last executing test programs: 2m6.978001232s ago: executing program 0 (id=505): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m5.578374832s ago: executing program 0 (id=510): r0 = socket$inet6(0xa, 0x40000080806, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c201020301090224"], 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x1d, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c080) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) 2m1.465189444s ago: executing program 0 (id=519): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f356e", 0x53}], 0x1) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @local}, "92e4440000000000"}}}}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000030000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) pipe2(&(0x7f0000000080), 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) 2m1.293863738s ago: executing program 0 (id=522): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8982, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) capset(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2100, 0xb) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0, 0x57fffffe, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m0.926433504s ago: executing program 0 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x381841, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2, 0x80000}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x30009000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='sou2c\t', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) 1m59.944856457s ago: executing program 0 (id=527): socket(0x2b, 0x80801, 0x1) ioperm(0x8, 0x10b, 0xa) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m45.431323336s ago: executing program 4 (id=554): socket$nl_xfrm(0x10, 0x3, 0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) io_uring_setup(0x5b77, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m44.811233176s ago: executing program 32 (id=527): socket(0x2b, 0x80801, 0x1) ioperm(0x8, 0x10b, 0xa) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m43.137890136s ago: executing program 4 (id=560): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="60a66b51eaca012b", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 1m42.200934309s ago: executing program 4 (id=563): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x80000001, 0x0, 0x400, 0x1, 0x9, 0xbf}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 1m40.733717081s ago: executing program 4 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800000}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x1afc}, {0x0, 0x0, 0x3}, {}, {}, {0x1}, {0x1}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb8}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xaef4}, {}, {}, {}, {}, {0x0, 0xa24}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x40000}], [{}, {}, {}, {0x5}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], 0x4}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) syz_clone(0x2340080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf) 1m39.234854273s ago: executing program 4 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioperm(0x6, 0x4, 0xfffffffffffffff8) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m38.240625758s ago: executing program 4 (id=575): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40020000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'nat\x00', 0x0, [0x0, 0x3, 0x1, 0xff, 0x10001]}, &(0x7f0000000200)=0x54) 1m23.070759499s ago: executing program 33 (id=575): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40020000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'nat\x00', 0x0, [0x0, 0x3, 0x1, 0xff, 0x10001]}, &(0x7f0000000200)=0x54) 49.950927319s ago: executing program 5 (id=669): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x50000, 0x0) socket(0x10, 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 45.416896306s ago: executing program 5 (id=678): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1801ebff000000000000000000000000850000006d000000747ccba0f43ec1ef44eb7f3f54c045633b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 44.369951849s ago: executing program 5 (id=682): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r5 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000100)={0x3, @vbi={0x26, 0x6, 0xc6, 0x32314d59, [0x8, 0x3], [0x26, 0x1], 0x1}}) socket$nl_route(0x10, 0x3, 0x0) 42.872141175s ago: executing program 3 (id=683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x558410e9) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfeac, 0xd) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x44, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 42.867295244s ago: executing program 6 (id=685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x129080, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000080)=0xf5) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 41.60021685s ago: executing program 6 (id=686): fchdir(0xffffffffffffffff) mkdir(0x0, 0x12) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioperm(0x7f, 0x5, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000015000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0xebdb9000) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r2, 0x0, 0x4, 0x0) 41.13074048s ago: executing program 5 (id=687): socket(0xf, 0x800, 0x80000001) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x7, 0x40000000000006) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x408c5333, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}}}, 0x84) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe}) 40.865042892s ago: executing program 1 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) io_setup(0xa, 0x0) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001000700000003cfa86a6f2dcbb32f781fb616c45a75ba962c793647fc870189a7ecfb70000000000000db1060ee74c7104bf7586cd8"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 40.709413655s ago: executing program 5 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0xd3c91da4e275ff45, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x1049c}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000406010400000000000000000100000205000100000000000900020073797a31000000000500010007000000"], 0x30}}, 0xc40) ioperm(0x0, 0x3, 0x2) getpgrp(0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, &(0x7f0000000100)) 39.939030935s ago: executing program 6 (id=690): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13, 0x1000c8}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x200, 0x2, 0x23c}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x40600) 38.542935919s ago: executing program 6 (id=693): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000000c120000", @ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(0x0, 0xf2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$midi(0xffffffffffffffff, &(0x7f0000000f80)=""/251, 0xfb) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 38.149672703s ago: executing program 5 (id=694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffd49) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r0}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2d3}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$hiddev(&(0x7f00000000c0), 0x100000000, 0x8c00) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 38.030761656s ago: executing program 3 (id=695): openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r3, 0x540b, 0x2) 37.193969847s ago: executing program 1 (id=696): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) listen(r1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) 36.854984836s ago: executing program 3 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = timerfd_create(0x7, 0x800) timerfd_settime(r3, 0x3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 35.137074072s ago: executing program 3 (id=699): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x80995bbf37c22b90) fstat(r0, &(0x7f0000000280)) ioperm(0x400, 0x4, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x8) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006867bc0629681f49b6bbdf250a000300220000001c00"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) socket(0x28, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 34.813487628s ago: executing program 1 (id=700): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt(r1, 0x1, 0x1, &(0x7f0000000300)="159593b3ceb8b0430b758e28f42e5509d4", 0x11) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000500)=""/235, 0xeb}], 0x2, 0x0, 0xfffffffffffffd9c}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, 0x0) io_uring_enter(r3, 0x2d8, 0x16b9, 0x6d, &(0x7f00000002c0)={[0x1]}, 0xffffffffffffff24) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) 34.753080613s ago: executing program 6 (id=702): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000100)={0x3, @vbi={0x26, 0x6, 0xc6, 0x32314d59, [0x8, 0x3], [0x26, 0x1], 0x1}}) ioctl$RTC_AIE_ON(r0, 0x7001) socket$nl_route(0x10, 0x3, 0x0) 33.357240835s ago: executing program 6 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 32.080843905s ago: executing program 3 (id=705): r0 = openat$dsp(0xffffff9c, 0x0, 0x102, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) r2 = gettid() syz_open_procfs$pagemap(r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) ftruncate(0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x11, 0x0, 0x3}, 0x2c) 31.889220387s ago: executing program 1 (id=706): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x2a44, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, @void, @value, @void, @value}, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5, 0x2}, 0x20) socket$inet6(0xa, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 31.214008032s ago: executing program 3 (id=707): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 30.934525543s ago: executing program 1 (id=708): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 29.910671825s ago: executing program 1 (id=710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r5, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) 23.033196333s ago: executing program 34 (id=694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffd49) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r0}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2d3}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$hiddev(&(0x7f00000000c0), 0x100000000, 0x8c00) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 21.876661116s ago: executing program 2 (id=716): fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 20.963779891s ago: executing program 2 (id=717): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x2, 0x300) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x15, 0x5, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x2) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000001200)) recvmmsg(r3, &(0x7f0000001040), 0x0, 0x2b90760db42614d4, 0x0) pwritev(r3, &(0x7f00000008c0)=[{&(0x7f00000000c0)="13ea3a49736e461fefc29c57fd8e6f2f263bfe294c8962c2a89adf1ab4a021cb461b5f178bd703f3552d7c8a886a9b2f2623ab0c5c7e2f4bfbb152d91b958555efe1d5a98dcff7d8a232e2db8a69eb591c603d1253233b6495e80d", 0x5b}, {0x0}, {&(0x7f0000000140)="12f62ca8769b4109c490e2e06aa8772466388cf4eecfa1aea3cc2336b26218039c8bdd110042681b64aff635a66751f840bbb51ce48046b76bc7eea86613b5407e43e2617d", 0x45}, {&(0x7f0000000480)="55c5768c27c7a1e8706106c12adcab16c711d972043b996bbeb141fe", 0x1c}, {&(0x7f00000004c0)="aa8c6c8fea85b316c1b82ec314ef83c6f6c557bb3c412382c7612dde0ac2b7c9f57658a71d8218afe4815811b653c0b424d5c2e25a39c929ee0e6020f647085ce730822f44bfe082eb9e9198c8d3e2cf8ff36b07d6c19482e8db84a8180e1c1b039e19402fb815298fa72cb9a58d86bc67422d9d5804dddfda0a8171b229faebf014b198a4d9c3a677cd46cfaff57a3680838ed4323e5ba4da3654ad7f63bad1c2322111245064b22a9444", 0xab}, {&(0x7f00000005c0)="917755f8ff982c46b4705e59171683c7da39432b34e83eaad1c1c664c69d7ccc53ceb0818fab50874a775aac56c429e54b9bfdfb5b9b4f349922cb068aae317092abc891f9af6b4a492a8652274caa9f25d4e208d48edaa0c687ba4bf3", 0x5d}, {&(0x7f0000000640)="abbfb2ed85d8eb6640e615f027aa8138189d04d4622dbb4322b78cc608a4bde5a3b4820b6e9e33496a43c17d198f48425e46445a2fac5cc895e1e70d9f26c7b7ca665f6f7b704b5fa90eebc6bf40a6045f7051fb2c768aa107c20154364e2f260fbe6c499c31f7bde3b026a5eb2ac9875290db2d8742c0eca3e1429035febe89975a3c8922a32828480d0421147bebcdd56c0a803dba3b2265a3b984498ccd2578f571b9cecfe1979231d4c1a368e58495aaeba266e02fddb3a0b780cbb84dffae9a04f8", 0xc4}, {&(0x7f00000007c0)="922c863730844837098798e0a6ae3721ebc9543cea8e372ed25d6f0136884f8a1ed647c6972ac06094899547536e0aafadb3658e35495cf211f01e159ebdf0725be77ef381399b3b597aec3df5d0e6558ddb5d3cda67b4d148d9000e66db245797ef397f9ea07ba8f97e0e72334c6c5efa0d15d02e0d0415fc5820ff721d449be08e8ba63fc8dc68ea3a92c78c4e853202299e85436edcc3beb343f1a90ce3c94a562c97c3379188f84ffdcdcd699278ff1acbe1a9d52fe9a90a3e2e6dc64f16a3bb33d5ae970cc0520c8036c0323ab14543", 0xd2}, {&(0x7f0000001b00)="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", 0xfbf}], 0x9, 0xd, 0x1) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) 19.97770655s ago: executing program 2 (id=718): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000110000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @private}, 0x4}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) 19.073296829s ago: executing program 2 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev2(r2, 0x0, 0x0, 0x5, 0xa, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040480}, 0x4000000) mq_open(&(0x7f0000000140)='[#,)\x00', 0x841, 0x100, &(0x7f0000000180)={0xa9, 0xff, 0xfffff8de, 0x5}) write$sndseq(0xffffffffffffffff, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x54) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r6 = gettid() rt_sigsuspend(&(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) tkill(r6, 0x16) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 18.039961767s ago: executing program 35 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 16.025531055s ago: executing program 36 (id=707): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 16.0037105s ago: executing program 2 (id=722): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bind$bt_hci(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0xc, 0x0, &(0x7f0000000280)) getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, 0x0, 0x0) 15.127285875s ago: executing program 2 (id=723): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x0) 14.425187389s ago: executing program 37 (id=710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r5, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) 0s ago: executing program 38 (id=723): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x0) kernel console output (not intermixed with test programs): r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.008422][ T24] usb 5-1: USB disconnect, device number 2 [ 82.060794][ T6049] loop7: detected capacity change from 0 to 16384 [ 82.073405][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 82.082438][ T30] audit: type=1400 audit(1745455978.203:185): avc: denied { write } for pid=6032 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.191050][ T30] audit: type=1400 audit(1745455978.203:186): avc: denied { nlmsg_write } for pid=6032 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.243709][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.303246][ T6054] loop7: detected capacity change from 16384 to 0 [ 82.339167][ C1] I/O error, dev loop7, sector 7432 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 82.942552][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.977289][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 83.010978][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.060604][ T5917] usb 1-1: config 0 descriptor?? [ 83.087162][ T5917] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.096184][ T5917] usb 1-1: MIDIStreaming interface descriptor not found [ 83.889628][ T92] usb 1-1: USB disconnect, device number 2 [ 84.030548][ T6076] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 84.120752][ T6080] syz.2.40 (6080): attempted to duplicate a private mapping with mremap. This is not supported. [ 84.184099][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.220456][ T6076] qnx6: wrong signature (magic) in superblock #1. [ 84.233802][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 84.255742][ T6083] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 84.355345][ T6076] qnx6: unable to read the first superblock [ 88.579833][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 88.579848][ T30] audit: type=1400 audit(1745455984.903:190): avc: denied { create } for pid=6115 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.670686][ T30] audit: type=1400 audit(1745455984.943:191): avc: denied { setopt } for pid=6115 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.790283][ T30] audit: type=1400 audit(1745455985.113:192): avc: denied { create } for pid=6117 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.125694][ T30] audit: type=1400 audit(1745455986.453:193): avc: denied { name_bind } for pid=6133 comm="syz.4.55" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.447690][ T30] audit: type=1400 audit(1745455986.773:194): avc: denied { ioctl } for pid=6142 comm="syz.1.56" path="socket:[8592]" dev="sockfs" ino=8592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.970731][ T30] audit: type=1400 audit(1745455987.013:195): avc: denied { kexec_image_load } for pid=6144 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 92.053216][ T30] audit: type=1400 audit(1745455988.373:196): avc: denied { mount } for pid=6155 comm="syz.4.61" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 93.213057][ T30] audit: type=1400 audit(1745455989.513:197): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 93.333433][ T30] audit: type=1400 audit(1745455989.663:198): avc: denied { create } for pid=6164 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.238760][ T30] audit: type=1400 audit(1745455989.883:199): avc: denied { write } for pid=6164 comm="syz.0.64" name="kcm" dev="proc" ino=4026533278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 94.597849][ T30] audit: type=1400 audit(1745455990.923:200): avc: denied { ioctl } for pid=6172 comm="syz.3.65" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.723301][ T6178] capability: warning: `syz.0.66' uses 32-bit capabilities (legacy support in use) [ 94.853140][ T6181] tipc: Failed to remove unknown binding: 66,1,1/0:2755235636/2755235638 [ 94.863845][ T30] audit: type=1400 audit(1745455991.173:201): avc: denied { bind } for pid=6174 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.151164][ T30] audit: type=1400 audit(1745455991.473:202): avc: denied { mount } for pid=6182 comm="syz.3.68" name="/" dev="autofs" ino=8720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 95.317507][ T6176] syz_tun: entered allmulticast mode [ 95.328847][ T30] audit: type=1400 audit(1745455991.653:203): avc: denied { read } for pid=6182 comm="syz.3.68" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.374755][ T30] audit: type=1400 audit(1745455991.653:204): avc: denied { open } for pid=6182 comm="syz.3.68" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.403164][ T30] audit: type=1400 audit(1745455991.653:205): avc: denied { ioctl } for pid=6182 comm="syz.3.68" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.662157][ T30] audit: type=1400 audit(1745455991.703:206): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 96.176552][ T30] audit: type=1400 audit(1745455992.503:207): avc: denied { create } for pid=6197 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.039156][ T30] audit: type=1400 audit(1745455994.153:208): avc: denied { name_connect } for pid=6214 comm="syz.3.73" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 99.280266][ T6233] process 'syz.3.77' launched './file0' with NULL argv: empty string added [ 99.741102][ T30] audit: type=1400 audit(1745455994.503:209): avc: denied { write } for pid=6210 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.439455][ T30] audit: type=1400 audit(1745455995.473:210): avc: denied { mount } for pid=6227 comm="syz.2.76" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.467928][ T30] audit: type=1400 audit(1745455995.603:211): avc: denied { execute } for pid=6226 comm="syz.3.77" name="file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.525523][ T30] audit: type=1400 audit(1745455995.613:212): avc: denied { execute_no_trans } for pid=6226 comm="syz.3.77" path="/19/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.556369][ T30] audit: type=1400 audit(1745455996.863:213): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.617919][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'. [ 100.697806][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'. [ 100.726461][ T30] audit: type=1400 audit(1745455996.973:214): avc: denied { read write } for pid=6237 comm="syz.3.79" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 100.750871][ T30] audit: type=1400 audit(1745455996.973:215): avc: denied { open } for pid=6237 comm="syz.3.79" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 100.779896][ T30] audit: type=1400 audit(1745455997.013:216): avc: denied { mount } for pid=6240 comm="syz.0.81" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.836521][ T30] audit: type=1400 audit(1745455997.153:217): avc: denied { read write } for pid=6245 comm="syz.2.83" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 100.929158][ T30] audit: type=1400 audit(1745455997.153:218): avc: denied { open } for pid=6245 comm="syz.2.83" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.344304][ T6279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.437693][ T6274] veth3: entered promiscuous mode [ 104.452097][ T6274] veth3: entered allmulticast mode [ 105.133844][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 105.133858][ T30] audit: type=1400 audit(1745456001.463:228): avc: denied { bind } for pid=6287 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.172144][ T30] audit: type=1400 audit(1745456001.463:229): avc: denied { read } for pid=6286 comm="syz.1.95" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.195182][ T30] audit: type=1400 audit(1745456001.463:230): avc: denied { open } for pid=6286 comm="syz.1.95" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.249311][ T30] audit: type=1400 audit(1745456001.493:231): avc: denied { getopt } for pid=6287 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.354749][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.394078][ T30] audit: type=1400 audit(1745456001.493:232): avc: denied { ioctl } for pid=6286 comm="syz.1.95" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.461759][ T30] audit: type=1400 audit(1745456001.653:233): avc: denied { create } for pid=6292 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.808018][ T30] audit: type=1400 audit(1745456001.663:234): avc: denied { connect } for pid=6292 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.903412][ T30] audit: type=1400 audit(1745456001.773:235): avc: denied { write } for pid=6287 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.060682][ T30] audit: type=1400 audit(1745456002.253:236): avc: denied { create } for pid=6304 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.806683][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.833386][ T30] audit: type=1400 audit(1745456002.273:237): avc: denied { mount } for pid=6300 comm="syz.0.99" name="/" dev="ramfs" ino=9245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.522887][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 107.534570][ T5880] usb 5-1: config 0 has an invalid interface number: 192 but max is 0 [ 107.543272][ T5880] usb 5-1: config 0 has no interface number 0 [ 107.554217][ T5880] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=f1.46 [ 107.941969][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.972527][ T5880] usb 5-1: Product: syz [ 107.977485][ T5880] usb 5-1: Manufacturer: syz [ 107.984427][ T5880] usb 5-1: SerialNumber: syz [ 107.994680][ T5880] usb 5-1: config 0 descriptor?? [ 108.009963][ T5880] ems_usb 5-1:0.192 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 108.107379][ T5880] ems_usb 5-1:0.192: probe with driver ems_usb failed with error -22 [ 109.097342][ T5880] usb 5-1: USB disconnect, device number 3 [ 110.235615][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.483549][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 111.959904][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.968573][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.979097][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.988200][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.999099][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.003507][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.012734][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 112.012744][ T30] audit: type=1400 audit(1745456008.333:247): avc: denied { create } for pid=6345 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.095164][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.116735][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.864882][ T10] usb 3-1: can't set config #1, error -71 [ 112.874267][ T6361] xt_hashlimit: max too large, truncated to 1048576 [ 112.904974][ T10] usb 3-1: USB disconnect, device number 2 [ 112.925621][ T6361] Cannot find set identified by id 0 to match [ 112.931815][ T30] audit: type=1400 audit(1745456009.193:248): avc: denied { create } for pid=6358 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.925704][ T30] audit: type=1400 audit(1745456009.563:249): avc: denied { write } for pid=6360 comm="syz.0.116" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.611855][ T30] audit: type=1400 audit(1745456010.913:250): avc: denied { name_connect } for pid=6382 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 115.607459][ T30] audit: type=1400 audit(1745456011.013:251): avc: denied { read } for pid=6382 comm="syz.1.118" laddr=::ac14:14aa lport=33679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.632233][ T30] audit: type=1326 audit(1745456011.853:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3dd38e969 code=0x7fc00000 [ 115.761295][ T30] audit: type=1400 audit(1745456012.073:253): avc: denied { read write } for pid=6389 comm="syz.0.120" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.784787][ T30] audit: type=1400 audit(1745456012.073:254): avc: denied { open } for pid=6389 comm="syz.0.120" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.544047][ T30] audit: type=1400 audit(1745456012.463:255): avc: denied { write } for pid=6399 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.021662][ T30] audit: type=1400 audit(1745456012.463:256): avc: denied { nlmsg_read } for pid=6399 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.119414][ T6408] Zero length message leads to an empty skb [ 117.599508][ T6418] futex_wake_op: syz.4.127 tries to shift op by -1; fix this program [ 118.562299][ T6423] lo: entered promiscuous mode [ 118.568261][ T6423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.264867][ T30] audit: type=1400 audit(1745456015.413:257): avc: denied { setopt } for pid=6424 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.585135][ T30] audit: type=1400 audit(1745456016.913:258): avc: denied { create } for pid=6441 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.609026][ T30] audit: type=1400 audit(1745456016.933:259): avc: denied { bind } for pid=6441 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.629682][ T30] audit: type=1400 audit(1745456016.933:260): avc: denied { listen } for pid=6441 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.650333][ T30] audit: type=1400 audit(1745456016.933:261): avc: denied { read } for pid=6441 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.701847][ T30] audit: type=1400 audit(1745456017.023:262): avc: denied { relabelfrom } for pid=6439 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.931969][ T30] audit: type=1400 audit(1745456017.033:263): avc: denied { relabelto } for pid=6439 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.963255][ T6445] syzkaller0: create flow: hash 1858576306 index 1 [ 121.665732][ T6439] syzkaller0: delete flow: hash 1858576306 index 1 [ 121.797767][ T30] audit: type=1400 audit(1745456018.113:264): avc: denied { write } for pid=6448 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.824553][ T30] audit: type=1400 audit(1745456021.143:265): avc: denied { mount } for pid=6472 comm="syz.3.142" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 124.876925][ T6482] ======================================================= [ 124.876925][ T6482] WARNING: The mand mount option has been deprecated and [ 124.876925][ T6482] and is ignored by this kernel. Remove the mand [ 124.876925][ T6482] option from the mount to silence this warning. [ 124.876925][ T6482] ======================================================= [ 125.616935][ T30] audit: type=1400 audit(1745456021.183:266): avc: denied { remount } for pid=6472 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.674473][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.710563][ T30] audit: type=1400 audit(1745456021.803:267): avc: denied { write } for pid=6478 comm="syz.2.143" path="socket:[10257]" dev="sockfs" ino=10257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.119422][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 126.770253][ T30] audit: type=1400 audit(1745456023.093:268): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.866166][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 127.071349][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 127.091929][ T30] audit: type=1400 audit(1745456023.413:269): avc: denied { getopt } for pid=6499 comm="syz.2.147" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.122612][ T6502] sctp: [Deprecated]: syz.2.147 (pid 6502) Use of int in maxseg socket option. [ 127.122612][ T6502] Use struct sctp_assoc_value instead [ 127.382102][ T92] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 127.409615][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.426245][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 127.439209][ T24] usb 2-1: can't read configurations, error -71 [ 127.663281][ T92] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 127.671621][ T92] usb 3-1: config 7 has no interface number 0 [ 127.694171][ T92] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 127.706811][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.715615][ T92] usb 3-1: Product: syz [ 127.719811][ T92] usb 3-1: Manufacturer: syz [ 128.126738][ T92] usb 3-1: SerialNumber: syz [ 128.483862][ T6500] netlink: 'syz.2.147': attribute type 21 has an invalid length. [ 128.491649][ T6500] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.539246][ T6500] IPv6: Can't replace route, no match found [ 128.838194][ T92] as10x_usb: device has been detected [ 128.847156][ T92] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 128.884190][ T92] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 128.939887][ T30] audit: type=1400 audit(1745456025.263:270): avc: denied { firmware_load } for pid=92 comm="kworker/1:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 128.969174][ T92] as10x_usb: error during firmware upload part1 [ 128.987001][ T92] Registered device Elgato EyeTV DTT Deluxe [ 128.995522][ T92] usb 3-1: USB disconnect, device number 3 [ 129.737894][ T92] Unregistered device Elgato EyeTV DTT Deluxe [ 129.940290][ T92] as10x_usb: device has been disconnected [ 130.166179][ T30] audit: type=1400 audit(1745456026.473:271): avc: denied { write } for pid=6520 comm="syz.2.154" path="socket:[10545]" dev="sockfs" ino=10545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.466875][ T30] audit: type=1400 audit(1745456026.793:272): avc: denied { bind } for pid=6531 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.972127][ T30] audit: type=1400 audit(1745456026.793:273): avc: denied { listen } for pid=6531 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.071938][ T30] audit: type=1400 audit(1745456026.793:274): avc: denied { write } for pid=6531 comm="syz.1.155" path="socket:[9579]" dev="sockfs" ino=9579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.259632][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 131.277880][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 133.262377][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.269467][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.276397][ T30] audit: type=1400 audit(1745456029.513:275): avc: denied { getopt } for pid=6554 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.502788][ T30] audit: type=1400 audit(1745456030.703:276): avc: denied { read write } for pid=6571 comm="syz.2.166" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.606699][ T6576] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.978441][ T30] audit: type=1400 audit(1745456030.703:277): avc: denied { open } for pid=6571 comm="syz.2.166" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.133178][ T30] audit: type=1400 audit(1745456030.933:278): avc: denied { ioctl } for pid=6571 comm="syz.2.166" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.707780][ T30] audit: type=1400 audit(1745456032.243:279): avc: denied { mount } for pid=6577 comm="syz.3.168" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.745899][ T30] audit: type=1400 audit(1745456032.243:280): avc: denied { mounton } for pid=6577 comm="syz.3.168" path="/40/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 137.263250][ T30] audit: type=1400 audit(1745456032.243:281): avc: denied { mount } for pid=6577 comm="syz.3.168" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 137.304071][ T30] audit: type=1400 audit(1745456033.623:282): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 137.335768][ T30] audit: type=1400 audit(1745456033.663:283): avc: denied { create } for pid=6594 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.742785][ T30] audit: type=1400 audit(1745456034.053:284): avc: denied { read } for pid=6594 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.017464][ T92] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.178939][ T6608] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 138.933283][ T92] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 139.131999][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.150530][ T92] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 139.163112][ T92] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 139.174655][ T92] usb 2-1: Manufacturer: syz [ 139.547721][ T92] usb 2-1: config 0 descriptor?? [ 139.909208][ T30] audit: type=1400 audit(1745456036.233:285): avc: denied { watch } for pid=6616 comm="syz.3.177" path="/42" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.039397][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 140.103416][ T6620] bridge_slave_1: left allmulticast mode [ 140.114750][ T30] audit: type=1400 audit(1745456036.233:286): avc: denied { watch_sb } for pid=6616 comm="syz.3.177" path="/42" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.133570][ T6620] bridge_slave_1: left promiscuous mode [ 140.153898][ T92] rc_core: IR keymap rc-hauppauge not found [ 140.159822][ T92] Registered IR keymap rc-empty [ 140.190870][ T92] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 140.292164][ T30] audit: type=1400 audit(1745456036.513:287): avc: denied { create } for pid=6627 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.322647][ T92] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 140.347453][ T30] audit: type=1400 audit(1745456036.563:288): avc: denied { read } for pid=6625 comm="syz.0.179" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.382268][ T92] usb 2-1: USB disconnect, device number 4 [ 140.395531][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.494591][ T6620] bridge_slave_0: left allmulticast mode [ 140.500892][ T6620] bridge_slave_0: left promiscuous mode [ 140.573943][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.845087][ T6655] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 142.865152][ T6629] syz_tun: left allmulticast mode [ 144.970603][ T6660] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 145.024378][ T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.037203][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.123474][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 145.123488][ T30] audit: type=1400 audit(1745456041.453:291): avc: denied { create } for pid=6670 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 145.152825][ T6023] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.239861][ T6674] netlink: 'syz.3.190': attribute type 2 has an invalid length. [ 146.942002][ T30] audit: type=1400 audit(1745456043.173:292): avc: denied { write } for pid=6676 comm="syz.2.192" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.651317][ T5833] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 148.363110][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.398350][ T30] audit: type=1400 audit(1745456044.723:293): avc: denied { append } for pid=6702 comm="syz.0.198" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.482898][ T5842] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 148.493124][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: kworker/u9:5 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 148.493141][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.493149][ T5842] Workqueue: hci0 hci_rx_work [ 148.493165][ T5842] Call Trace: [ 148.493170][ T5842] [ 148.493175][ T5842] dump_stack_lvl+0x16c/0x1f0 [ 148.493192][ T5842] sysfs_warn_dup+0x7f/0xa0 [ 148.493203][ T5842] sysfs_create_dir_ns+0x24b/0x2b0 [ 148.493214][ T5842] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 148.493226][ T5842] ? find_held_lock+0x2b/0x80 [ 148.493243][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 148.493257][ T5842] kobject_add_internal+0x2c4/0x9b0 [ 148.493276][ T5842] kobject_add+0x16e/0x240 [ 148.493292][ T5842] ? __pfx_kobject_add+0x10/0x10 [ 148.493309][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 148.493322][ T5842] ? kobject_put+0xab/0x5a0 [ 148.493341][ T5842] device_add+0x288/0x1a70 [ 148.493352][ T5842] ? __pfx_dev_set_name+0x10/0x10 [ 148.493363][ T5842] ? __pfx_device_add+0x10/0x10 [ 148.493373][ T5842] ? mgmt_send_event_skb+0x2fb/0x460 [ 148.493387][ T5842] hci_conn_add_sysfs+0x17e/0x230 [ 148.493400][ T5842] le_conn_complete_evt+0x1075/0x1d70 [ 148.493414][ T5842] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 148.493424][ T5842] ? hci_event_packet+0x43c/0x1190 [ 148.493438][ T5842] hci_le_conn_complete_evt+0x23c/0x370 [ 148.493451][ T5842] hci_le_meta_evt+0x2f3/0x5e0 [ 148.493462][ T5842] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 148.493475][ T5842] hci_event_packet+0x669/0x1190 [ 148.493485][ T5842] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 148.493496][ T5842] ? __pfx_hci_event_packet+0x10/0x10 [ 148.493508][ T5842] ? kcov_remote_start+0x3c9/0x6d0 [ 148.493519][ T5842] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.493535][ T5842] hci_rx_work+0x2c5/0x16b0 [ 148.493547][ T5842] ? rcu_is_watching+0x12/0xc0 [ 148.493561][ T5842] process_one_work+0x9cc/0x1b70 [ 148.493579][ T5842] ? __pfx_process_one_work+0x10/0x10 [ 148.493595][ T5842] ? assign_work+0x1a0/0x250 [ 148.493607][ T5842] worker_thread+0x6c8/0xf10 [ 148.493622][ T5842] ? __kthread_parkme+0x19e/0x250 [ 148.493639][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 148.493650][ T5842] kthread+0x3c2/0x780 [ 148.493661][ T5842] ? __pfx_kthread+0x10/0x10 [ 148.493670][ T5842] ? __pfx_kthread+0x10/0x10 [ 148.493680][ T5842] ? __pfx_kthread+0x10/0x10 [ 148.493689][ T5842] ? __pfx_kthread+0x10/0x10 [ 148.493698][ T5842] ? rcu_is_watching+0x12/0xc0 [ 148.493711][ T5842] ? __pfx_kthread+0x10/0x10 [ 148.493721][ T5842] ret_from_fork+0x45/0x80 [ 148.493733][ T5842] ? __pfx_kthread+0x10/0x10 [ 148.493743][ T5842] ret_from_fork_asm+0x1a/0x30 [ 148.493766][ T5842] [ 148.493782][ T5842] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.581952][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.585964][ T5842] Bluetooth: hci0: failed to register connection device [ 148.702229][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.488758][ T5833] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 149.491918][ T30] audit: type=1400 audit(1745456044.723:294): avc: denied { listen } for pid=6702 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.497874][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.525611][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 149.549990][ T30] audit: type=1400 audit(1745456044.723:295): avc: denied { accept } for pid=6702 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.572787][ T30] audit: type=1400 audit(1745456045.653:296): avc: denied { write } for pid=6703 comm="syz.4.197" name="attr" dev="proc" ino=9805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 149.596851][ T30] audit: type=1400 audit(1745456045.653:297): avc: denied { add_name } for pid=6703 comm="syz.4.197" name="fscreate" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 149.602239][ T5882] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 149.652201][ T30] audit: type=1400 audit(1745456045.653:298): avc: denied { create } for pid=6703 comm="syz.4.197" name="fscreate" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 149.683230][ T5833] usb 3-1: config 0 descriptor?? [ 149.705028][ T5833] usb 3-1: can't set config #0, error -71 [ 149.713558][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.762135][ T5833] usb 3-1: USB disconnect, device number 4 [ 149.781564][ T5882] usb 4-1: Product: syz [ 149.811846][ T5882] usb 4-1: Manufacturer: syz [ 149.811924][ T30] audit: type=1400 audit(1745456045.653:299): avc: denied { associate } for pid=6703 comm="syz.4.197" name="fscreate" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.921321][ T5882] usb 4-1: SerialNumber: syz [ 149.961251][ T5882] usb 4-1: config 0 descriptor?? [ 150.286956][ T5882] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 150.800547][ T5882] usb 4-1: USB disconnect, device number 2 [ 151.249500][ T30] audit: type=1400 audit(1745456047.383:300): avc: denied { getopt } for pid=6721 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.442412][ T30] audit: type=1400 audit(1745456047.763:301): avc: denied { read write } for pid=6725 comm="syz.1.206" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.448619][ T6726] xt_hashlimit: max too large, truncated to 1048576 [ 151.498707][ T30] audit: type=1400 audit(1745456047.763:302): avc: denied { open } for pid=6725 comm="syz.1.206" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.547231][ T30] audit: type=1400 audit(1745456047.773:303): avc: denied { setopt } for pid=6725 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.087503][ T6735] openvswitch: netlink: Message has 3 unknown bytes. [ 152.094332][ T6735] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.121639][ T30] audit: type=1400 audit(1745456048.433:304): avc: denied { rename } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.201373][ T6737] Cannot find add_set index 0 as target [ 152.506818][ T30] audit: type=1400 audit(1745456048.443:305): avc: denied { unlink } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.530866][ T30] audit: type=1400 audit(1745456048.443:306): avc: denied { create } for pid=5180 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.966579][ T30] audit: type=1400 audit(1745456049.293:307): avc: denied { ioctl } for pid=6742 comm="syz.3.211" path="/dev/radio5" dev="devtmpfs" ino=982 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 153.597860][ T30] audit: type=1400 audit(1745456049.923:308): avc: denied { mount } for pid=6751 comm="syz.2.213" name="/" dev="hugetlbfs" ino=10896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 154.514106][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.705052][ T30] audit: type=1400 audit(1745456051.023:309): avc: denied { create } for pid=6767 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.012039][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.374788][ T5879] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 155.384853][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.402014][ T5879] usb 5-1: Product: syz [ 155.426230][ T5879] usb 5-1: Manufacturer: syz [ 155.430853][ T5879] usb 5-1: SerialNumber: syz [ 155.600072][ T5879] usb 5-1: config 0 descriptor?? [ 156.130277][ T5879] comedi comedi0: Wrong number of endpoints [ 156.136728][ T5879] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 156.152295][ T5840] udevd[5840]: setting mode of /dev/comedi0 to 020600 failed: No such file or directory [ 156.188297][ T5840] udevd[5840]: setting owner of /dev/comedi0 to uid=0, gid=0 failed: No such file or directory [ 156.249696][ T6790] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 156.338111][ T5879] usb 5-1: USB disconnect, device number 4 [ 158.972390][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 158.972406][ T30] audit: type=1400 audit(1745456055.293:324): avc: denied { write } for pid=6809 comm="syz.2.229" path="socket:[10980]" dev="sockfs" ino=10980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 159.001811][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.617495][ T30] audit: type=1400 audit(1745456061.943:325): avc: denied { write } for pid=6863 comm="syz.1.246" path="socket:[11107]" dev="sockfs" ino=11107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.769243][ T6882] program syz.0.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.778896][ T6882] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.995062][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.120507][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.268040][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 166.287140][ T6886] ipvlan2: entered promiscuous mode [ 166.296357][ T6886] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.895635][ T6886] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.274338][ T30] audit: type=1400 audit(1745456063.503:326): avc: denied { bind } for pid=6894 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 167.432216][ T30] audit: type=1400 audit(1745456063.603:327): avc: denied { name_bind } for pid=6894 comm="syz.4.256" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 167.453024][ T30] audit: type=1400 audit(1745456063.603:328): avc: denied { node_bind } for pid=6894 comm="syz.4.256" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 167.500518][ T30] audit: type=1400 audit(1745456063.753:329): avc: denied { listen } for pid=6894 comm="syz.4.256" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 167.523889][ T30] audit: type=1400 audit(1745456063.813:330): avc: denied { connect } for pid=6894 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 167.813216][ T30] audit: type=1400 audit(1745456063.813:331): avc: denied { name_connect } for pid=6894 comm="syz.4.256" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 167.834372][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.146804][ T30] audit: type=1400 audit(1745456063.823:332): avc: denied { accept } for pid=6894 comm="syz.4.256" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 168.167132][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.177777][ T30] audit: type=1400 audit(1745456063.823:333): avc: denied { read } for pid=6894 comm="syz.4.256" laddr=127.0.0.1 lport=45880 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 168.201769][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.378321][ T30] audit: type=1400 audit(1745456064.443:334): avc: denied { write } for pid=6894 comm="syz.4.256" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=45880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 168.403696][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.429659][ T6894] dccp_close: ABORT with 28 bytes unread [ 168.712794][ T6908] Cannot find del_set index 4 as target [ 168.724031][ T6908] bridge0: port 3(netdevsim2) entered blocking state [ 168.732033][ T6908] bridge0: port 3(netdevsim2) entered disabled state [ 168.742314][ T6908] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 168.759370][ T6908] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 168.769039][ T6908] bridge0: port 3(netdevsim2) entered blocking state [ 168.776031][ T6908] bridge0: port 3(netdevsim2) entered forwarding state [ 169.139411][ T6916] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 169.286411][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.666772][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.861034][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.872583][ T5882] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 169.883154][ T5882] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.892893][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.932791][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.058490][ T6926] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 170.119444][ T5882] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 170.119756][ T6926] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 170.193900][ T6926] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 170.304917][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.419455][ T6910] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 170.470976][ T6910] bond1: entered promiscuous mode [ 170.476611][ T6910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.050121][ T6937] bond1: (slave bridge0): making interface the new active one [ 171.065525][ T6937] bridge0: entered promiscuous mode [ 171.081258][ T6937] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 171.155591][ T5882] usb 3-1: USB disconnect, device number 5 [ 172.945553][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 172.945584][ T30] audit: type=1400 audit(1745456069.243:341): avc: denied { create } for pid=6953 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.697309][ T30] audit: type=1400 audit(1745456069.263:342): avc: denied { ioctl } for pid=6953 comm="syz.4.273" path="socket:[11319]" dev="sockfs" ino=11319 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.740629][ T30] audit: type=1400 audit(1745456072.003:343): avc: denied { create } for pid=6981 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.007407][ T30] audit: type=1400 audit(1745456072.013:344): avc: denied { write } for pid=6981 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 177.313180][ T30] audit: type=1400 audit(1745456072.013:345): avc: denied { read } for pid=6981 comm="syz.1.280" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.026623][ T6977] delete_channel: no stack [ 182.073287][ T30] audit: type=1400 audit(1745456078.133:346): avc: denied { setopt } for pid=7023 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.830560][ T30] audit: type=1400 audit(1745456079.143:347): avc: denied { connect } for pid=7042 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.018732][ T30] audit: type=1400 audit(1745456079.273:348): avc: denied { write } for pid=7042 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.871967][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 185.878857][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 185.894521][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 185.900982][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 185.908952][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 187.975580][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 190.637071][ T30] audit: type=1400 audit(1745456086.953:349): avc: denied { setopt } for pid=7117 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 191.922312][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.130363][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 192.391959][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.573037][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.642244][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.658627][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 192.668807][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.683725][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.696853][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.735902][ T10] usb 2-1: Manufacturer: syz [ 192.748798][ T10] usb 2-1: config 0 descriptor?? [ 194.240932][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247354][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.312230][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 194.462001][ T10] rc_core: IR keymap rc-hauppauge not found [ 194.467937][ T10] Registered IR keymap rc-empty [ 194.477791][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.503271][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.565352][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 194.703827][ T7163] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 195.167869][ T30] audit: type=1400 audit(1745456091.013:350): avc: denied { ioctl } for pid=7157 comm="syz.0.324" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 195.177405][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 196.107521][ T30] audit: type=1400 audit(1745456092.433:351): avc: denied { setopt } for pid=7168 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.136637][ T7169] syz.4.328 uses obsolete (PF_INET,SOCK_PACKET) [ 196.282147][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.322047][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.832565][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.962473][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.992396][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.510371][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.542035][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.562239][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.591986][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.600103][ T7186] lo: entered allmulticast mode [ 197.612404][ T7186] dvmrp1: entered allmulticast mode [ 197.620536][ T7185] lo: left allmulticast mode [ 197.625813][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.657517][ T55] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 197.843682][ T7190] xt_connbytes: Forcing CT accounting to be enabled [ 197.850611][ T7190] Cannot find add_set index 0 as target [ 198.088064][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 198.622929][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.699024][ T10] usb 2-1: USB disconnect, device number 5 [ 199.517243][ T7199] Unknown options in mask 5 [ 203.887541][ T7235] Bluetooth: MGMT ver 1.23 [ 203.898827][ T30] audit: type=1400 audit(1745456100.223:352): avc: denied { ioctl } for pid=7222 comm="syz.1.342" path="socket:[12553]" dev="sockfs" ino=12553 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 204.000733][ T30] audit: type=1400 audit(1745456100.323:353): avc: denied { getopt } for pid=7236 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.536266][ T7242] IPVS: stopping backup sync thread 7243 ... [ 204.536517][ T7243] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 204.590634][ T30] audit: type=1400 audit(1745456100.913:354): avc: denied { search } for pid=5492 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.640250][ T30] audit: type=1400 audit(1745456100.913:355): avc: denied { read } for pid=5492 comm="dhcpcd" name="n100" dev="tmpfs" ino=2940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.684395][ T30] audit: type=1400 audit(1745456100.913:356): avc: denied { open } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 204.718530][ T30] audit: type=1400 audit(1745456100.913:357): avc: denied { getattr } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.224361][ T30] audit: type=1400 audit(1745456101.543:358): avc: denied { read } for pid=7255 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.268433][ T30] audit: type=1400 audit(1745456101.543:359): avc: denied { open } for pid=7255 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.356382][ T55] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 205.364621][ T55] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 205.862085][ T30] audit: type=1400 audit(1745456101.543:360): avc: denied { getattr } for pid=7255 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.099289][ T30] audit: type=1326 audit(1745456102.163:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ae18e969 code=0x7ffc0000 [ 209.051876][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 209.051890][ T30] audit: type=1400 audit(1745456105.373:393): avc: denied { remove_name } for pid=7296 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.019106][ T30] audit: type=1400 audit(1745456105.413:394): avc: denied { unlink } for pid=7296 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.378148][ T30] audit: type=1400 audit(1745456106.703:395): avc: denied { create } for pid=7298 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 210.459043][ T30] audit: type=1400 audit(1745456106.723:396): avc: denied { write } for pid=7298 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 211.282915][ T30] audit: type=1800 audit(1745456107.193:397): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.362" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 211.461975][ T30] audit: type=1400 audit(1745456107.643:398): avc: denied { search } for pid=5492 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=12595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 211.538398][ T7322] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.551815][ T7323] netlink: 'syz.4.363': attribute type 13 has an invalid length. [ 212.495874][ T7328] overlayfs: overlapping lowerdir path [ 212.725253][ T30] audit: type=1400 audit(1745456109.043:399): avc: denied { listen } for pid=7324 comm="syz.3.366" lport=51873 faddr=::ffff:172.20.255.187 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.788259][ T7323] gretap0: refused to change device tx_queue_len [ 212.810465][ T7334] capability: warning: `syz.3.366' uses deprecated v2 capabilities in a way that may be insecure [ 213.024212][ T7323] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.113474][ T30] audit: type=1400 audit(1745456109.223:400): avc: denied { connect } for pid=7332 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.164928][ T7327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7327 comm=syz.3.366 [ 213.276113][ T30] audit: type=1400 audit(1745456109.603:401): avc: denied { read } for pid=7324 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 214.133933][ T30] audit: type=1326 audit(1745456110.423:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 214.200613][ T30] audit: type=1326 audit(1745456110.433:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 214.552663][ T7367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7367 comm=syz.3.372 [ 214.609447][ T30] audit: type=1326 audit(1745456110.433:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 214.639201][ T30] audit: type=1326 audit(1745456110.433:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 214.662399][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.139817][ T30] audit: type=1326 audit(1745456110.433:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 215.428729][ T30] audit: type=1326 audit(1745456110.433:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 215.768681][ T30] audit: type=1326 audit(1745456110.433:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 215.830498][ T30] audit: type=1326 audit(1745456110.563:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 215.927810][ T7390] trusted_key: syz.1.375 sent an empty control message without MSG_MORE. [ 216.001628][ T30] audit: type=1326 audit(1745456110.563:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 216.024834][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.495068][ T30] audit: type=1326 audit(1745456110.563:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5835f8e969 code=0x7ffc0000 [ 216.730271][ T7400] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.945735][ T7400] kvm: pic: non byte read [ 219.442010][ T5833] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.672013][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 219.700439][ T5833] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.737385][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.756418][ T5833] usb 5-1: Product: syz [ 219.819847][ T5833] usb 5-1: Manufacturer: syz [ 219.925364][ T5833] usb 5-1: SerialNumber: syz [ 219.973491][ T5833] usb 5-1: config 0 descriptor?? [ 220.182364][ T7457] fuse: Bad value for 'fd' [ 220.249543][ T5833] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.531575][ T7466] cifs: Unknown parameter 'mode' [ 221.209472][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 221.209491][ T30] audit: type=1400 audit(1745456117.513:430): avc: denied { override_creds } for pid=7454 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 222.585298][ T5833] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.671496][ T5833] usb 5-1: USB disconnect, device number 5 [ 223.796702][ T30] audit: type=1400 audit(1745456120.123:431): avc: denied { create } for pid=7490 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 225.237338][ T30] audit: type=1400 audit(1745456121.563:432): avc: denied { create } for pid=7500 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.641048][ T7504] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 225.658820][ T7504] ptrace attach of ""[7509] was attempted by "./syz-executor exec"[7504] [ 225.907379][ T30] audit: type=1400 audit(1745456121.563:433): avc: denied { bind } for pid=7500 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.926854][ T30] audit: type=1400 audit(1745456121.563:434): avc: denied { read } for pid=7500 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.946938][ T30] audit: type=1400 audit(1745456121.963:435): avc: denied { write } for pid=7500 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.966317][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 225.966632][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 226.081456][ T7507] ceph: No mds server is up or the cluster is laggy [ 226.114439][ T30] audit: type=1400 audit(1745456122.433:436): avc: denied { ioctl } for pid=7513 comm="syz.2.403" path="socket:[12246]" dev="sockfs" ino=12246 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.381567][ T7516] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 226.398888][ T30] audit: type=1400 audit(1745456122.703:437): avc: denied { load_policy } for pid=7515 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 226.435813][ T7516] SELinux: failed to load policy [ 227.472332][ T30] audit: type=1804 audit(1745456123.633:438): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.402" name="file0" dev="ramfs" ino=13052 res=1 errno=0 [ 229.471999][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 229.746608][ T24] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 229.756429][ T24] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 230.082433][ T24] usb 5-1: config 8 has no interface number 0 [ 230.348509][ T30] audit: type=1400 audit(1745456126.393:439): avc: denied { getopt } for pid=7548 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.375117][ T24] usb 5-1: config 8 interface 177 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 230.413213][ T24] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.506062][ T24] usb 5-1: config 8 interface 177 has no altsetting 0 [ 230.516153][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 230.525574][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.748106][ T24] usb 5-1: string descriptor 0 read error: -71 [ 230.758340][ T24] ir_toy 5-1:8.177: required endpoints not found [ 230.767226][ T24] usb 5-1: USB disconnect, device number 6 [ 231.042549][ T7560] mkiss: ax0: crc mode is auto. [ 232.443340][ T7568] lo speed is unknown, defaulting to 1000 [ 232.449623][ T7568] lo speed is unknown, defaulting to 1000 [ 232.461169][ T7568] lo speed is unknown, defaulting to 1000 [ 232.487612][ T7568] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 232.536768][ T7568] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 232.639120][ T7568] lo speed is unknown, defaulting to 1000 [ 232.653246][ T7568] lo speed is unknown, defaulting to 1000 [ 232.661258][ T7568] lo speed is unknown, defaulting to 1000 [ 232.675165][ T7568] lo speed is unknown, defaulting to 1000 [ 232.690268][ T7568] lo speed is unknown, defaulting to 1000 [ 234.653755][ T7584] infiniband syz!: set active [ 234.658836][ T7584] infiniband syz!: added team_slave_0 [ 234.666703][ T7584] syz!: rxe_create_cq: returned err = -12 [ 234.672837][ T7584] infiniband syz!: Couldn't create ib_mad CQ [ 234.678936][ T7584] infiniband syz!: Couldn't open port 1 [ 234.919203][ T7584] RDS/IB: syz!: added [ 234.923771][ T7584] smc: adding ib device syz! with port count 1 [ 234.982279][ T7584] smc: ib device syz! port 1 has pnetid [ 235.544668][ T7585] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 236.011972][ T30] audit: type=1400 audit(1745456132.303:440): avc: denied { sys_module } for pid=7581 comm="syz.4.420" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 239.165827][ T30] audit: type=1400 audit(1745456135.493:441): avc: denied { mount } for pid=7631 comm="syz.4.428" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.195718][ T7632] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.231686][ T30] audit: type=1400 audit(1745456135.523:442): avc: denied { unlink } for pid=7631 comm="syz.4.428" name="#1" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 239.319533][ T30] audit: type=1400 audit(1745456135.643:443): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.341965][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.463445][ T7637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7637 comm=syz.4.430 [ 239.516364][ T5879] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.534314][ T5879] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 239.555904][ T5879] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 239.582017][ T5879] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.614011][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.640568][ T5879] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.148963][ T5879] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 240.178185][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.356791][ T7627] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 240.897706][ T7627] bond2: entered promiscuous mode [ 240.908756][ T7627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.163524][ T7651] bond2: (slave bridge1): making interface the new active one [ 241.171086][ T7651] bridge1: entered promiscuous mode [ 241.178213][ T7651] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 241.438054][ T5881] usb 3-1: USB disconnect, device number 6 [ 242.367917][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.375152][ T7661] IPv6: NLM_F_CREATE should be set when creating new route [ 242.385553][ T7661] lo: entered allmulticast mode [ 242.395149][ T7661] tunl0: entered allmulticast mode [ 242.413233][ T7661] gre0: entered allmulticast mode [ 242.468326][ T7661] gretap0: entered allmulticast mode [ 242.497170][ T7661] erspan0: entered allmulticast mode [ 242.537139][ T7661] ip_vti0: entered allmulticast mode [ 242.550648][ T7661] ip6_vti0: entered allmulticast mode [ 242.575632][ T7661] sit0: entered allmulticast mode [ 242.646013][ T7661] ip6tnl0: entered allmulticast mode [ 242.660313][ T7661] ip6gre0: entered allmulticast mode [ 243.222149][ T7661] syz_tun: entered allmulticast mode [ 243.334053][ T7661] ip6gretap0: entered allmulticast mode [ 243.532566][ T7661] bridge0: port 3(netdevsim2) entered disabled state [ 243.539359][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.546915][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.855488][ T7661] bridge0: entered allmulticast mode [ 243.884961][ T7661] vcan0: entered allmulticast mode [ 243.899082][ T7661] bond0: entered allmulticast mode [ 243.912116][ T7661] bond_slave_0: entered allmulticast mode [ 243.922083][ T7661] bond_slave_1: entered allmulticast mode [ 243.936075][ T7661] team0: entered allmulticast mode [ 243.947112][ T7661] team_slave_0: entered allmulticast mode [ 243.964147][ T7661] team_slave_1: entered allmulticast mode [ 243.977837][ T7661] dummy0: entered allmulticast mode [ 243.989593][ T7661] nlmon0: entered allmulticast mode [ 243.996559][ T7661] caif0: entered allmulticast mode [ 244.002120][ T7661] batadv0: entered allmulticast mode [ 244.010137][ T7661] vxcan0: entered allmulticast mode [ 244.039240][ T7661] vxcan1: entered allmulticast mode [ 244.045063][ T7661] veth0: entered allmulticast mode [ 244.052140][ T7661] veth1: entered allmulticast mode [ 244.060731][ T7661] wg0: entered allmulticast mode [ 244.070621][ T7661] wg1: entered allmulticast mode [ 244.078189][ T7661] wg2: entered allmulticast mode [ 244.084980][ T7661] veth0_to_bridge: entered allmulticast mode [ 244.112947][ T7661] veth1_to_bridge: entered allmulticast mode [ 244.131714][ T7661] veth0_to_bond: entered allmulticast mode [ 244.352958][ T30] audit: type=1400 audit(1745456140.493:444): avc: denied { write } for pid=7676 comm="syz.3.441" path="socket:[14346]" dev="sockfs" ino=14346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 244.425844][ T7661] veth1_to_bond: entered allmulticast mode [ 244.499806][ T7661] veth0_to_team: entered allmulticast mode [ 244.545865][ T7661] veth1_to_team: entered allmulticast mode [ 244.564494][ T7661] veth0_to_batadv: entered allmulticast mode [ 244.573187][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.580913][ T7661] batadv_slave_0: entered allmulticast mode [ 244.599334][ T7661] veth1_to_batadv: entered allmulticast mode [ 244.610138][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.626229][ T7661] batadv_slave_1: entered allmulticast mode [ 244.640079][ T7661] xfrm0: entered allmulticast mode [ 244.652764][ T7661] veth0_to_hsr: entered allmulticast mode [ 244.665209][ T7661] hsr_slave_0: entered allmulticast mode [ 244.690822][ T7661] veth1_to_hsr: entered allmulticast mode [ 244.704542][ T7661] hsr_slave_1: entered allmulticast mode [ 244.731205][ T7661] hsr0: entered allmulticast mode [ 244.810060][ T7661] veth1_virt_wifi: entered allmulticast mode [ 244.845373][ T7661] veth0_virt_wifi: entered allmulticast mode [ 244.930030][ T7661] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 245.832545][ T7661] veth1_vlan: entered allmulticast mode [ 245.844347][ T7661] veth0_vlan: entered allmulticast mode [ 245.922517][ T30] audit: type=1400 audit(1745456142.253:445): avc: denied { create } for pid=7687 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.959011][ T30] audit: type=1400 audit(1745456142.273:446): avc: denied { listen } for pid=7687 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.959818][ T7661] vlan0: entered allmulticast mode [ 246.021213][ T30] audit: type=1400 audit(1745456142.283:447): avc: denied { connect } for pid=7687 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 246.021646][ T7661] vlan1: entered allmulticast mode [ 246.214518][ T7661] macvlan0: entered allmulticast mode [ 246.251488][ T7661] macvlan1: entered allmulticast mode [ 246.274146][ T7661] ipvlan0: entered allmulticast mode [ 246.290766][ T7661] ipvlan1: entered allmulticast mode [ 246.298125][ T7661] veth1_macvtap: entered allmulticast mode [ 246.324533][ T7661] veth0_macvtap: entered allmulticast mode [ 246.342459][ T7661] macvtap0: entered allmulticast mode [ 246.350745][ T7661] macsec0: entered allmulticast mode [ 246.362704][ T7661] geneve0: entered allmulticast mode [ 246.370600][ T7661] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.382171][ T7661] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.391407][ T7661] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.403164][ T7661] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.415657][ T7661] geneve1: entered allmulticast mode [ 246.431299][ T7661] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 246.453068][ T7661] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 246.504522][ T7661] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 247.067256][ T7661] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 247.089543][ T7661] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 247.100371][ T7661] bond1: entered allmulticast mode [ 247.109451][ T5881] lo speed is unknown, defaulting to 1000 [ 247.211938][ T5881] syz0: Port: 1 Link DOWN [ 251.853018][ T30] audit: type=1400 audit(1745456148.173:448): avc: denied { kexec_image_load } for pid=7726 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 252.002087][ T30] audit: type=1400 audit(1745456148.223:449): avc: denied { create } for pid=7718 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 252.116393][ T30] audit: type=1400 audit(1745456148.433:450): avc: denied { setopt } for pid=7718 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.446937][ T7754] netlink: 60 bytes leftover after parsing attributes in process `syz.2.461'. [ 253.455830][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 253.464958][ T30] audit: type=1400 audit(1745456149.793:451): avc: denied { module_request } for pid=7750 comm="syz.2.461" kmod=72746E6C2D6C696E6B2D6DFFFFFFFF08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 254.169096][ T30] audit: type=1400 audit(1745456150.393:452): avc: denied { view } for pid=7752 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.430323][ T7767] syz.2.463 (7767) used greatest stack depth: 21080 bytes left [ 255.487216][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.874193][ T30] audit: type=1400 audit(1745456152.193:453): avc: denied { connect } for pid=7782 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.636876][ T7793] lo speed is unknown, defaulting to 1000 [ 257.176387][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 257.340745][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 258.359333][ T7795] siw: device registration error -23 [ 259.068422][ T7818] lo speed is unknown, defaulting to 1000 [ 260.332054][ T7829] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.720515][ T7836] lo speed is unknown, defaulting to 1000 [ 261.905172][ T30] audit: type=1400 audit(1745456158.223:454): avc: denied { bind } for pid=7847 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.872312][ T30] audit: type=1400 audit(1745456160.193:455): avc: denied { bind } for pid=7860 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.384790][ T30] audit: type=1400 audit(1745456163.673:456): avc: denied { execute } for pid=7884 comm="syz.4.491" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 270.667271][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 270.728025][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 273.112168][ T5882] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 273.370953][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 273.383230][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.394760][ T5882] usb 5-1: Product: syz [ 273.398984][ T5882] usb 5-1: Manufacturer: syz [ 273.406284][ T5882] usb 5-1: SerialNumber: syz [ 273.521565][ T5882] usb 5-1: config 0 descriptor?? [ 273.544372][ T5882] usb 5-1: interface 1 not found [ 274.191711][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.217550][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.426178][ T55] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 274.847423][ T10] usb 5-1: USB disconnect, device number 7 [ 275.410451][ T7984] vlan2: entered promiscuous mode [ 275.416069][ T7984] veth1_virt_wifi: entered promiscuous mode [ 275.916426][ T30] audit: type=1400 audit(1745456172.243:457): avc: denied { accept } for pid=7987 comm="syz.4.517" lport=33131 faddr=::ffff:10.1.1.2 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.722402][ T30] audit: type=1400 audit(1745456172.273:458): avc: denied { read } for pid=7987 comm="syz.4.517" lport=33131 faddr=::ffff:10.1.1.2 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 276.974012][ T30] audit: type=1400 audit(1745456172.343:459): avc: denied { setopt } for pid=7987 comm="syz.4.517" lport=33131 faddr=::ffff:10.1.1.2 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 277.210486][ T30] audit: type=1400 audit(1745456173.533:460): avc: denied { execute } for pid=7999 comm="syz.1.521" path="/112/file0/bus" dev="ramfs" ino=15023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 277.213887][ T55] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 277.537533][ T30] audit: type=1400 audit(1745456173.533:461): avc: denied { ioctl } for pid=8001 comm="syz.0.522" path="socket:[14121]" dev="sockfs" ino=14121 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.574209][ T30] audit: type=1400 audit(1745456173.533:462): avc: denied { getopt } for pid=8001 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.581966][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 277.787095][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.205317][ T5880] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.246835][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.325390][ T5880] usb 3-1: config 0 descriptor?? [ 278.353765][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 278.440496][ T30] audit: type=1400 audit(1745456174.763:463): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 278.619216][ T8014] bridge_slave_0: left allmulticast mode [ 278.628711][ T30] audit: type=1400 audit(1745456174.943:464): avc: denied { append } for pid=8013 comm="syz.0.527" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 278.680247][ T8014] bridge_slave_0: left promiscuous mode [ 278.690143][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.722535][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 278.752009][ T30] audit: type=1400 audit(1745456175.073:465): avc: denied { bind } for pid=8012 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.900816][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 279.031224][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.154646][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.164459][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00 [ 279.190476][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.196882][ T5880] pwc: recv_control_msg error -32 req 02 val 2700 [ 279.210280][ T5880] pwc: recv_control_msg error -32 req 02 val 2c00 [ 279.218257][ T5880] pwc: recv_control_msg error -32 req 04 val 1000 [ 279.225442][ T5880] pwc: recv_control_msg error -32 req 04 val 1300 [ 279.231000][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.248965][ T5880] pwc: recv_control_msg error -32 req 04 val 1400 [ 279.256244][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.264726][ T5880] pwc: recv_control_msg error -32 req 02 val 2000 [ 279.275507][ T24] usb 4-1: config 0 descriptor?? [ 279.282379][ T5880] pwc: recv_control_msg error -32 req 02 val 2100 [ 279.532858][ T5880] pwc: recv_control_msg error -32 req 04 val 1500 [ 279.575739][ T5880] pwc: recv_control_msg error -32 req 02 val 2500 [ 279.589314][ T8014] bridge_slave_1: left allmulticast mode [ 279.600085][ T5880] pwc: recv_control_msg error -32 req 02 val 2400 [ 279.607424][ T8014] bridge_slave_1: left promiscuous mode [ 279.616608][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.624375][ T5880] pwc: recv_control_msg error -32 req 02 val 2600 [ 279.638046][ T8014] bond0: (slave bond_slave_0): Releasing backup interface [ 279.648423][ T8014] bond0: (slave bond_slave_1): Releasing backup interface [ 279.676192][ T8014] team0: Port device team_slave_0 removed [ 279.688055][ T8014] team0: Port device team_slave_1 removed [ 279.695481][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.703206][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.712658][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.720111][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.738732][ T8014] bond1: (slave ip6gretap1): Removing an active aggregator [ 279.784949][ T24] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 279.803982][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 279.809399][ T6379] bond1: Warning: Found an uninitialized port [ 279.811771][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 279.825141][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 279.832559][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 279.840205][ T24] microsoft 0003:045E:07DA.0001: unknown global tag 0xe [ 279.844770][ T8014] bond1: (slave ip6gretap1): Releasing backup interface [ 279.847260][ T24] microsoft 0003:045E:07DA.0001: item 0 0 1 14 parsing failed [ 279.862209][ T24] microsoft 0003:045E:07DA.0001: parse failed [ 279.868343][ T24] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 279.895582][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 279.933328][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 279.970442][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 280.154990][ T5880] pwc: Registered as video103. [ 280.289816][ T24] usb 4-1: USB disconnect, device number 3 [ 280.300910][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 280.363972][ T8016] team0: Mode changed to "loadbalance" [ 280.443824][ T5880] usb 3-1: USB disconnect, device number 7 [ 281.421218][ T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 281.430521][ T55] Bluetooth: hci0: Injecting HCI hardware error event [ 281.449779][ T55] Bluetooth: hci0: hardware error 0x00 [ 282.762373][ T8053] netlink: 'syz.2.533': attribute type 23 has an invalid length. [ 282.887075][ T30] audit: type=1400 audit(1745456179.183:466): avc: denied { read } for pid=8046 comm="syz.1.534" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 282.887222][ T30] audit: type=1400 audit(1745456179.183:467): avc: denied { open } for pid=8046 comm="syz.1.534" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 282.887331][ T30] audit: type=1400 audit(1745456179.183:468): avc: denied { ioctl } for pid=8046 comm="syz.1.534" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 283.481942][ T8054] tty tty2: ldisc open failed (-12), clearing slot 1 [ 283.971787][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 284.994068][ T8072] overlayfs: missing 'lowerdir' [ 285.305670][ T30] audit: type=1400 audit(1745456181.633:469): avc: denied { write } for pid=8062 comm="syz.4.536" path="socket:[14191]" dev="sockfs" ino=14191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.211915][ T8079] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 287.271056][ T8079] kvm: pic: non byte read [ 287.287434][ T8079] kvm: pic: level sensitive irq not supported [ 287.287523][ T8079] kvm: pic: non byte read [ 287.345333][ T8079] kvm: pic: level sensitive irq not supported [ 287.345500][ T8079] kvm: pic: non byte read [ 289.689830][ T30] audit: type=1400 audit(1745456186.003:470): avc: denied { write } for pid=8090 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.801658][ T30] audit: type=1400 audit(1745456186.123:471): avc: denied { connect } for pid=8100 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.727312][ T30] audit: type=1400 audit(1745456187.323:472): avc: denied { read } for pid=8110 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.148704][ T30] audit: type=1400 audit(1745456189.463:473): avc: denied { connect } for pid=8132 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.216534][ T8015] Set syz1 is full, maxelem 65536 reached [ 295.279606][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 295.307717][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.316799][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.325161][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.336720][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.344721][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.369963][ T30] audit: type=1400 audit(1745456191.693:474): avc: denied { mounton } for pid=8153 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 295.386489][ T8153] lo speed is unknown, defaulting to 1000 [ 295.592016][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 295.609399][ T5879] usb 3-1: config 0 has no interfaces? [ 295.990909][ T5879] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 296.018767][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.132937][ T5879] usb 3-1: config 0 descriptor?? [ 296.413688][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.634667][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 296.674629][ T8144] dummy0: entered promiscuous mode [ 296.702109][ T8144] macvtap1: entered promiscuous mode [ 296.707099][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 296.737950][ T8144] macvtap1: entered allmulticast mode [ 296.764543][ T8144] dummy0: entered allmulticast mode [ 296.785805][ T8169] vlan2: entered promiscuous mode [ 296.801679][ T8169] vlan2: entered allmulticast mode [ 296.812650][ T8169] hsr_slave_1: entered allmulticast mode [ 296.838825][ T8167] dummy0: left allmulticast mode [ 296.852836][ T8167] dummy0: left promiscuous mode [ 296.904773][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 296.907029][ T5882] usb 3-1: USB disconnect, device number 8 [ 296.978168][ T5833] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 296.987824][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.000850][ T5833] usb 2-1: Product: syz [ 297.005185][ T5833] usb 2-1: Manufacturer: syz [ 297.009789][ T5833] usb 2-1: SerialNumber: syz [ 297.018371][ T5833] usb 2-1: config 0 descriptor?? [ 297.032809][ T5833] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 297.042702][ T5833] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 297.053761][ T5833] usb-storage 2-1:0.0: USB Mass Storage device detected [ 297.079533][ T5833] usb-storage 2-1:0.0: device ignored [ 297.197715][ T7784] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 297.210681][ T7784] bridge0: port 3(netdevsim2) entered disabled state [ 297.231079][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 297.367245][ T30] audit: type=1400 audit(1745456193.693:475): avc: denied { setopt } for pid=8178 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.397567][ T55] Bluetooth: hci5: command tx timeout [ 297.465502][ T8183] new mount options do not match the existing superblock, will be ignored [ 297.751950][ T30] audit: type=1400 audit(1745456193.793:476): avc: denied { mount } for pid=8161 comm="syz.1.561" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 298.543950][ T30] audit: type=1400 audit(1745456194.863:477): avc: denied { allowed } for pid=8197 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 298.950701][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.968274][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.981740][ T8153] bridge_slave_0: entered allmulticast mode [ 298.991104][ T8153] bridge_slave_0: entered promiscuous mode [ 299.038283][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.069029][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.087754][ T8153] bridge_slave_1: entered allmulticast mode [ 299.095382][ T8153] bridge_slave_1: entered promiscuous mode [ 299.240254][ T30] audit: type=1400 audit(1745456195.563:478): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.242351][ T5879] usb 2-1: USB disconnect, device number 6 [ 299.330392][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.388813][ T8207] mmap: syz.1.572 (8207) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 299.462165][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.478020][ T55] Bluetooth: hci5: command tx timeout [ 300.194687][ T8153] team0: Port device team_slave_0 added [ 300.208405][ T8153] team0: Port device team_slave_1 added [ 300.612027][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.110577][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.148417][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.175310][ T30] audit: type=1400 audit(1745456197.503:479): avc: denied { ioctl } for pid=8220 comm="syz.2.577" path="socket:[16522]" dev="sockfs" ino=16522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.210766][ T7784] bridge_slave_1: left promiscuous mode [ 301.248686][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.358346][ T7784] bridge_slave_0: left promiscuous mode [ 301.368389][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.563704][ T55] Bluetooth: hci5: command tx timeout [ 301.978405][ T30] audit: type=1400 audit(1745456197.813:480): avc: denied { open } for pid=8231 comm="syz.3.578" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 302.794844][ T30] audit: type=1400 audit(1745456199.123:481): avc: denied { append } for pid=8219 comm="syz.4.575" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 303.513377][ T30] audit: type=1400 audit(1745456199.523:482): avc: denied { create } for pid=8238 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 303.533687][ T30] audit: type=1400 audit(1745456199.523:483): avc: denied { connect } for pid=8238 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 303.617497][ T30] audit: type=1400 audit(1745456199.883:484): avc: denied { write } for pid=8238 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 303.681313][ T55] Bluetooth: hci5: command tx timeout [ 303.967135][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 304.159911][ T7784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.175282][ T7784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.184901][ T7784] bond0 (unregistering): Released all slaves [ 304.198964][ T7784] bond1 (unregistering): Released all slaves [ 304.761903][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 304.774886][ T8223] lo speed is unknown, defaulting to 1000 [ 304.796446][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.819567][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.527179][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.891458][ T8153] hsr_slave_0: entered promiscuous mode [ 306.951063][ T8153] hsr_slave_1: entered promiscuous mode [ 306.982964][ T8153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.998383][ T8153] Cannot create hsr debugfs directory [ 307.111779][ T8275] siw: device registration error -23 [ 307.351779][ T8235] lo speed is unknown, defaulting to 1000 [ 307.451222][ T8285] netlink: 'syz.3.588': attribute type 23 has an invalid length. [ 307.859464][ T8280] kvm: kvm [8278]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 307.896570][ T8280] kvm: kvm [8278]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 307.914464][ T8280] kvm: kvm [8278]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 307.964820][ T8280] kvm: kvm [8278]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 307.982245][ T8280] kvm: kvm [8278]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 309.262436][ T30] audit: type=1400 audit(1745456205.593:485): avc: denied { read write } for pid=8306 comm="syz.1.592" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.416987][ T8311] netlink: 100 bytes leftover after parsing attributes in process `syz.1.592'. [ 309.431237][ T30] audit: type=1400 audit(1745456205.613:486): avc: denied { open } for pid=8306 comm="syz.1.592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.591647][ T8314] Invalid ELF header magic: != ELF [ 309.969898][ T30] audit: type=1400 audit(1745456205.613:487): avc: denied { map } for pid=8306 comm="syz.1.592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.998469][ T30] audit: type=1400 audit(1745456205.903:488): avc: denied { module_load } for pid=8308 comm="syz.2.590" path="/107/bus" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 311.654786][ T7784] hsr_slave_0: left promiscuous mode [ 311.689543][ T7784] hsr_slave_1: left promiscuous mode [ 311.763177][ T7784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.786078][ T7784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.792189][ T30] audit: type=1400 audit(1745456208.113:489): avc: denied { create } for pid=8335 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 312.529709][ T30] audit: type=1400 audit(1745456208.853:490): avc: denied { execute } for pid=8347 comm="syz.3.597" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.571391][ T30] audit: type=1400 audit(1745456209.893:491): avc: denied { create } for pid=8351 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.744452][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 313.751940][ T30] audit: type=1400 audit(1745456209.993:492): avc: denied { ioctl } for pid=8353 comm="syz.2.599" path="socket:[16757]" dev="sockfs" ino=16757 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 313.897099][ T8356] kernel profiling enabled (shift: 63) [ 313.922884][ T8356] profiling shift: 63 too large [ 314.690523][ T7784] team0 (unregistering): Port device team_slave_1 removed [ 314.731137][ T7784] team0 (unregistering): Port device team_slave_0 removed [ 315.607085][ T8356] syz_tun: entered allmulticast mode [ 315.713712][ T8372] lo: entered allmulticast mode [ 315.728112][ T8372] syz_tun: left allmulticast mode [ 315.756547][ T8372] lo: left allmulticast mode [ 315.912342][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.922021][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.929696][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.937609][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.952259][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.839532][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.163632][ T8153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.615658][ T8153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.679509][ T8153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.715612][ T8153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.116331][ T5836] Bluetooth: hci0: command tx timeout [ 318.946518][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.129160][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.235452][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.242611][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.274376][ T8425] TCP: out of memory -- consider tuning tcp_mem [ 319.302907][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.310050][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.653894][ T30] audit: type=1400 audit(1745456215.983:493): avc: denied { setopt } for pid=8430 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.343564][ T5836] Bluetooth: hci0: command tx timeout [ 322.206086][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 322.472179][ T5836] Bluetooth: hci0: command tx timeout [ 323.297030][ T7784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.460152][ T7784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.607015][ T30] audit: type=1400 audit(1745456219.933:494): avc: denied { ioctl } for pid=8460 comm="syz.2.619" path="socket:[16003]" dev="sockfs" ino=16003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.651699][ T30] audit: type=1400 audit(1745456219.973:495): avc: denied { bind } for pid=8460 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.681224][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.742453][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.749628][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.757221][ T8382] bridge_slave_0: entered allmulticast mode [ 324.216079][ T8382] bridge_slave_0: entered promiscuous mode [ 324.258252][ T7784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.411278][ T8470] ceph: No mds server is up or the cluster is laggy [ 324.422238][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.429619][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.531973][ T5836] Bluetooth: hci0: command tx timeout [ 324.611729][ T8382] bridge_slave_1: entered allmulticast mode [ 324.688720][ T8382] bridge_slave_1: entered promiscuous mode [ 324.845544][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.246231][ T7784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.355193][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.107288][ T8497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.155905][ T8507] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.167283][ T8507] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.181961][ T30] audit: type=1400 audit(1745456222.483:496): avc: denied { bind } for pid=8502 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.205063][ T8507] program syz.1.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.220968][ T30] audit: type=1400 audit(1745456222.483:497): avc: denied { write } for pid=8502 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 326.238299][ T8382] team0: Port device team_slave_0 added [ 326.486121][ T8382] team0: Port device team_slave_1 added [ 326.600386][ T30] audit: type=1400 audit(1745456222.913:498): avc: denied { mount } for pid=8513 comm="syz.1.627" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 327.281875][ T30] audit: type=1400 audit(1745456222.923:499): avc: denied { unmount } for pid=8513 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 327.289401][ T8153] veth0_vlan: entered promiscuous mode [ 327.325319][ T30] audit: type=1400 audit(1745456223.643:500): avc: denied { sys_chroot } for pid=8519 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 327.390135][ T30] audit: type=1400 audit(1745456223.643:501): avc: denied { setgid } for pid=8519 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 327.445868][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.464121][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.518854][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.571792][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.581196][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.615415][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.647413][ T8153] veth1_vlan: entered promiscuous mode [ 327.701389][ T7784] bridge_slave_1: left allmulticast mode [ 327.711963][ T7784] bridge_slave_1: left promiscuous mode [ 327.731433][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.742715][ T7784] bridge_slave_0: left allmulticast mode [ 327.748439][ T7784] bridge_slave_0: left promiscuous mode [ 327.754873][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.909740][ T7784] dvmrp1 (unregistering): left allmulticast mode [ 328.060565][ T30] audit: type=1804 audit(1745456224.293:502): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.630" name="file0" dev="ramfs" ino=16240 res=1 errno=0 [ 328.351140][ T7784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.364050][ T7784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.412764][ T7784] bond0 (unregistering): Released all slaves [ 328.503485][ T8382] hsr_slave_0: entered promiscuous mode [ 328.510022][ T8382] hsr_slave_1: entered promiscuous mode [ 328.516978][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.526023][ T8382] Cannot create hsr debugfs directory [ 329.004639][ T8153] veth0_macvtap: entered promiscuous mode [ 329.520851][ T8153] veth1_macvtap: entered promiscuous mode [ 330.067118][ T30] audit: type=1400 audit(1745456226.353:503): avc: denied { audit_write } for pid=8549 comm="syz.2.633" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 330.587310][ T8558] block device autoloading is deprecated and will be removed. [ 330.913119][ T7784] hsr_slave_0: left promiscuous mode [ 330.922341][ T7784] hsr_slave_1: left promiscuous mode [ 330.928583][ T7784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.939223][ T7784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.948410][ T7784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.987883][ T7784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.126121][ T7784] veth1_macvtap: left promiscuous mode [ 331.168119][ T7784] veth0_macvtap: left promiscuous mode [ 331.174149][ T7784] veth1_vlan: left promiscuous mode [ 331.180319][ T30] audit: type=1400 audit(1745456227.503:504): avc: denied { setattr } for pid=8564 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 331.180737][ T7784] veth0_vlan: left promiscuous mode [ 332.988906][ T7784] team0 (unregistering): Port device team_slave_1 removed [ 333.023137][ T7784] team0 (unregistering): Port device team_slave_0 removed [ 333.442033][ T30] audit: type=1400 audit(1745456229.763:505): avc: denied { getopt } for pid=8582 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.078451][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.118137][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.161913][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.197016][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.208755][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.245773][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.261978][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.277112][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.288102][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.299408][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.378738][ T8153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.394139][ T8153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.403788][ T8153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.412655][ T8153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.375660][ T8382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.388395][ T8382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.414850][ T8382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.444511][ T8382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.607045][ T30] audit: type=1400 audit(1745456232.933:506): avc: denied { getopt } for pid=8611 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.777788][ T6368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.921639][ T6368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.040555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.056251][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.124039][ T30] audit: type=1400 audit(1745456233.443:507): avc: denied { mounton } for pid=8153 comm="syz-executor" path="/root/syzkaller.ygKI3B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 337.198598][ T30] audit: type=1400 audit(1745456233.523:508): avc: denied { mounton } for pid=8153 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 337.691150][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.745924][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.762195][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.769321][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.800810][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.809003][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.396955][ T8633] lo speed is unknown, defaulting to 1000 [ 338.403081][ T8633] lo speed is unknown, defaulting to 1000 [ 338.803023][ T8633] lo speed is unknown, defaulting to 1000 [ 338.818162][ T8633] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 338.845878][ T8633] lo speed is unknown, defaulting to 1000 [ 338.857310][ T8633] lo speed is unknown, defaulting to 1000 [ 338.890254][ T8633] lo speed is unknown, defaulting to 1000 [ 338.903997][ T8633] lo speed is unknown, defaulting to 1000 [ 338.912139][ T8633] lo speed is unknown, defaulting to 1000 [ 339.954664][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.246951][ T8650] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 341.333027][ T30] audit: type=1400 audit(1745456236.943:509): avc: denied { getopt } for pid=8663 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 341.660721][ T8382] veth0_vlan: entered promiscuous mode [ 342.253515][ T8382] veth1_vlan: entered promiscuous mode [ 342.332027][ T8382] veth0_macvtap: entered promiscuous mode [ 342.341412][ T8382] veth1_macvtap: entered promiscuous mode [ 342.434004][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.836671][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.864793][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.891876][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.060786][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.071507][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.109020][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.627879][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.662069][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.686220][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.702790][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.715352][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.727338][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.745083][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.791738][ T8382] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.818662][ T8382] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.827583][ T8382] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.852251][ T8382] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.400755][ T30] audit: type=1400 audit(1745456240.273:510): avc: denied { create } for pid=8690 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 344.451791][ T30] audit: type=1400 audit(1745456240.273:511): avc: denied { write } for pid=8690 comm="syz.5.658" path="socket:[18579]" dev="sockfs" ino=18579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 344.507527][ T30] audit: type=1400 audit(1745456240.783:512): avc: denied { checkpoint_restore } for pid=8692 comm="syz.3.659" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.663083][ T6368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.701693][ T6368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.963274][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.983821][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.335808][ T8737] use of bytesused == 0 is deprecated and will be removed in the future, [ 346.344874][ T8737] use the actual size instead. [ 346.537540][ T30] audit: type=1400 audit(1745456242.863:513): avc: denied { read } for pid=8733 comm="syz.6.604" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 347.240695][ T8740] netlink: 'syz.6.604': attribute type 4 has an invalid length. [ 347.250796][ T30] audit: type=1400 audit(1745456242.863:514): avc: denied { open } for pid=8733 comm="syz.6.604" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 347.350235][ T30] audit: type=1400 audit(1745456242.893:515): avc: denied { ioctl } for pid=8733 comm="syz.6.604" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.280181][ T30] audit: type=1400 audit(1745456245.483:516): avc: denied { create } for pid=8770 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 349.485755][ T8773] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.778628][ T30] audit: type=1400 audit(1745456245.533:517): avc: denied { sys_admin } for pid=8770 comm="syz.1.668" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 349.915924][ T8735] lo speed is unknown, defaulting to 1000 [ 350.193339][ T30] audit: type=1400 audit(1745456246.523:518): avc: denied { read } for pid=8787 comm="syz.1.671" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 350.204507][ T8788] block device autoloading is deprecated and will be removed. [ 350.279377][ T30] audit: type=1400 audit(1745456246.523:519): avc: denied { open } for pid=8787 comm="syz.1.671" path="/154/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 350.285716][ T8788] md: md2 stopped. [ 350.319075][ T8773] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.374791][ T30] audit: type=1400 audit(1745456246.613:520): avc: denied { ioctl } for pid=8787 comm="syz.1.671" path="/154/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 350.399053][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.015664][ T8773] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.514590][ T8811] tipc: Started in network mode [ 351.519544][ T8811] tipc: Node identity , cluster identity 4711 [ 351.525692][ T8811] tipc: Failed to obtain node identity [ 351.531242][ T8811] tipc: Enabling of bearer rejected, failed to enable media [ 351.627331][ T8773] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.828240][ T8817] syz.1.676 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 351.929371][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.675'. [ 352.659571][ T8773] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.871278][ T8773] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.958469][ T8773] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.011267][ T8773] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.821504][ T30] audit: type=1400 audit(1745456249.823:521): avc: denied { create } for pid=8832 comm="syz.5.678" name="#6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 353.865188][ T30] audit: type=1400 audit(1745456249.833:522): avc: denied { link } for pid=8832 comm="syz.5.678" name="#6" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 354.019481][ T30] audit: type=1400 audit(1745456249.833:523): avc: denied { rename } for pid=8832 comm="syz.5.678" name="#7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 355.731355][ T30] audit: type=1400 audit(1745456252.053:524): avc: denied { read append } for pid=8856 comm="syz.5.682" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 355.866170][ T30] audit: type=1400 audit(1745456252.053:525): avc: denied { open } for pid=8856 comm="syz.5.682" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 355.906784][ T30] audit: type=1400 audit(1745456252.103:526): avc: denied { sqpoll } for pid=8858 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 360.399329][ T30] audit: type=1400 audit(1745456256.723:527): avc: denied { getopt } for pid=8911 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 360.859247][ T8931] mkiss: ax0: crc mode is auto. [ 363.838546][ T30] audit: type=1400 audit(1745456260.153:528): avc: denied { setattr } for pid=8954 comm="syz.1.700" name="ALG" dev="sockfs" ino=19522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.060825][ T30] audit: type=1400 audit(1745456260.383:529): avc: denied { connect } for pid=8954 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.250858][ T30] audit: type=1400 audit(1745456261.033:530): avc: denied { ioctl } for pid=8963 comm="syz.6.702" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 366.005666][ T30] audit: type=1400 audit(1745456262.323:531): avc: denied { create } for pid=8976 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 366.526304][ T10] IPVS: starting estimator thread 0... [ 366.538212][ T30] audit: type=1400 audit(1745456262.863:532): avc: denied { read } for pid=8976 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.538265][ T8993] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 366.652004][ T8996] IPVS: using max 78 ests per chain, 187200 per kthread [ 366.936922][ T9001] No such timeout policy "syz0" [ 368.081313][ T9016] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 377.628767][ T9050] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 377.637097][ T9050] netlink: 244 bytes leftover after parsing attributes in process `syz.2.717'. [ 378.287050][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.681992][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 379.831937][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 379.839728][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 379.847893][ T10] usb 3-1: config 0 has no interface number 0 [ 379.855618][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 379.864717][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.872787][ T10] usb 3-1: Product: syz [ 379.876948][ T10] usb 3-1: Manufacturer: syz [ 379.881537][ T10] usb 3-1: SerialNumber: syz [ 382.581174][ T30] audit: type=1326 audit(1745456278.903:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9061 comm="syz.2.722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5835f8e969 code=0x0 [ 421.311956][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 439.714012][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.791896][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 501.154592][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.112303][ T31] INFO: task dhcpcd:5492 blocked for more than 143 seconds. [ 510.119645][ T31] Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 [ 510.132944][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.141628][ T31] task:dhcpcd state:D stack:23064 pid:5492 tgid:5492 ppid:5491 task_flags:0x400140 flags:0x00000002 [ 510.153645][ T31] Call Trace: [ 510.156923][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.159835][ T31] __schedule+0x116f/0x5de0 [ 510.164680][ T31] ? __pfx___schedule+0x10/0x10 [ 510.169562][ T31] ? find_held_lock+0x2b/0x80 [ 510.176718][ T31] ? schedule+0x2d7/0x3a0 [ 510.181071][ T31] schedule+0xe7/0x3a0 [ 510.221463][ T31] schedule_preempt_disabled+0x13/0x30 [ 510.235149][ T31] __mutex_lock+0x6c7/0xb90 [ 510.239701][ T31] ? cred_has_capability.isra.0+0x193/0x2f0 [ 510.245734][ T31] ? devinet_ioctl+0x26d/0x1f50 [ 510.250603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 510.255705][ T31] ? bpf_lsm_capable+0x9/0x10 [ 510.260390][ T31] ? security_capable+0x7e/0x260 [ 510.266835][ T31] ? devinet_ioctl+0x26d/0x1f50 [ 510.271714][ T31] devinet_ioctl+0x26d/0x1f50 [ 510.276533][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 510.281643][ T31] ? _copy_from_user+0x59/0xd0 [ 510.286482][ T31] inet_ioctl+0x3a7/0x3f0 [ 510.290816][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 510.296403][ T31] ? tomoyo_path_number_perm+0x18d/0x580 [ 510.302122][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.308015][ T31] sock_do_ioctl+0x115/0x280 [ 510.312654][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 510.317768][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 510.324282][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 510.330780][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 510.337750][ T31] sock_ioctl+0x227/0x6b0 [ 510.342144][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 510.346983][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 510.352633][ T31] ? selinux_file_ioctl+0x180/0x270 [ 510.357833][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 510.362991][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 510.367834][ T31] __x64_sys_ioctl+0x190/0x200 [ 510.372711][ T31] do_syscall_64+0xcd/0x260 [ 510.377219][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.383130][ T31] RIP: 0033:0x7f336be61d49 [ 510.387542][ T31] RSP: 002b:00007ffc634beb48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.396023][ T31] RAX: ffffffffffffffda RBX: 00007f336bd936c0 RCX: 00007f336be61d49 [ 510.404392][ T31] RDX: 00007ffc634ced38 RSI: 0000000000008914 RDI: 000000000000001e [ 510.412423][ T31] RBP: 00007ffc634deef8 R08: 00007ffc634cecf8 R09: 00007ffc634ceca8 [ 510.420381][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.428384][ T31] R13: 00007ffc634ced38 R14: 0000000000000028 R15: 0000000000008914 [ 510.436385][ T31] [ 510.439412][ T31] INFO: task kworker/0:4:5880 blocked for more than 143 seconds. [ 510.447395][ T31] Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 [ 510.455141][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.463844][ T31] task:kworker/0:4 state:D stack:22120 pid:5880 tgid:5880 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 510.475893][ T31] Workqueue: md_misc mddev_delayed_delete [ 510.481596][ T31] Call Trace: [ 510.484916][ T31] [ 510.487837][ T31] __schedule+0x116f/0x5de0 [ 510.492396][ T31] ? __lock_acquire+0xa91/0x1ba0 [ 510.497330][ T31] ? __pfx___schedule+0x10/0x10 [ 510.502619][ T31] ? find_held_lock+0x2b/0x80 [ 510.507315][ T31] ? schedule+0x2d7/0x3a0 [ 510.511627][ T31] schedule+0xe7/0x3a0 [ 510.515913][ T31] schedule_timeout+0x257/0x290 [ 510.520767][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 510.526217][ T31] ? mark_held_locks+0x49/0x80 [ 510.530994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.536229][ T31] __wait_for_common+0x2fc/0x4e0 [ 510.541177][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 510.546581][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 510.552117][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 510.557316][ T31] devtmpfs_submit_req+0xa8/0x100 [ 510.562361][ T31] devtmpfs_delete_node+0xf6/0x160 [ 510.567471][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 510.573237][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 510.579386][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.584641][ T31] ? kernfs_put+0x4e/0x60 [ 510.588991][ T31] ? sysfs_remove_group+0xc6/0x180 [ 510.594261][ T31] device_del+0x734/0x9f0 [ 510.598609][ T31] ? __pfx_device_del+0x10/0x10 [ 510.603899][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.609128][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 510.614451][ T31] del_gendisk+0x486/0xc40 [ 510.618864][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 510.623991][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 510.629107][ T31] md_kobj_release+0xb2/0x100 [ 510.633826][ T31] kobject_put+0x1e4/0x5a0 [ 510.638246][ T31] process_one_work+0x9cc/0x1b70 [ 510.643229][ T31] ? __pfx_process_one_work+0x10/0x10 [ 510.648614][ T31] ? assign_work+0x1a0/0x250 [ 510.653267][ T31] worker_thread+0x6c8/0xf10 [ 510.657855][ T31] ? __kthread_parkme+0x19e/0x250 [ 510.662922][ T31] ? __pfx_worker_thread+0x10/0x10 [ 510.668029][ T31] kthread+0x3c2/0x780 [ 510.672137][ T31] ? __pfx_kthread+0x10/0x10 [ 510.676727][ T31] ? __pfx_kthread+0x10/0x10 [ 510.681297][ T31] ? __pfx_kthread+0x10/0x10 [ 510.685910][ T31] ? __pfx_kthread+0x10/0x10 [ 510.690493][ T31] ? rcu_is_watching+0x12/0xc0 [ 510.695284][ T31] ? __pfx_kthread+0x10/0x10 [ 510.699876][ T31] ret_from_fork+0x45/0x80 [ 510.704731][ T31] ? __pfx_kthread+0x10/0x10 [ 510.709317][ T31] ret_from_fork_asm+0x1a/0x30 [ 510.714138][ T31] [ 510.717192][ T31] INFO: task syz.5.694:8924 blocked for more than 143 seconds. [ 510.724868][ T31] Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 [ 510.732701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.741373][ T31] task:syz.5.694 state:D stack:28872 pid:8924 tgid:8920 ppid:8153 task_flags:0x400040 flags:0x00004004 [ 510.753419][ T31] Call Trace: [ 510.756703][ T31] [ 510.759634][ T31] __schedule+0x116f/0x5de0 [ 510.764216][ T31] ? __pfx___schedule+0x10/0x10 [ 510.769110][ T31] ? find_held_lock+0x2b/0x80 [ 510.773928][ T31] ? schedule+0x2d7/0x3a0 [ 510.778280][ T31] schedule+0xe7/0x3a0 [ 510.782577][ T31] schedule_preempt_disabled+0x13/0x30 [ 510.788062][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 510.793670][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 510.799745][ T31] ? __pfx___might_resched+0x10/0x10 [ 510.805069][ T31] down_read+0xef/0x480 [ 510.809518][ T31] ? __pfx_down_read+0x10/0x10 [ 510.814365][ T31] ? lookup_fast+0x156/0x610 [ 510.818954][ T31] walk_component+0x345/0x5b0 [ 510.823652][ T31] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 510.829985][ T31] path_openat+0x227/0x2d40 [ 510.834553][ T31] ? __pfx_path_openat+0x10/0x10 [ 510.839487][ T31] do_filp_open+0x20b/0x470 [ 510.844211][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 510.849238][ T31] ? alloc_fd+0x471/0x7d0 [ 510.853892][ T31] do_sys_openat2+0x11b/0x1d0 [ 510.858573][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.863809][ T31] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 510.870385][ T31] ? __x64_sys_openat+0x6d/0x210 [ 510.875361][ T31] __x64_sys_openat+0x174/0x210 [ 510.880226][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 510.886431][ T31] do_syscall_64+0xcd/0x260 [ 510.890936][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.896862][ T31] RIP: 0033:0x7f862dd8d2d0 [ 510.901263][ T31] RSP: 002b:00007f862eb6ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 510.910091][ T31] RAX: ffffffffffffffda RBX: 0000000000008c00 RCX: 00007f862dd8d2d0 [ 510.918161][ T31] RDX: 0000000000008c00 RSI: 00007f862eb6ac10 RDI: 00000000ffffff9c [ 510.926160][ T31] RBP: 00007f862eb6ac10 R08: 0000000000000000 R09: 0000000000000000 [ 510.934149][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 510.942136][ T31] R13: 0000000000000000 R14: 00007f862dfb6080 R15: 00007ffdc4928ab8 [ 510.950097][ T31] [ 510.953290][ T31] INFO: task syz.6.703:8985 blocked for more than 144 seconds. [ 510.960817][ T31] Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 [ 510.971911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.980579][ T31] task:syz.6.703 state:D stack:23976 pid:8985 tgid:8978 ppid:8382 task_flags:0x400140 flags:0x00004004 [ 510.992516][ T31] Call Trace: [ 510.995783][ T31] [ 510.998691][ T31] __schedule+0x116f/0x5de0 [ 511.003242][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 511.008180][ T31] ? __pfx___schedule+0x10/0x10 [ 511.013476][ T31] ? find_held_lock+0x2b/0x80 [ 511.018158][ T31] ? schedule+0x2d7/0x3a0 [ 511.023828][ T31] schedule+0xe7/0x3a0 [ 511.027891][ T31] schedule_timeout+0x257/0x290 [ 511.032768][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 511.038134][ T31] ? mark_held_locks+0x49/0x80 [ 511.042919][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.048122][ T31] __wait_for_common+0x2fc/0x4e0 [ 511.053104][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 511.058463][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 511.063967][ T31] devtmpfs_submit_req+0xa8/0x100 [ 511.068995][ T31] devtmpfs_create_node+0x18a/0x230 [ 511.074373][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 511.080095][ T31] ? up_write+0x1b2/0x520 [ 511.084763][ T31] ? kernfs_create_link+0x1bd/0x240 [ 511.089975][ T31] ? kernfs_put+0x35/0x60 [ 511.094336][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 511.099870][ T31] device_add+0x10bd/0x1a70 [ 511.104400][ T31] ? __pfx_device_add+0x10/0x10 [ 511.109239][ T31] ? kstrdup+0xb5/0x100 [ 511.113438][ T31] device_create_groups_vargs+0x1f8/0x270 [ 511.119438][ T31] device_create+0xed/0x130 [ 511.123979][ T31] ? __pfx_device_create+0x10/0x10 [ 511.129086][ T31] ? __rcu_read_unlock+0x2b4/0x580 [ 511.134226][ T31] macvtap_device_event+0x301/0x3e0 [ 511.139422][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 511.145161][ T31] ? notifier_call_chain+0x13d/0x410 [ 511.150445][ T31] notifier_call_chain+0xb9/0x410 [ 511.155506][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 511.161227][ T31] call_netdevice_notifiers_info+0xbe/0x140 [ 511.167160][ T31] register_netdevice+0x182e/0x2270 [ 511.172423][ T31] ? __pfx_register_netdevice+0x10/0x10 [ 511.177979][ T31] macvlan_common_newlink+0x10e7/0x1a20 [ 511.183761][ T31] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 511.189662][ T31] ? lockdep_rtnl_is_held+0x26/0x40 [ 511.194923][ T31] ? netdev_is_rx_handler_busy+0x83/0x160 [ 511.200652][ T31] macvtap_newlink+0x17a/0x240 [ 511.205532][ T31] ? __pfx_macvtap_newlink+0x10/0x10 [ 511.210839][ T31] rtnl_newlink+0xc42/0x2000 [ 511.215488][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 511.220808][ T31] ? rcu_is_watching+0x12/0xc0 [ 511.225616][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.231421][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 511.236900][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 511.242809][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 511.249403][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 511.254455][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 511.259387][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 511.264887][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 511.269816][ T31] netlink_rcv_skb+0x16a/0x440 [ 511.274631][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 511.280104][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.285438][ T31] ? find_held_lock+0x2b/0x80 [ 511.290120][ T31] netlink_unicast+0x53a/0x7f0 [ 511.295079][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 511.300365][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 511.305145][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.310423][ T31] ? security_socket_sendmsg+0x8d/0x240 [ 511.316105][ T31] ____sys_sendmsg+0xa95/0xc70 [ 511.321272][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 511.326787][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.332134][ T31] ___sys_sendmsg+0x134/0x1d0 [ 511.336801][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.342041][ T31] __sys_sendmsg+0x16d/0x220 [ 511.346643][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.351809][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 511.356747][ T31] ? rcu_is_watching+0x12/0xc0 [ 511.361489][ T31] do_syscall_64+0xcd/0x260 [ 511.366043][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.371973][ T31] RIP: 0033:0x7f32d398e969 [ 511.376375][ T31] RSP: 002b:00007f32d4760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.384809][ T31] RAX: ffffffffffffffda RBX: 00007f32d3bb6160 RCX: 00007f32d398e969 [ 511.393178][ T31] RDX: 0000000000048094 RSI: 0000200000000100 RDI: 0000000000000006 [ 511.401144][ T31] RBP: 00007f32d3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.409299][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.417298][ T31] R13: 0000000000000000 R14: 00007f32d3bb6160 R15: 00007fffd068ff98 [ 511.425709][ T31] [ 511.428759][ T31] [ 511.428759][ T31] Showing all locks held in the system: [ 511.436544][ T31] 3 locks held by kworker/0:1/10: [ 511.441549][ T31] #0: ffff88801f2c2948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 511.452368][ T31] #1: ffffc900000f7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 511.463639][ T31] #2: ffff888144f02198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 511.472580][ T31] 2 locks held by kdevtmpfs/26: [ 511.477420][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 511.488299][ T31] #1: ffffffff8eef43c8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 511.497892][ T31] 1 lock held by khungtaskd/31: [ 511.502745][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 511.512833][ T31] 1 lock held by dhcpcd/5492: [ 511.517495][ T31] #0: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26d/0x1f50 [ 511.527029][ T31] 2 locks held by getty/5585: [ 511.531695][ T31] #0: ffff8880376780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 511.541501][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 511.551606][ T31] 2 locks held by kworker/0:4/5880: [ 511.556897][ T31] #0: ffff88801f2c3548 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 511.567669][ T31] #1: ffffc90003457d18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 511.579307][ T31] 3 locks held by kworker/0:5/5881: [ 511.584510][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 511.596389][ T31] #1: ffffc90003447d18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 511.606917][ T31] #2: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 511.616633][ T31] 3 locks held by kworker/u8:11/6368: [ 511.622137][ T31] #0: ffff88814c463948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 511.633690][ T31] #1: ffffc90003107d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 511.646796][ T31] #2: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 511.656367][ T31] 1 lock held by syz.5.694/8924: [ 511.661297][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 511.671708][ T31] 2 locks held by syz.6.703/8985: [ 511.676785][ T31] #0: ffffffff90868840 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 511.686406][ T31] #1: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 511.695492][ T31] 1 lock held by syz.3.707/9005: [ 511.700398][ T31] #0: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 511.709380][ T31] 2 locks held by syz.3.707/9009: [ 511.714431][ T31] #0: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 511.724530][ T31] #1: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x29/0x50 [ 511.734763][ T31] 1 lock held by syz.1.710/9019: [ 511.739690][ T31] #0: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 511.748651][ T31] 2 locks held by syz.1.710/9020: [ 511.753710][ T31] #0: ffffffff900ff7e8 (br_ioctl_mutex){+.+.}-{4:4}, at: br_ioctl_call+0x34/0xa0 [ 511.762969][ T31] #1: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0xf4/0x4c0 [ 511.771967][ T31] 2 locks held by syz-executor/9038: [ 511.777220][ T31] #0: ffff88805a854918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.786694][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.796684][ T31] 2 locks held by syz-executor/9059: [ 511.802002][ T31] #0: ffff888048d1d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.811505][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.821470][ T31] 2 locks held by syz-executor/9065: [ 511.826760][ T31] #0: ffff888051f06918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.836574][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.846594][ T31] 2 locks held by syz.2.723/9069: [ 511.851612][ T31] #0: ffff888031a1a6d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 511.862181][ T31] #1: ffffffff9012b0e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 511.871054][ T31] 2 locks held by syz-executor/9073: [ 511.876401][ T31] #0: ffff888036df2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.885865][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.895824][ T31] 2 locks held by syz-executor/9076: [ 511.901096][ T31] #0: ffff88804dbac118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.910552][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.920496][ T31] 2 locks held by syz-executor/9081: [ 511.925803][ T31] #0: ffff888024edf118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.935642][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.945629][ T31] 2 locks held by syz-executor/9084: [ 511.950892][ T31] #0: ffff88802aee7918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.960329][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.970280][ T31] 2 locks held by syz-executor/9087: [ 511.975727][ T31] #0: ffff888045097118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 511.985175][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 511.995113][ T31] 2 locks held by syz-executor/9089: [ 512.000364][ T31] #0: ffff88805373e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 512.009786][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 512.019752][ T31] 2 locks held by syz-executor/9091: [ 512.025067][ T31] #0: ffff88805a45b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 512.034508][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 512.044890][ T31] 2 locks held by syz-executor/9095: [ 512.050172][ T31] #0: ffff88807bfad118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 512.059595][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 512.069549][ T31] 2 locks held by syz-executor/9098: [ 512.074857][ T31] #0: ffff888029a7d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 512.084404][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 512.094343][ T31] 2 locks held by syz-executor/9101: [ 512.099608][ T31] #0: ffff88808848a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 512.109034][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 512.118971][ T31] 2 locks held by syz-executor/9103: [ 512.124271][ T31] #0: ffff88802a89d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 512.133719][ T31] #1: ffffffff905d2ba8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 512.144029][ T31] [ 512.146344][ T31] ============================================= [ 512.146344][ T31] [ 512.154788][ T31] NMI backtrace for cpu 0 [ 512.154801][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 512.154820][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.154828][ T31] Call Trace: [ 512.154832][ T31] [ 512.154838][ T31] dump_stack_lvl+0x116/0x1f0 [ 512.154862][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 512.154880][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.154899][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 512.154917][ T31] watchdog+0xf70/0x12c0 [ 512.154940][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.154955][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.154977][ T31] ? __kthread_parkme+0x19e/0x250 [ 512.155002][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.155019][ T31] kthread+0x3c2/0x780 [ 512.155036][ T31] ? __pfx_kthread+0x10/0x10 [ 512.155051][ T31] ? __pfx_kthread+0x10/0x10 [ 512.155066][ T31] ? __pfx_kthread+0x10/0x10 [ 512.155081][ T31] ? __pfx_kthread+0x10/0x10 [ 512.155096][ T31] ? rcu_is_watching+0x12/0xc0 [ 512.155117][ T31] ? __pfx_kthread+0x10/0x10 [ 512.155134][ T31] ret_from_fork+0x45/0x80 [ 512.155151][ T31] ? __pfx_kthread+0x10/0x10 [ 512.155167][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.155203][ T31] [ 512.155209][ T31] Sending NMI from CPU 0 to CPUs 1: [ 512.287003][ C1] NMI backtrace for cpu 1 [ 512.287016][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 512.287032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.287039][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 512.287061][ C1] Code: 25 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 3a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 512.287073][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 512.287084][ C1] RAX: 00000000017513fd RBX: 0000000000000001 RCX: ffffffff8b72b419 [ 512.287092][ C1] RDX: 0000000000000000 RSI: ffffffff8dbef86e RDI: ffffffff8bf465c0 [ 512.287100][ C1] RBP: ffffed1003b5e488 R08: 0000000000000001 R09: ffffed10170a65bd [ 512.287108][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 512.287116][ C1] R13: ffff88801daf2440 R14: ffffffff90864b10 R15: 0000000000000000 [ 512.287124][ C1] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 512.287137][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.287145][ C1] CR2: 00007fffb30833a8 CR3: 0000000027f72000 CR4: 00000000003526f0 [ 512.287153][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 512.287160][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 512.287168][ C1] Call Trace: [ 512.287172][ C1] [ 512.287176][ C1] default_idle+0x13/0x20 [ 512.287194][ C1] default_idle_call+0x6d/0xb0 [ 512.287211][ C1] do_idle+0x391/0x510 [ 512.287229][ C1] ? __pfx_do_idle+0x10/0x10 [ 512.287244][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 512.287264][ C1] cpu_startup_entry+0x4f/0x60 [ 512.287279][ C1] start_secondary+0x21d/0x2b0 [ 512.287292][ C1] ? __pfx_start_secondary+0x10/0x10 [ 512.287307][ C1] common_startup_64+0x13e/0x148 [ 512.287327][ C1] [ 512.288074][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 512.482446][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 512.494227][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.504261][ T31] Call Trace: [ 512.507521][ T31] [ 512.510434][ T31] dump_stack_lvl+0x3d/0x1f0 [ 512.515013][ T31] panic+0x71c/0x800 [ 512.518887][ T31] ? __pfx_panic+0x10/0x10 [ 512.523279][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 512.528634][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.534594][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 512.539944][ T31] ? watchdog+0xdda/0x12c0 [ 512.544517][ T31] ? watchdog+0xdcd/0x12c0 [ 512.548915][ T31] watchdog+0xdeb/0x12c0 [ 512.553144][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.557798][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.562983][ T31] ? __kthread_parkme+0x19e/0x250 [ 512.567997][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.572652][ T31] kthread+0x3c2/0x780 [ 512.576704][ T31] ? __pfx_kthread+0x10/0x10 [ 512.581272][ T31] ? __pfx_kthread+0x10/0x10 [ 512.586376][ T31] ? __pfx_kthread+0x10/0x10 [ 512.590943][ T31] ? __pfx_kthread+0x10/0x10 [ 512.595511][ T31] ? rcu_is_watching+0x12/0xc0 [ 512.600258][ T31] ? __pfx_kthread+0x10/0x10 [ 512.604827][ T31] ret_from_fork+0x45/0x80 [ 512.609223][ T31] ? __pfx_kthread+0x10/0x10 [ 512.613794][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.618571][ T31] [ 512.621761][ T31] Kernel Offset: disabled [ 512.626059][ T31] Rebooting in 86400 seconds..