6437] RIP: 0033:0x7f862918d169 [ 107.286755][ T6437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.286771][ T6437] RSP: 002b:00007f862a00c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.286789][ T6437] RAX: ffffffffffffffda RBX: 00007f86293a5fa0 RCX: 00007f862918d169 [ 107.286801][ T6437] RDX: 0000400000000040 RSI: 0000400000000300 RDI: 00004000000000c0 [ 107.286813][ T6437] RBP: 00007f862a00c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.286823][ T6437] R10: 0000000002208040 R11: 0000000000000246 R12: 0000000000000002 [ 107.286834][ T6437] R13: 0000000000000001 R14: 00007f86293a5fa0 R15: 00007ffdb62a7408 [ 107.286860][ T6437] [ 107.579151][ T29] audit: type=1400 audit(1741000747.774:273): avc: denied { listen } for pid=6440 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.866302][ T3073] usb 3-1: USB disconnect, device number 5 [ 107.882061][ T25] usb 1-1: device not accepting address 7, error -71 [ 107.889476][ T29] audit: type=1400 audit(1741000747.904:274): avc: denied { create } for pid=6443 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.361564][ T29] audit: type=1400 audit(1741000749.554:275): avc: denied { write } for pid=6453 comm="syz.1.162" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.122483][ T5825] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 110.131414][ T5825] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 110.158156][ T29] audit: type=1400 audit(1741000749.564:276): avc: denied { open } for pid=6453 comm="syz.1.162" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.438893][ T6471] input: syz0 as /devices/virtual/input/input8 [ 111.283405][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.331033][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.790119][ T6495] nftables ruleset with unbound set [ 112.088178][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.166691][ T6501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.173'. [ 112.702914][ T25] usb 1-1: device descriptor read/64, error -71 [ 112.885830][ T5833] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 114.483391][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.615138][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 115.044649][ T6532] input: syz0 as /devices/virtual/input/input9 [ 115.209052][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 117.026253][ T971] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 117.962924][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.046007][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.104969][ T971] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 118.126616][ T6557] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 118.143265][ T971] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.266247][ T971] usb 1-1: Manufacturer: syz [ 118.300072][ T971] usb 1-1: config 0 descriptor?? [ 118.454881][ T5833] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 119.030008][ T6573] dccp_invalid_packet: invalid packet type [ 119.068238][ T29] audit: type=1400 audit(1741000759.264:277): avc: denied { create } for pid=6574 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.095476][ T6575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.171439][ T3073] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.324948][ T3073] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.395846][ T3073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.508856][ T3073] usb 2-1: config 0 descriptor?? [ 119.784869][ T971] cougar 0003:060B:700A.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 119.988422][ T25] usb 1-1: USB disconnect, device number 11 [ 120.007189][ T3073] elan 0003:04F3:0755.0006: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 120.064080][ T6589] input: syz0 as /devices/virtual/input/input10 [ 120.370059][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.426171][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.612976][ T971] usb 2-1: USB disconnect, device number 4 [ 120.743355][ T6593] overlayfs: workdir and upperdir must be separate subtrees [ 121.074081][ T29] audit: type=1400 audit(1741000761.234:278): avc: denied { append } for pid=6606 comm="syz.0.206" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 121.174911][ T6609] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 123.351457][ T29] audit: type=1400 audit(1741000763.544:279): avc: denied { map } for pid=6606 comm="syz.0.206" path="socket:[10216]" dev="sockfs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 123.821630][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 124.087899][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.209'. [ 126.570352][ T6642] tmpfs: Unknown parameter 'kug' [ 126.636502][ T29] audit: type=1400 audit(1741000766.834:280): avc: denied { execute } for pid=6640 comm="syz.2.215" path="/37/file0/bus" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.659201][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.498229][ T6639] xt_CT: No such helper "snmp" [ 129.421377][ C0] sched: DL replenish lagged too much [ 130.564106][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.772925][ T29] audit: type=1400 audit(1741000771.224:281): avc: denied { write } for pid=6657 comm="syz.1.218" path="socket:[10223]" dev="sockfs" ino=10223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.834181][ T6665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.080114][ T29] audit: type=1400 audit(1741000771.244:282): avc: denied { nlmsg_read } for pid=6657 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 132.155128][ T6670] input: syz0 as /devices/virtual/input/input11 [ 132.360022][ T6676] FAULT_INJECTION: forcing a failure. [ 132.360022][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 132.491423][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.1.224 Not tainted 6.14.0-rc5-syzkaller #0 [ 132.491448][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.491458][ T6676] Call Trace: [ 132.491464][ T6676] [ 132.491471][ T6676] dump_stack_lvl+0x16c/0x1f0 [ 132.491499][ T6676] should_fail_ex+0x50a/0x650 [ 132.491526][ T6676] ? fs_reclaim_acquire+0xae/0x150 [ 132.491554][ T6676] should_failslab+0xc2/0x120 [ 132.491574][ T6676] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 132.491597][ T6676] ? vfs_parse_fs_string+0xc4/0x150 [ 132.491620][ T6676] kmemdup_nul+0x49/0xf0 [ 132.491652][ T6676] vfs_parse_fs_string+0xc4/0x150 [ 132.491671][ T6676] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 132.491688][ T6676] ? __raw_spin_lock_init+0x3a/0x110 [ 132.491711][ T6676] ? romfs_init_fs_context+0xd/0x40 [ 132.491735][ T6676] ? alloc_fs_context+0x59b/0x9c0 [ 132.491758][ T6676] path_mount+0x677/0x1f10 [ 132.491780][ T6676] ? kmem_cache_free+0x2e2/0x4d0 [ 132.491797][ T6676] ? __pfx_path_mount+0x10/0x10 [ 132.491821][ T6676] ? putname+0x13c/0x180 [ 132.491846][ T6676] __x64_sys_mount+0x28f/0x310 [ 132.491866][ T6676] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.491894][ T6676] do_syscall_64+0xcd/0x250 [ 132.491919][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.491943][ T6676] RIP: 0033:0x7f862918d169 [ 132.491959][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.491975][ T6676] RSP: 002b:00007f862a00c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.491993][ T6676] RAX: ffffffffffffffda RBX: 00007f86293a5fa0 RCX: 00007f862918d169 [ 132.492005][ T6676] RDX: 0000400000000040 RSI: 0000400000000300 RDI: 00004000000000c0 [ 132.492017][ T6676] RBP: 00007f862a00c090 R08: 0000000000000000 R09: 0000000000000000 [ 132.492028][ T6676] R10: 0000000002208040 R11: 0000000000000246 R12: 0000000000000002 [ 132.492038][ T6676] R13: 0000000000000001 R14: 00007f86293a5fa0 R15: 00007ffdb62a7408 [ 132.492063][ T6676] [ 133.013157][ T6673] overlayfs: workdir and upperdir must be separate subtrees [ 133.083561][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.094019][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.124117][ T6686] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.758495][ T6696] overlayfs: missing 'lowerdir' [ 134.405216][ T29] audit: type=1400 audit(1741000774.584:283): avc: denied { read } for pid=6695 comm="syz.4.229" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.621472][ T29] audit: type=1400 audit(1741000774.634:284): avc: denied { ioctl } for pid=6695 comm="syz.4.229" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.891067][ T6708] mmap: syz.1.232 (6708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.989703][ T29] audit: type=1400 audit(1741000776.184:285): avc: denied { name_bind } for pid=6700 comm="syz.1.232" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 136.733774][ T29] audit: type=1400 audit(1741000776.914:286): avc: denied { read } for pid=6715 comm="syz.0.236" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.806483][ T29] audit: type=1400 audit(1741000776.914:287): avc: denied { open } for pid=6715 comm="syz.0.236" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.421450][ T29] audit: type=1400 audit(1741000777.034:288): avc: denied { ioctl } for pid=6715 comm="syz.0.236" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.993337][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 145.135918][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 145.148505][ T5913] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 146.391510][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.422473][ T6734] input: syz0 as /devices/virtual/input/input12 [ 146.460855][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.524336][ T5913] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 146.581457][ T5913] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.613089][ T29] audit: type=1400 audit(1741000786.804:289): avc: denied { write } for pid=6737 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.661158][ T5913] usb 5-1: Manufacturer: syz [ 146.701216][ T5913] usb 5-1: config 0 descriptor?? [ 146.738730][ T29] audit: type=1400 audit(1741000786.804:290): avc: denied { wake_alarm } for pid=6737 comm="syz.3.246" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.905112][ T29] audit: type=1400 audit(1741000786.854:291): avc: denied { bind } for pid=6737 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.930436][ T6734] overlayfs: workdir and upperdir must be separate subtrees [ 146.951493][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 147.123885][ T25] usb 4-1: device descriptor read/64, error -71 [ 147.211839][ T5913] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 147.401444][ T25] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 147.481392][ T29] audit: type=1400 audit(1741000787.664:292): avc: denied { bind } for pid=6745 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.603328][ T25] usb 4-1: device descriptor read/64, error -71 [ 147.619820][ T29] audit: type=1400 audit(1741000787.664:293): avc: denied { name_bind } for pid=6745 comm="syz.2.247" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 147.652619][ T6727] overlayfs: failed to set uuid (41/file1, err=-1); falling back to uuid=null. [ 147.698396][ T3073] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 147.714414][ T25] usb usb4-port1: attempt power cycle [ 147.742749][ T6727] overlayfs: failed to verify upper root origin [ 147.759545][ T3073] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 147.767292][ T29] audit: type=1400 audit(1741000787.664:294): avc: denied { node_bind } for pid=6745 comm="syz.2.247" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 147.857374][ T29] audit: type=1400 audit(1741000787.664:295): avc: denied { listen } for pid=6745 comm="syz.2.247" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.888423][ T3073] hid-generic 0000:0003:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 147.902162][ T5913] usb 5-1: USB disconnect, device number 5 [ 148.101524][ T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 148.138756][ T25] usb 4-1: device descriptor read/8, error -71 [ 148.155541][ T29] audit: type=1400 audit(1741000787.734:296): avc: denied { connect } for pid=6745 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.225757][ T29] audit: type=1400 audit(1741000787.734:297): avc: denied { name_connect } for pid=6745 comm="syz.2.247" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 155.736589][ T29] audit: type=1400 audit(1741000787.874:298): avc: denied { read write } for pid=6747 comm="syz.0.248" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.953790][ T29] audit: type=1400 audit(1741000787.874:299): avc: denied { open } for pid=6747 comm="syz.0.248" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.316272][ T29] audit: type=1400 audit(1741000787.914:300): avc: denied { ioctl } for pid=6737 comm="syz.3.246" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.305314][ T29] audit: type=1400 audit(1741000788.044:301): avc: denied { write } for pid=6753 comm="syz.2.249" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.234412][ T25] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 277.921296][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 277.928282][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5484/1:b..l P5977/1:b..l P5803/2:b..l [ 277.938904][ C0] rcu: (detected by 0, t=10502 jiffies, g=11545, q=338 ncpus=2) [ 277.946627][ C0] task:syz-executor state:R running task stack:23312 pid:5803 tgid:5803 ppid:5801 task_flags:0x400100 flags:0x00004002 [ 277.961033][ C0] Call Trace: [ 277.964313][ C0] [ 277.967228][ C0] __schedule+0xf43/0x5890 [ 277.971640][ C0] ? check_sq_full_and_disable.isra.0+0xa8/0x4f0 [ 277.977980][ C0] ? find_held_lock+0x21/0x110 [ 277.982759][ C0] ? hlock_class+0x4e/0x130 [ 277.987287][ C0] ? __pfx___schedule+0x10/0x10 [ 277.992150][ C0] ? dev_hard_start_xmit+0x63d/0x7b0 [ 277.997447][ C0] ? find_held_lock+0x2d/0x110 [ 278.002220][ C0] ? find_held_lock+0x2d/0x110 [ 278.006996][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 278.012373][ C0] preempt_schedule_common+0x44/0xc0 [ 278.017645][ C0] preempt_schedule_thunk+0x1a/0x30 [ 278.022846][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 278.027969][ C0] __local_bh_enable_ip+0x107/0x120 [ 278.033184][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 278.038305][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 278.043254][ C0] ? hlock_class+0x4e/0x130 [ 278.047764][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 278.052820][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 278.058202][ C0] ? hlock_class+0x4e/0x130 [ 278.062704][ C0] ? mark_lock+0xb5/0xc60 [ 278.067014][ C0] ? __pfx_mark_lock+0x10/0x10 [ 278.071772][ C0] ? find_held_lock+0x2d/0x110 [ 278.076554][ C0] ? __ip_finish_output+0x49e/0x950 [ 278.081765][ C0] ? __pfx_lock_release+0x10/0x10 [ 278.086816][ C0] ? mark_held_locks+0x9f/0xe0 [ 278.091597][ C0] ip_finish_output2+0xc34/0x2180 [ 278.096642][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 278.102112][ C0] ? ip_skb_dst_mtu+0x496/0xe90 [ 278.106974][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 278.112190][ C0] __ip_finish_output+0x49e/0x950 [ 278.117231][ C0] ip_finish_output+0x35/0x380 [ 278.122011][ C0] ip_output+0x13b/0x2a0 [ 278.126256][ C0] ? __pfx_ip_output+0x10/0x10 [ 278.130997][ C0] __ip_queue_xmit+0x1a8d/0x22d0 [ 278.135930][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 278.141056][ C0] __tcp_transmit_skb+0x2b39/0x3ec0 [ 278.146273][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 278.151830][ C0] ? __build_skb_around+0x278/0x3b0 [ 278.157061][ C0] tcp_write_xmit+0x12b1/0x8560 [ 278.161943][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 278.167496][ C0] tcp_rcv_established+0x868/0x2140 [ 278.172713][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 278.177924][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 278.183580][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 278.188792][ C0] tcp_v4_do_rcv+0x5ca/0xa90 [ 278.193406][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 278.198534][ C0] __release_sock+0x31b/0x400 [ 278.203225][ C0] ? release_sock+0x21/0x220 [ 278.207836][ C0] release_sock+0x5a/0x220 [ 278.212269][ C0] tcp_sendmsg+0x38/0x50 [ 278.216527][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 278.221481][ C0] inet_sendmsg+0xb9/0x140 [ 278.225905][ C0] sock_write_iter+0x4ac/0x5b0 [ 278.230648][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 278.235930][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 278.241309][ C0] ? security_file_permission+0x71/0x210 [ 278.246959][ C0] ? rw_verify_area+0xcf/0x680 [ 278.251740][ C0] vfs_write+0x5ae/0x1150 [ 278.256087][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 278.261381][ C0] ? __pfx_vfs_write+0x10/0x10 [ 278.266164][ C0] ? rcu_is_watching+0x12/0xc0 [ 278.270936][ C0] ? __count_memcg_events+0x439/0x5c0 [ 278.276320][ C0] ? count_memcg_events_mm.constprop.0+0x142/0x340 [ 278.282842][ C0] ksys_write+0x207/0x250 [ 278.287190][ C0] ? __pfx_ksys_write+0x10/0x10 [ 278.292058][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 278.297365][ C0] do_syscall_64+0xcd/0x250 [ 278.301885][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.307839][ C0] RIP: 0033:0x7f409d78bbe0 [ 278.312267][ C0] RSP: 002b:00007ffdfb51b8b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 278.320667][ C0] RAX: ffffffffffffffda RBX: 000000045f7e9380 RCX: 00007f409d78bbe0 [ 278.328634][ C0] RDX: 000000000004f410 RSI: 00007f40961b0bf0 RDI: 0000000000000003 [ 278.336597][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 00000000005ffde8 [ 278.344572][ C0] R10: 1401ad6e6ebaaaae R11: 0000000000000202 R12: 000000000004f410 [ 278.352546][ C0] R13: 000055555ca65f20 R14: 00007ffdfb51bd80 R15: 00007f40961b0bf0 [ 278.360537][ C0] [ 278.363566][ C0] task:kworker/u8:9 state:R running task stack:24384 pid:5977 tgid:5977 ppid:2 task_flags:0x24248060 flags:0x00004000 [ 278.377254][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 278.383236][ C0] Call Trace: [ 278.386514][ C0] [ 278.389447][ C0] __schedule+0xf43/0x5890 [ 278.393888][ C0] ? __pfx___schedule+0x10/0x10 [ 278.398746][ C0] ? mark_lock+0xb5/0xc60 [ 278.403095][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 278.408316][ C0] ? mark_held_locks+0x9f/0xe0 [ 278.413097][ C0] preempt_schedule_irq+0x51/0x90 [ 278.418131][ C0] irqentry_exit+0x36/0x90 [ 278.422548][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.428508][ C0] RIP: 0010:folio_clear_dirty_for_io+0x3e6/0x800 [ 278.434825][ C0] Code: df e8 6e ed 31 00 9c 58 25 00 02 00 00 31 ff 48 89 c6 48 89 44 24 08 e8 b8 f1 c6 ff 48 8b 44 24 08 48 85 c0 0f 85 c6 03 00 00 75 f6 c6 ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 278.454441][ C0] RSP: 0018:ffffc9000215ee28 EFLAGS: 00000293 [ 278.460514][ C0] RAX: 0000000000000000 RBX: ffffea0001745d00 RCX: ffffffff81f2edc0 [ 278.468488][ C0] RDX: ffff888029890000 RSI: ffffffff81f2edd3 RDI: 0000000000000007 [ 278.476459][ C0] RBP: ffffea0001745d01 R08: 0000000000000007 R09: 0000000000000000 [ 278.484418][ C0] R10: 0000000000000000 R11: 0000000000000006 R12: 0000000000000000 [ 278.492393][ C0] R13: ffff88807aceaa50 R14: ffff8880294fc068 R15: 0000000000000000 [ 278.500375][ C0] ? folio_clear_dirty_for_io+0x660/0x800 [ 278.506105][ C0] ? folio_clear_dirty_for_io+0x673/0x800 [ 278.511839][ C0] ? folio_clear_dirty_for_io+0x673/0x800 [ 278.517574][ C0] mpage_submit_folio+0x80/0x350 [ 278.522525][ C0] mpage_map_and_submit_buffers+0x590/0xae0 [ 278.528429][ C0] ? __pfx_lock_release+0x1/0x10 [ 278.533399][ C0] ? __pfx_mpage_map_and_submit_buffers+0x10/0x10 [ 278.539832][ C0] ? __check_block_validity.constprop.0+0x1b0/0x300 [ 278.546468][ C0] ext4_do_writepages+0x1b07/0x32d0 [ 278.551705][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 278.557275][ C0] ? mark_lock+0xb5/0xc60 [ 278.561618][ C0] ? do_writepages+0x1b3/0x820 [ 278.566386][ C0] ? ext4_writepages+0x303/0x730 [ 278.571313][ C0] ext4_writepages+0x303/0x730 [ 278.576090][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 278.581407][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 278.586708][ C0] do_writepages+0x1b3/0x820 [ 278.591313][ C0] ? __pfx_do_writepages+0x10/0x10 [ 278.596435][ C0] ? writeback_sb_inodes+0x3a9/0xfa0 [ 278.601735][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 278.607120][ C0] ? writeback_sb_inodes+0x3a9/0xfa0 [ 278.612419][ C0] ? find_held_lock+0x2d/0x110 [ 278.617194][ C0] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 278.623104][ C0] __writeback_single_inode+0x166/0xfa0 [ 278.628666][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.634047][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 278.640128][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 278.645337][ C0] writeback_sb_inodes+0x606/0xfa0 [ 278.650470][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 278.656116][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 278.661364][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 278.666662][ C0] __writeback_inodes_wb+0xff/0x2e0 [ 278.671857][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 278.677673][ C0] ? wb_writeback+0x34c/0xb80 [ 278.682367][ C0] wb_writeback+0x803/0xb80 [ 278.686895][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 278.691939][ C0] ? get_nr_dirty_inodes+0x171/0x1e0 [ 278.697243][ C0] wb_workfn+0x8c0/0xbc0 [ 278.701506][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 278.706282][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 278.711938][ C0] ? process_one_work+0x921/0x1ba0 [ 278.717070][ C0] ? lock_acquire+0x2f/0xb0 [ 278.721596][ C0] ? process_one_work+0x921/0x1ba0 [ 278.726714][ C0] process_one_work+0x9c5/0x1ba0 [ 278.731654][ C0] ? __pfx_kfree_rcu_monitor+0x10/0x10 [ 278.737126][ C0] ? __pfx_process_one_work+0x10/0x10 [ 278.742521][ C0] ? assign_work+0x1a0/0x250 [ 278.747127][ C0] worker_thread+0x6c8/0xf00 [ 278.751738][ C0] ? __kthread_parkme+0x148/0x220 [ 278.756770][ C0] ? __pfx_worker_thread+0x10/0x10 [ 278.761896][ C0] kthread+0x3af/0x750 [ 278.765976][ C0] ? __pfx_kthread+0x10/0x10 [ 278.770585][ C0] ? lock_acquire+0x2f/0xb0 [ 278.775089][ C0] ? __pfx_kthread+0x10/0x10 [ 278.779693][ C0] ret_from_fork+0x45/0x80 [ 278.784125][ C0] ? __pfx_kthread+0x10/0x10 [ 278.788724][ C0] ret_from_fork_asm+0x1a/0x30 [ 278.793515][ C0] [ 278.796537][ C0] task:dhcpcd state:R running task stack:25552 pid:5484 tgid:5484 ppid:1 task_flags:0x400140 flags:0x00000002 [ 278.810057][ C0] Call Trace: [ 278.813328][ C0] [ 278.816240][ C0] __schedule+0xf43/0x5890 [ 278.820635][ C0] ? __pfx_mark_lock+0x10/0x10 [ 278.825397][ C0] ? hlock_class+0x4e/0x130 [ 278.829917][ C0] ? hlock_class+0x4e/0x130 [ 278.834428][ C0] ? mark_lock+0xb5/0xc60 [ 278.838776][ C0] ? __pfx___schedule+0x10/0x10 [ 278.843635][ C0] ? hlock_class+0x4e/0x130 [ 278.848155][ C0] ? irqentry_exit+0x3b/0x90 [ 278.852756][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.857972][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 278.863358][ C0] preempt_schedule_common+0x44/0xc0 [ 278.868622][ C0] preempt_schedule_thunk+0x1a/0x30 [ 278.873818][ C0] unwind_next_frame+0x1776/0x20c0 [ 278.878948][ C0] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 278.885034][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 278.891198][ C0] arch_stack_walk+0x95/0x100 [ 278.895884][ C0] ? __alloc_skb+0x2b1/0x380 [ 278.900494][ C0] stack_trace_save+0x95/0xd0 [ 278.905182][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 278.910571][ C0] save_stack+0x162/0x1f0 [ 278.914910][ C0] ? __pfx_save_stack+0x10/0x10 [ 278.919756][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 278.925381][ C0] ? free_frozen_pages+0x6db/0xfb0 [ 278.930497][ C0] ? __put_partials+0x14c/0x170 [ 278.935364][ C0] ? qlist_free_all+0x4e/0x120 [ 278.940146][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 278.945784][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 278.950820][ C0] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 278.956913][ C0] __reset_page_owner+0x8d/0x400 [ 278.961867][ C0] free_frozen_pages+0x6db/0xfb0 [ 278.966803][ C0] __put_partials+0x14c/0x170 [ 278.971479][ C0] qlist_free_all+0x4e/0x120 [ 278.976183][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 278.981632][ C0] __kasan_slab_alloc+0x69/0x90 [ 278.986492][ C0] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 278.992394][ C0] ? __alloc_skb+0x2b1/0x380 [ 278.997006][ C0] __alloc_skb+0x2b1/0x380 [ 279.001434][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 279.006387][ C0] ? find_held_lock+0x2d/0x110 [ 279.011163][ C0] alloc_skb_with_frags+0xe4/0x850 [ 279.016291][ C0] ? __pfx_lock_release+0x10/0x10 [ 279.021328][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 279.026527][ C0] sock_alloc_send_pskb+0x7f1/0x980 [ 279.031726][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 279.037466][ C0] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 279.043808][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 279.050499][ C0] ? find_held_lock+0x2d/0x110 [ 279.055281][ C0] unix_dgram_sendmsg+0x45e/0x1880 [ 279.060417][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 279.067198][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 279.072761][ C0] sock_write_iter+0x4fe/0x5b0 [ 279.077502][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 279.082785][ C0] ? __pfx_file_has_perm+0x10/0x10 [ 279.087909][ C0] do_iter_readv_writev+0x655/0x950 [ 279.093127][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 279.098864][ C0] ? selinux_file_permission+0x11f/0x580 [ 279.104531][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 279.109909][ C0] ? security_file_permission+0x71/0x210 [ 279.115562][ C0] ? rw_verify_area+0xcf/0x680 [ 279.120352][ C0] vfs_writev+0x363/0xdd0 [ 279.124707][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 279.129600][ C0] ? __pfx___seccomp_filter+0x10/0x10 [ 279.134997][ C0] ? do_writev+0x297/0x340 [ 279.139427][ C0] do_writev+0x297/0x340 [ 279.143686][ C0] ? __pfx_do_writev+0x10/0x10 [ 279.148467][ C0] ? __secure_computing+0x273/0x3f0 [ 279.153683][ C0] do_syscall_64+0xcd/0x250 [ 279.158206][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.164107][ C0] RIP: 0033:0x7f743c84ae03 [ 279.168496][ C0] RSP: 002b:00007fffbef45f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 279.176895][ C0] RAX: ffffffffffffffda RBX: 00007fffbef462d8 RCX: 00007f743c84ae03 [ 279.184869][ C0] RDX: 0000000000000005 RSI: 00007fffbef45f90 RDI: 000000000000000a [ 279.192845][ C0] RBP: 000000000000012c R08: 000000000000000a R09: 00007fffbef45fd0 [ 279.200821][ C0] R10: 00007fffbef45fd8 R11: 0000000000000246 R12: 000055bdfded8db0 [ 279.208799][ C0] R13: 000055bdc1ecff88 R14: 00000000ffffffff R15: 0000000000000001 [ 279.216775][ C0] [ 279.219771][ C0] rcu: rcu_preempt kthread starved for 6542 jiffies! g11545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 279.230859][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 279.240826][ C0] rcu: RCU grace-period kthread stack dump: [ 279.246709][ C0] task:rcu_preempt state:R running task stack:26304 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 279.260234][ C0] Call Trace: [ 279.263511][ C0] [ 279.266445][ C0] __schedule+0xf43/0x5890 [ 279.270875][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 279.276087][ C0] ? __pfx___schedule+0x10/0x10 [ 279.280927][ C0] ? schedule+0x298/0x350 [ 279.285244][ C0] ? __pfx_lock_release+0x10/0x10 [ 279.290292][ C0] ? lock_acquire+0x2f/0xb0 [ 279.294814][ C0] ? schedule+0x1fd/0x350 [ 279.299156][ C0] schedule+0xe7/0x350 [ 279.303235][ C0] schedule_timeout+0x124/0x280 [ 279.308103][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 279.313494][ C0] ? __pfx_process_timeout+0x10/0x10 [ 279.318793][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.324601][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 279.330042][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 279.334800][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 279.340101][ C0] ? rcu_gp_init+0xc82/0x1630 [ 279.344801][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 279.350012][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 279.355829][ C0] rcu_gp_kthread+0x271/0x380 [ 279.360522][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.365741][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.370951][ C0] ? __kthread_parkme+0x148/0x220 [ 279.375973][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.381154][ C0] kthread+0x3af/0x750 [ 279.385216][ C0] ? __pfx_kthread+0x10/0x10 [ 279.389822][ C0] ? __pfx_kthread+0x10/0x10 [ 279.394457][ C0] ret_from_fork+0x45/0x80 [ 279.398882][ C0] ? __pfx_kthread+0x10/0x10 [ 279.403482][ C0] ret_from_fork_asm+0x1a/0x30 [ 279.408276][ C0] [ 279.411298][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 279.417627][ C0] Sending NMI from CPU 0 to CPUs 1: [ 279.422838][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 282.851513][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.862048][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.792241][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.802770][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.499118][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 284.514331][ T5130] Bluetooth: hci3: command 0x0406 tx timeout [ 284.520367][ T5130] Bluetooth: hci0: command 0x0406 tx timeout [ 284.535642][ T5130] Bluetooth: hci1: command 0x0406 tx timeout [ 284.555458][ T5130] Bluetooth: hci4: command 0x0406 tx timeout