last executing test programs: 1.346117492s ago: executing program 0 (id=33): r0 = add_key$keyring(0x0, &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = userfaultfd(0x80001) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x8000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r3, 0x0, 0x10000, 0x4, 0x1, [], [0x80, 0x7f, 0x8], [0x12, 0x0, 0x8000, 0x19], [0x2, 0xa, 0x1, 0xbc]}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000180)="15e0185428227964d1") r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) keyctl$KEYCTL_MOVE(0x1e, r4, r0, r0, 0x1) r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xe8}}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002640)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002680)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f00000026c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 872.647138ms ago: executing program 2 (id=44): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x4000000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="182a2a9adb241d546d3547ffa746cd80615f21ac6793936b463e456284d5763546df92150981d07910fa95477488d42680cd9354b6e5c987a726735a48c244aefa3a61f4", 0x44}, {&(0x7f0000000240)="9c0b0ec4da53980d15cf817436167980497ea5ba84b6c8d7c472a1db414a7206b84ed011660b997d2d118163dc0a4264c24ce2c999f96dfc806aa4b8cd6f46daea4ab6ee9948a3ff1cbb325fbe45d059c9c995899466bcc7f5e2d0db2c02c1bf2470907bb75dc944d7735acf5d4660b4449e8ce287ec126fef8fda41abb8a4e43e722e919da4db4d8b8af18cbe950d770a4d17d75c9b311d9498ee2a45e499c92db127064c9125d2cd708eb35d9d358458b0e78c9cc6d65158a213f730b3d5b9b74127ae8cf2dcdb1819a901c56262e6c5c0221331", 0xd5}, {&(0x7f0000000340)="f816138bbd850066ab11d412036e242dad7c9c57f7d9fcf57872eeb93fac2ef22d1dabbde17baa47352af09ab8196d3d59027faa708b1e650b5f81c658c98c9992bbe21a891c326815502f54f9e36430c3f91962372faeb0e0b31bf2702df25d021cc2bb21346d78c26806346cace735b56e1bceb4bc2da702ef30d80447aa0aaa4818ce2838431c872219e4dc0d04541d0d8e8edf8f70a15c78208f5dd4b491612f63d7536968d4a9909e4808ddefcd77a2969b8315c5f5fd1336c1759771906ea48043734ec4784b15b6232e7b820c13a90230ef5abbfd6d4d4c8107f6a3de2fb3e7c903971907947e9b4fb6bdd0e40f35f296e4a8e05b4c6c09f070151da7efaeccd4e03fcadf114023530a7f16d31c3f1e81f2d1f45206f8a4b8173408bf5159836262a97aa45e70ba705bec276f96cfbed3dc2252b401e3eba2168d99b256832d1a8594a873d240a6806d9f970dfaf2dd8f821db09eae549692d8cf5a9977a28b2e6cb80027c0da486366f80218decfb0167206fef41fe8dc607d2ef09630f0cf10eef292cab311b40a2b9d54c0da2cbd4ee5a2b88c9a2ddd9d9aa4e5c9c7bee9cfd9519528f02c8a879bf751e2a2e29340e296ce2a208b59384275da6f381c5a630acaefaf40b401d00a18978d4ca1033f8844a78d42e09e4b8aeb4277efe4842f33b019df6dfdc804ded03b7b528982450f634c5da52160233bc92cbf74e9769d4e888c1fce7afda7944c62a832e03a8b6aedb6d42c281880ee3c9caa6c0a6a63668b9a22042efef1493d07d62fdf0de1ff982ed25445fc5636313e7f12aac7ee87b1db0af528917795f368b2cbff84f27ce87b6d33f554d85e8c778f230e7e9a1482835caf82669a00fcfc081513fa830869ae7899af94880f95eb2f36898d91921c4d331e0f839479ea6c4999b09a3f9b0c589d2a34d70cd4b836e77bbd47476b170aceddc981d681ffd5a8c2e02120ff870276dc0b1efab58d5554ff659eb4744f0e909327c0c5e429ab8fde53eb0f203871f29f718d0617b52341d6646f2c78cc602eb05bc47a588f4060857d7263bea35275578e8d26d893629dabb561d6ae7738f6ed446969002a97a4620a85f9b2147e8932043c723e05dcd14cb324add92e6601e9e24c47fb7049b0546f3b59bd2189086f50af05e7ed1b368a17a9117918a0c251f095b31406164db40440ab96680d2777ff18028db29b576098d4643147c78cae57485f57756093cf4290706c09d58a54533a7ece09bc4d6199755c2d820d0ce95420ef74360582fff45d6ab4e5d04e160ab29921139cc2ccc6ca20d4437f2bded1b545ab6bc531da594cc9641cb5b823745c59a5dc984c4b4e0f8dd800afc351256f85f3b7a63323af7c11bb73442d786f883df3d5bfdb7fad63d902b2032403537bb9a36c75fe6e94b355ce3059fa5c8ef95f1e3d58071e6e4d4bb553cc42a1e215291e2a75057f3ef5436c7ca25981477dacdeda9acfc1bc6d90c4a2c3bf3e34d5468bd593297250f2acf180bca8e1882dd7323ee83994d89e6f0ad600f60538558ed623686dc00c5db875c57646e3b213d07c41c68a372aa18e342287dba274a6ac4eef5bcd", 0x470}], 0x3}}], 0x1, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000840)={'vlan0\x00', @random="010000201000"}) 789.808971ms ago: executing program 2 (id=45): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x7, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x88, 0x0, 0x0, 0x41002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000300)=""/225, &(0x7f0000000400)=0xe1) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r1, 0x9, 0x1, 0x0, 0x0, 0x403) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="06000409c90010"], 0x7) landlock_restrict_self(0xffffffffffffffff, 0xc) 596.772599ms ago: executing program 3 (id=51): sigaltstack(&(0x7f0000000000)={&(0x7f0000001c00)=""/4085, 0x80000001, 0xffffffffffffffe0}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x4, 0x1000, {0x0}, {0xffffffffffffffff}, 0x351, 0xfffffffffffffffa}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 596.246522ms ago: executing program 1 (id=52): mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 596.073947ms ago: executing program 3 (id=53): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0xa, @arbitrary=0xf0000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0xfa, 0x10, 0xfff00002}, {0x16, 0x0, 0xfd}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x800, 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='aio\x00', 0x2084, &(0x7f0000000100)='/:{-\x00') 488.707774ms ago: executing program 1 (id=54): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x2, 0x200b, 0x2, 0x100000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000140)='./my_configfs/usb_gadget/g1\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000000fd090000000008000100ac14140008000f00ff007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x13e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b40000000301010200000000000000000100000908000840fffffe000c000e8006000340000400007c0001802c00018014000300fc00000000000000000000001800000014000400fc00000000000000000000000000508d264e028005000100010000000c000280050001003a00000006000340000000001400018008000100ac1414aa08000200ac1414aa0c000280050001002f0000000c0002800500010011000000080015"], 0xb4}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$BLKPG(r1, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 428.233511ms ago: executing program 3 (id=55): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x6}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)="43210098") ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x5, 0x7, 0x7, 0xf}, {0x7, 0x5, 0x7f, 0x9}, {0x38, 0x1, 0x5, 0x8}, {0x7, 0x3, 0x86, 0x6}, {0x81, 0x6, 0x40, 0x9}]}) 428.020684ms ago: executing program 1 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x4, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) r3 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 427.483775ms ago: executing program 0 (id=57): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x3ff, 0xbb9, 0x9425, 0x9, 0x5, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f0000000500)='attr/prev\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xbd6, 0x8000, 0x3}}}}]}, 0x44}}, 0x4008000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newneigh={0x60, 0x1c, 0x4, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, r3, 0x2, 0x8, 0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xd4}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, @NDA_SRC_VNI={0x8, 0xb, 0x403add}, @NDA_PROBES={0x8, 0x4, 0x6}]}, 0x60}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x8, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) 427.221357ms ago: executing program 3 (id=58): mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="07279f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 426.992941ms ago: executing program 0 (id=59): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88942, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88942, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tun(r2, 0x0, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000240)) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r2, 0x431}, {r3, 0x2015}, {r1, 0x4}], 0x3, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f00000002c0)={[0x6]}, 0x8) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000040)={r7, 0xffff9047, 0x2, r7}) (async) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000040)={r7, 0xffff9047, 0x2, r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r7, 0x3, 0x2, r7}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, &(0x7f0000000080)) 360.708009ms ago: executing program 1 (id=60): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x2210088, &(0x7f00000002c0)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000340)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x1000000, 0x28812, r2, 0x74886000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) write$9p(r0, &(0x7f0000000580)="50cc3e37e8", 0x5) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 360.133634ms ago: executing program 3 (id=61): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0xc0050}, 0x20040090) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x45072699, 0x0, 0x0, 0x0, 0xc}], &(0x7f0000000080)='GPL\x00', 0x0, 0xe2, &(0x7f00000000c0)=""/226, 0x41000, 0x6, '\x00', r4, @fallback=0x34, r0, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x7, 0x80000000, 0x98b8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r0, 0x1, r0], 0x0, 0x10, 0x5}, 0x94) 357.575416ms ago: executing program 3 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'lo\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000380)='GPL\x00', 0x2}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x0, 0xf000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="1100f8ae", 0x4}, {&(0x7f0000000200)="00050090b4", 0x5}, {&(0x7f0000000240)="237f", 0x2}], 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 290.221327ms ago: executing program 0 (id=63): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) accept4$unix(r1, &(0x7f0000000080), &(0x7f0000000140)=0x6e, 0x80000) fcntl$setpipe(r0, 0x407, 0x80019e) 289.096927ms ago: executing program 2 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x468103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x7b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000600)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000640)={[{0xf, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0xb, 0x12, 0x5, 0x1}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x22, 0x7, 0x8, 0x20024a9}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f00007b5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="f2430fb314a9c462319d610b400f00d70f01bc4ea000000048b80c000000000000000f23d00f21f835200000050f23f8f3430f09440f082e0f00930090000066bad004b80060ffffef66b865000f00d8", 0x50}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000540)={'wlan1\x00', @random="020000000100"}) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d697400000014000280080001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl(r8, 0x80000001, &(0x7f0000000580)="34ff8b5df2fac331d04e6eaa3863da2b138254be042f3b2ee40969925ee64437c6d2226c36a489594d4f0a6739971ac16aa67d93a5501a734456d7") ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x5, 0x0, [{0x101, 0x2, 0x1, 0x0, @adapter={0x474e, 0x2, 0x32b, 0x1, 0xa}}, {0x6c, 0x1, 0x0, 0x0, @msi={0x81, 0x1, 0x101, 0xf}}, {0x2, 0x3, 0x1, 0x0, @adapter={0x5, 0x0, 0x24, 0x9, 0x9}}, {0x8, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x6, 0x7}}]}) 288.88038ms ago: executing program 0 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100001ccc762afdffbdbdf250000000000080000", @ANYRES32=0x0, @ANYBLOB="4315000040000000200012800b00010067656e65766500001000028004000600060005004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x20008804) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8932, &(0x7f00000000c0)='veth0') (async) ioctl(r1, 0x8932, &(0x7f00000000c0)='veth0') openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/transaction_report\x00', 0x0, 0x0) (async) r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/transaction_report\x00', 0x0, 0x0) accept4$tipc(r2, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) 240.830168ms ago: executing program 0 (id=66): mlockall(0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0x71f17c35bc64209b, 0x0, 0x0, @by_dev={r3}, [@verity={0x0, 0x440, 0x0, 0xc0, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '512', 0x20, 0x36f, 0x20, 0x3ee, 0x20, 'blake2b-256', 0x20, @hex4=[0x61, 0x66, 0x34, 0x66, 0x64, 0x1f, 0x61, 0x66], 0x20, @hex=@hex4=[0x7c, 0x63, 0x34, 0x36, 0x38, 0x62, 0x65, 0x31], ' 1 ignore_corruption'}}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) 80.870392ms ago: executing program 2 (id=67): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x88b02, 0x0) write$P9_RSTATu(r0, &(0x7f00000000c0)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x900, 0x5, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 80.626523ms ago: executing program 1 (id=68): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0xa9, 0x20, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d5}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027f00000101000000020000000000000028"], 0x18) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001400010028bd7000fcdbdf25ff0100000000000000010a0101010000000000000000020000004e2001014e22006b0200a02075000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00010000000a0010000100000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRESOCT=r3, @ANYBLOB="00000000e300020008000a00", @ANYRES64=r1, @ANYRES64=0x0], 0x30}}, 0x0) 80.230346ms ago: executing program 2 (id=69): r0 = socket$inet(0x2, 0x5, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) r2 = eventfd(0xf63) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0xe37d79f098cf4cfa}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x38, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4a9379f155297957) r4 = eventfd2(0xe, 0x80000) r5 = eventfd(0xbd9c) io_submit(0x0, 0x5, &(0x7f00000018c0)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x401, r0, &(0x7f0000000440)="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", 0x1000, 0x1, 0x0, 0x3}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0xb, r0, &(0x7f0000001480)="ceee2b043c90a2d0149a712b5a08b436b4fb3f8799cecef44aa925e3a2be5737ab2a2441a6ce051ba943520673ea83f0823bf6e7b9576b4c4267a40f7b6858782c64e65c53135b3287912fd8bbcc129cd87fba80b0a258f4198c0f4f4f616919f2cd9ac2366fa830a642e67168cb90338d14a81cec8ef8b9f973bdd3a89525b595e647f2ae8b40466add7c6c2093c6c3f8c33e73f8e08443f568c99392adce3cfab54e8f50d156af2a15d3b33af6a3baabe56a924cbe763f8ef26397729915548dfdae0c283fc1c1c7420f85b1d86f7440d70b175d6b5f601a7fa2ca29bbc34bd0a4287cd3a1f27665225bf5c678f1b6978481", 0xf3, 0x9bb2, 0x0, 0x1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f00000015c0)="49e143e1cd57c35726a61f6e70c99e6c1147b39ba6e4447a478456b8600045fec34fbdc80be3495c881db58e7b49a0b13818b2517f6f3e4a2cd63503417cfba5e160d3c16f7e51053a2d7304c2a2ae8d21340155c5e2a0d1aec7df89bca05d4b1237d55138b80184204cfdde9283da7eaf7c4a61ed044f3cc706ab96a7d26d8b51d5dae7279231c3754dd7267e57ddaad17aa13699cbc02ea908f97e1599d55c16226dabd2d9e35aae9978835b2b248570704ec6e89efd0eca27e152626f29f8cd55fa25e228e656", 0xc8, 0x8, 0x0, 0x2, r2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x5, 0x7ff, r0, &(0x7f0000001700)="f1a3", 0x2, 0xd107, 0x0, 0x2, r4}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x6, 0x7fff, r0, &(0x7f0000001780)="cfc80306716f26f2d721b2627a3fdc5333cc8e419d7a1fa6949cb45557bfe7c1da0290a69474957f1582d3bd327f51270c027832db401e4113c4ae41407125776d07e94a673f0da7a012d389b1a2ae7e7903b16564cb4da02d572e9d39f0126c771ffb8e0d537b7a7bebbba7155a33686bc5367e69d791b0ea5a848f823abef5ac457761033ff02e2303d07587a8bbdb194ad36fb20bd9455dfb70f5e10f91371620bd617307d01276557b52fce94f45a7b282c8db7f3c6db075b9dd5c208cde1b3125bb4ea641ad61c51d68543a6bea0db1", 0xd2, 0x3, 0x0, 0x0, r5}]) r6 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000001900)=""/132, &(0x7f00000019c0)=0x84) syz_clone3(&(0x7f0000000200)={0x200908280, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x2e}, &(0x7f00000002c0)=""/155, 0x9b, &(0x7f0000000180)=""/28, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x80) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10010, r9, 0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r8) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0xf5, 0x0) 587.893µs ago: executing program 1 (id=70): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0xa82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) lstat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_int(r5, &(0x7f00000002c0)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 0s ago: executing program 2 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x22, &(0x7f0000000340)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}}}}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000340)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000740)=[{{&(0x7f0000000800)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000980)="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", 0x12d}, {&(0x7f0000000ac0)="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", 0x113}, {&(0x7f0000000c00)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000cc0)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000dc0)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) (async) sendmmsg$inet(r3, &(0x7f0000000740)=[{{&(0x7f0000000800)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000980)="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", 0x12d}, {&(0x7f0000000ac0)="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", 0x113}, {&(0x7f0000000c00)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000cc0)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000dc0)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r3, &(0x7f0000000f40), 0x5b0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000400)="662e0f1f84", 0x5) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x7, 0x12, r4, 0x0) pipe2(&(0x7f0000000440)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000480)="488d642480e8", 0x6) read(r5, &(0x7f00000004c0)=""/10, 0xa) (async) read(r5, &(0x7f00000004c0)=""/10, 0xa) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5) (async) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/kernel/kernel_sys_info\x00', 0x1, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/kernel/kernel_sys_info\x00', 0x1, 0x0) write(r7, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x50000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r8, r7, 0x30, 0x0, @void}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000380)={0x1, 0x2b9, 0x6, @empty, 'ip6gretap0\x00'}) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000380)={0x1, 0x2b9, 0x6, @empty, 'ip6gretap0\x00'}) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$kcm(0x29, 0x5, 0x0) kernel console output (not intermixed with test programs): [ 30.927522][ T43] audit: type=1400 audit(1794067783.675:116): avc: denied { write } for pid=5691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:34174' (ED25519) to the list of known hosts. [ 30.986668][ T43] audit: type=1400 audit(1794067783.725:117): avc: denied { write } for pid=5695 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.042915][ T43] audit: type=1400 audit(1794067783.785:118): avc: denied { name_bind } for pid=5700 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.058611][ T43] audit: type=1400 audit(1794067783.805:119): avc: denied { write } for pid=5699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.072368][ T43] audit: type=1400 audit(1794067783.815:120): avc: denied { execute } for pid=5701 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.073120][ T43] audit: type=1400 audit(1794067783.815:121): avc: denied { execute_no_trans } for pid=5701 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.117812][ T43] audit: type=1400 audit(1794067783.865:122): avc: denied { write } for pid=5704 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.779805][ T43] audit: type=1400 audit(1794067784.525:123): avc: denied { write } for pid=5707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.823982][ T43] audit: type=1400 audit(1794067784.565:124): avc: denied { write } for pid=5710 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.945207][ T43] audit: type=1400 audit(1794067784.685:125): avc: denied { write } for pid=5713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.149311][ T5701] cgroup: Unknown subsys name 'net' [ 33.270098][ T5701] cgroup: Unknown subsys name 'cpuset' [ 33.276979][ T5701] cgroup: Unknown subsys name 'rlimit' [ 33.508419][ T5765] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.513251][ T5701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.545008][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 38.545019][ T43] audit: type=1400 audit(1794067791.295:154): avc: denied { execmem } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.771994][ T43] audit: type=1400 audit(1794067791.515:155): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.772475][ T43] audit: type=1400 audit(1794067791.515:156): avc: denied { read write } for pid=5779 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.772845][ T43] audit: type=1400 audit(1794067791.515:157): avc: denied { open } for pid=5779 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.779050][ T43] audit: type=1400 audit(1794067791.525:158): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[8194]" dev="sockfs" ino=8194 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.799428][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.800505][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.800862][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.801353][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.801664][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.809354][ T43] audit: type=1400 audit(1794067791.555:159): avc: denied { read } for pid=5779 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.812043][ T43] audit: type=1400 audit(1794067791.555:160): avc: denied { open } for pid=5779 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.812084][ T43] audit: type=1400 audit(1794067791.555:161): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.816312][ T43] audit: type=1400 audit(1794067791.565:162): avc: denied { module_request } for pid=5779 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.838871][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.839849][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.841297][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.841989][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.842316][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.842947][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.843831][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.843983][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.845142][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.846169][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.846886][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.847009][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.847524][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.860359][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.867050][ T43] audit: type=1400 audit(1794067791.615:163): avc: denied { sys_module } for pid=5779 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.868309][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.050759][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.052081][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.052968][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.053767][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.066063][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.137873][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 39.153457][ T5779] infiniband rxe0: set active [ 39.154382][ T5779] infiniband rxe0: added rxe_eth0 [ 39.157850][ T1720] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.159526][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.179003][ T5779] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 39.179024][ T5779] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 39.179043][ T5779] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 39.202172][ T5779] RDS/IB: rxe0: added [ 39.202299][ T5779] smc: adding ib device rxe0 with port count 1 [ 39.202344][ T5779] smc: ib device rxe0 port 1 has no pnetid [ 39.217596][ T2364] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.314863][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.375800][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.376327][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.376390][ T5783] bridge_slave_0: entered allmulticast mode [ 39.377144][ T5783] bridge_slave_0: entered promiscuous mode [ 39.404217][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.404315][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.404401][ T5783] bridge_slave_1: entered allmulticast mode [ 39.405317][ T5783] bridge_slave_1: entered promiscuous mode [ 39.434773][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.441884][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.452398][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.452441][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.452500][ T5785] bridge_slave_0: entered allmulticast mode [ 39.453192][ T5785] bridge_slave_0: entered promiscuous mode [ 39.465252][ T5783] team0: Port device team_slave_0 added [ 39.465278][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.466091][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.466141][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.466200][ T5785] bridge_slave_1: entered allmulticast mode [ 39.466870][ T5785] bridge_slave_1: entered promiscuous mode [ 39.475067][ T5783] team0: Port device team_slave_1 added [ 39.502201][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.502215][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.502233][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.517153][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.523475][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.523485][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.523496][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.532372][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.564219][ T5785] team0: Port device team_slave_0 added [ 39.582878][ T5785] team0: Port device team_slave_1 added [ 39.616372][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.616446][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.616461][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.621951][ T5783] hsr_slave_0: entered promiscuous mode [ 39.622728][ T5783] hsr_slave_1: entered promiscuous mode [ 39.627238][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.627250][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.627265][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.681561][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.703365][ T5785] hsr_slave_0: entered promiscuous mode [ 39.703838][ T5785] hsr_slave_1: entered promiscuous mode [ 39.704129][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 39.704137][ T5785] Cannot create hsr debugfs directory [ 39.795163][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.795241][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.795301][ T5784] bridge_slave_0: entered allmulticast mode [ 39.796059][ T5784] bridge_slave_0: entered promiscuous mode [ 39.817750][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.817794][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.818025][ T5784] bridge_slave_1: entered allmulticast mode [ 39.818702][ T5784] bridge_slave_1: entered promiscuous mode [ 39.862637][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.883873][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.920984][ T5784] team0: Port device team_slave_0 added [ 39.925951][ T5784] team0: Port device team_slave_1 added [ 39.958669][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.958686][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.958705][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.966706][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.966721][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.966740][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.003356][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.007912][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.008567][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.011607][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.022395][ T5784] hsr_slave_0: entered promiscuous mode [ 40.023076][ T5784] hsr_slave_1: entered promiscuous mode [ 40.023572][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 40.023583][ T5784] Cannot create hsr debugfs directory [ 40.024808][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.028454][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.052951][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.056652][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.167155][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.170081][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.176014][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.179868][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.186722][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.186774][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.187165][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.187211][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.193166][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.195766][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.196136][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.199254][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.274159][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.277601][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.322712][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.322800][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.322882][ T5779] bridge_slave_0: entered allmulticast mode [ 40.324061][ T5779] bridge_slave_0: entered promiscuous mode [ 40.341476][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.341573][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.341815][ T5779] bridge_slave_1: entered allmulticast mode [ 40.343280][ T5779] bridge_slave_1: entered promiscuous mode [ 40.373724][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.382075][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.403827][ T5779] team0: Port device team_slave_0 added [ 40.403860][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.410566][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.411843][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.414279][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.415164][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.419271][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.420295][ T5779] team0: Port device team_slave_1 added [ 40.420315][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.422412][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.448348][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.448360][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.448399][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.450129][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.450137][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.450148][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.506738][ T5779] hsr_slave_0: entered promiscuous mode [ 40.507172][ T5779] hsr_slave_1: entered promiscuous mode [ 40.507695][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 40.507704][ T5779] Cannot create hsr debugfs directory [ 40.523735][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.575293][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.595588][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.609601][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.609648][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.617928][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.617973][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.629802][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.676682][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.676771][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.681113][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.681157][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.686773][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.699049][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.701198][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.701792][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.703729][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.705756][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.708830][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.715715][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.719916][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.740401][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.752292][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.752338][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.767806][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.767874][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.815121][ T5795] Bluetooth: hci0: command tx timeout [ 40.830913][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.842794][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.849866][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.849918][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.853949][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.853994][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.894871][ T5795] Bluetooth: hci3: command tx timeout [ 40.895074][ T5795] Bluetooth: hci2: command tx timeout [ 40.895142][ T5795] Bluetooth: hci1: command tx timeout [ 40.962761][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.986630][ T5783] veth0_vlan: entered promiscuous mode [ 40.991964][ T5783] veth1_vlan: entered promiscuous mode [ 41.012428][ T5783] veth0_macvtap: entered promiscuous mode [ 41.014987][ T5783] veth1_macvtap: entered promiscuous mode [ 41.022570][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.028161][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.062556][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.087073][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.087088][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.094018][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.125872][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.125886][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.133254][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.135184][ T5785] veth0_vlan: entered promiscuous mode [ 41.152225][ T5784] veth0_vlan: entered promiscuous mode [ 41.155031][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.155347][ T5785] veth1_vlan: entered promiscuous mode [ 41.160589][ T5784] veth1_vlan: entered promiscuous mode [ 41.205020][ T5785] veth0_macvtap: entered promiscuous mode [ 41.209311][ T5785] veth1_macvtap: entered promiscuous mode [ 41.210155][ T5779] veth0_vlan: entered promiscuous mode [ 41.211694][ T5784] veth0_macvtap: entered promiscuous mode [ 41.218009][ T5779] veth1_vlan: entered promiscuous mode [ 41.220677][ T5784] veth1_macvtap: entered promiscuous mode [ 41.224768][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.224801][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.227806][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.229548][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.237634][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.250971][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.258815][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.263941][ T5779] veth0_macvtap: entered promiscuous mode [ 41.271462][ T5779] veth1_macvtap: entered promiscuous mode [ 41.299781][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.311851][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.326120][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.326133][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.349146][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.349159][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.379407][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.379420][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.380662][ T5936] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 41.395444][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.395456][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.413882][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.413895][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.437594][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.437608][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.456349][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.456537][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.456712][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.456929][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457090][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457324][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457584][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457714][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.505423][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.505464][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.505492][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.505520][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.505547][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.759460][ T5960] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 41.824347][ T5961] Bluetooth: MGMT ver 1.23 [ 42.045303][ T5935] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.057895][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.058740][ T5963] bond1: (slave bond0): Enslaving as an active interface with an up link [ 42.102057][ T5966] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use) [ 42.216684][ T5935] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 42.218193][ T5935] usb 7-1: config index 0 descriptor too short (expected 65445, got 45) [ 42.219771][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.219783][ T5935] usb 7-1: Product: syz [ 42.219790][ T5935] usb 7-1: Manufacturer: syz [ 42.219796][ T5935] usb 7-1: SerialNumber: syz [ 42.354591][ T2364] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 42.386276][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 42.433992][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.441236][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.525720][ T2364] usb 5-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 42.526203][ T2364] usb 5-1: config 0 has no interfaces? [ 42.527799][ T2364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.527811][ T2364] usb 5-1: Product: syz [ 42.527854][ T2364] usb 5-1: Manufacturer: syz [ 42.527863][ T2364] usb 5-1: SerialNumber: syz [ 42.529453][ T2364] usb 5-1: config 0 descriptor?? [ 42.640992][ T38] IPVS: starting estimator thread 0... [ 42.681422][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 42.734786][ T5976] IPVS: using max 23 ests per chain, 55200 per kthread [ 42.740696][ T1724] usb 5-1: USB disconnect, device number 2 [ 42.974629][ T5794] Bluetooth: hci2: command tx timeout [ 42.974654][ T5795] Bluetooth: hci3: command tx timeout [ 43.076901][ T5984] i2c i2c-0: delete_device: Can't parse I2C address [ 43.399144][ T6007] FAULT_INJECTION: forcing a failure. [ 43.399144][ T6007] name failslab, interval 1, probability 0, space 0, times 1 [ 43.399172][ T6007] CPU: 3 UID: 0 PID: 6007 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 43.399184][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.399190][ T6007] Call Trace: [ 43.399201][ T6007] [ 43.399207][ T6007] dump_stack_lvl+0x100/0x190 [ 43.399253][ T6007] should_fail_ex.cold+0x5/0xa [ 43.399271][ T6007] should_failslab+0xc2/0x120 [ 43.399284][ T6007] kmem_cache_alloc_noprof+0x92/0x6a0 [ 43.399301][ T6007] ? do_getname+0x35/0x390 [ 43.399318][ T6007] do_getname+0x35/0x390 [ 43.399334][ T6007] do_sys_openat2+0xc3/0x1d0 [ 43.399348][ T6007] ? __pfx_do_sys_openat2+0x10/0x10 [ 43.399362][ T6007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 43.399415][ T6007] __x64_sys_openat+0x12d/0x210 [ 43.399431][ T6007] ? __pfx___x64_sys_openat+0x10/0x10 [ 43.399452][ T6007] do_syscall_64+0x123/0x790 [ 43.399466][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.399477][ T6007] RIP: 0033:0x7fb663b9fb19 [ 43.399486][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.399496][ T6007] RSP: 002b:00007fb6649b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.399513][ T6007] RAX: ffffffffffffffda RBX: 00007fb663e25fa0 RCX: 00007fb663b9fb19 [ 43.399520][ T6007] RDX: 0000000000000080 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 43.399526][ T6007] RBP: 00007fb663c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 43.399531][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.399537][ T6007] R13: 00007fb663e26038 R14: 00007fb663e25fa0 R15: 00007ffd9236d0a8 [ 43.399552][ T6007] [ 43.404149][ T5935] rtl8150 7-1:1.0: couldn't reset the device [ 43.414517][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 43.414535][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 43.437296][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 43.437314][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 43.444532][ T5853] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.460685][ T5935] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 43.466585][ T5853] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.466619][ T5853] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.466636][ T5853] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.491421][ T6009] ======================================================= [ 43.491421][ T6009] WARNING: The mand mount option has been deprecated and [ 43.491421][ T6009] and is ignored by this kernel. Remove the mand [ 43.491421][ T6009] option from the mount to silence this warning. [ 43.491421][ T6009] ======================================================= [ 43.534616][ T5795] Bluetooth: hci1: command tx timeout [ 43.577830][ T43] kauditd_printk_skb: 94 callbacks suppressed [ 43.577842][ T43] audit: type=1400 audit(1794067796.325:258): avc: denied { create } for pid=6013 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.577869][ T43] audit: type=1400 audit(1794067796.325:259): avc: denied { connect } for pid=6013 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.577887][ T43] audit: type=1400 audit(1794067796.325:260): avc: denied { setopt } for pid=6013 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.642467][ T6021] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.642945][ T43] audit: type=1400 audit(1794067796.385:261): avc: denied { mounton } for pid=6019 comm="syz.0.26" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.643002][ T6021] tmpfs: Unknown parameter 'hugeHadvise' [ 43.674197][ T6026] capability: warning: `syz.3.29' uses deprecated v2 capabilities in a way that may be insecure [ 43.683342][ T6024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6024 comm=syz.0.28 [ 43.683357][ T6024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6024 comm=syz.0.28 [ 43.694075][ T5935] usb 7-1: USB disconnect, device number 2 [ 43.731756][ T6031] ip6gretap0: entered promiscuous mode [ 43.732150][ T43] audit: type=1400 audit(1794067796.475:262): avc: denied { create } for pid=6027 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.732438][ T43] audit: type=1400 audit(1794067796.475:263): avc: denied { setopt } for pid=6027 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.747168][ T6034] overlayfs: failed to resolve './file1/file0': -2 [ 43.784542][ T5795] Bluetooth: hci0: command tx timeout [ 43.796789][ T6042] Cannot find add_set index 65532 as target [ 43.800991][ T43] audit: type=1400 audit(1794067796.545:264): avc: denied { unlink } for pid=6040 comm="syz.1.35" name="#1" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.801358][ T6041] overlayfs: upper fs does not support file handles, falling back to index=off. [ 43.801368][ T6041] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 43.812038][ T43] audit: type=1400 audit(1794067796.555:265): avc: denied { name_bind } for pid=6044 comm="syz.3.36" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.812795][ T43] audit: type=1400 audit(1794067796.555:266): avc: denied { mount } for pid=6044 comm="syz.3.36" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.834929][ T6045] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 44.005571][ T43] audit: type=1400 audit(1794067796.755:267): avc: denied { setopt } for pid=6052 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.033064][ T6058] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 44.059816][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.062645][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.091409][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 44.091424][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 44.099545][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.101783][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.153424][ T6063] netlink: 49 bytes leftover after parsing attributes in process `syz.1.42'. [ 44.165804][ T6063] Zero length message leads to an empty skb [ 44.174963][ T5832] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.174981][ T5832] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.174998][ T5832] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.175010][ T5832] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.175026][ T5832] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.175038][ T5832] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.175053][ T5832] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.175065][ T5832] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.215989][ T6066] No source specified [ 44.285491][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.46'. [ 44.390315][ T6081] kvm: emulating exchange as write [ 44.663972][ T6098] hfs: unable to load iocharset "io#harset" qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 44.762537][ T6116] syz.3.62 uses obsolete (PF_INET,SOCK_PACKET) [ 44.883379][ T6128] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 45.054106][ T6139] ip_tables: iptables: counters copy to user failed while replacing table [ 45.055625][ T5795] Bluetooth: hci3: command tx timeout [ 45.055645][ T5795] Bluetooth: hci2: command tx timeout [ 45.223366][ T6137] [ 45.224229][ T6137] ====================================================== [ 45.226416][ T6137] WARNING: possible circular locking dependency detected [ 45.228566][ T6137] syzkaller #0 Not tainted [ 45.230045][ T6137] ------------------------------------------------------ [ 45.232203][ T6137] syz.1.70/6137 is trying to acquire lock: [ 45.234039][ T6137] ffff88802edf2938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x509/0xe00 [ 45.237073][ T6137] [ 45.237073][ T6137] but task is already holding lock: [ 45.239335][ T6137] ffff88804b0ce880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 45.242205][ T6137] [ 45.242205][ T6137] which lock already depends on the new lock. [ 45.242205][ T6137] [ 45.245399][ T6137] [ 45.245399][ T6137] the existing dependency chain (in reverse order) is: [ 45.248164][ T6137] [ 45.248164][ T6137] -> #3 (&of->mutex){+.+.}-{4:4}: [ 45.250396][ T6137] lock_acquire+0x1d1/0x380 [ 45.251972][ T6137] __mutex_lock+0x19f/0x1c10 [ 45.253594][ T6137] kernfs_seq_start+0x4f/0x2a0 [ 45.255257][ T6137] seq_read_iter+0x2c1/0x1270 [ 45.256904][ T6137] kernfs_fop_read_iter+0x46c/0x610 [ 45.258670][ T6137] copy_splice_read+0x4ba/0xbb0 [ 45.260346][ T6137] do_splice_read+0x285/0x370 [ 45.261963][ T6137] splice_file_to_pipe+0x82/0x120 [ 45.263675][ T6137] do_sendfile+0x366/0xe20 [ 45.265234][ T6137] __x64_sys_sendfile64+0x1d8/0x220 [ 45.266997][ T6137] do_syscall_64+0x123/0x790 [ 45.268597][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.270673][ T6137] [ 45.270673][ T6137] -> #2 (&p->lock){+.+.}-{4:4}: [ 45.272843][ T6137] lock_acquire+0x1d1/0x380 [ 45.274433][ T6137] __mutex_lock+0x19f/0x1c10 [ 45.276031][ T6137] seq_read_iter+0xe1/0x1270 [ 45.277636][ T6137] kernfs_fop_read_iter+0x46c/0x610 [ 45.279412][ T6137] copy_splice_read+0x4ba/0xbb0 [ 45.281084][ T6137] do_splice_read+0x285/0x370 [ 45.282697][ T6137] splice_file_to_pipe+0x82/0x120 [ 45.284448][ T6137] do_sendfile+0x366/0xe20 [ 45.285987][ T6137] __x64_sys_sendfile64+0x1d8/0x220 [ 45.287751][ T6137] do_syscall_64+0x123/0x790 [ 45.289357][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.291334][ T6137] [ 45.291334][ T6137] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 45.293618][ T6137] lock_acquire+0x1d1/0x380 [ 45.295225][ T6137] __mutex_lock+0x19f/0x1c10 [ 45.296847][ T6137] anon_pipe_prefill_and_lock+0x16c/0x580 [ 45.298783][ T6137] anon_pipe_write+0x164/0x1bb0 [ 45.300452][ T6137] __kernel_write_iter+0x6bb/0x930 [ 45.302197][ T6137] __kernel_write+0xf6/0x140 [ 45.303779][ T6137] autofs_notify_daemon+0x51e/0xe00 [ 45.305556][ T6137] autofs_wait+0x10f8/0x1b30 [ 45.307148][ T6137] autofs_mount_wait+0x132/0x3b0 [ 45.308846][ T6137] autofs_d_automount+0x490/0x950 [ 45.310564][ T6137] __traverse_mounts+0x1b9/0x8a0 [ 45.312269][ T6137] step_into_slowpath+0xb7e/0xf90 [ 45.313993][ T6137] path_lookupat+0x58b/0xc40 [ 45.315587][ T6137] filename_lookup+0x202/0x590 [ 45.317256][ T6137] vfs_statx+0xff/0x3f0 [ 45.318732][ T6137] __do_sys_newlstat+0xaa/0x130 [ 45.320408][ T6137] do_syscall_64+0x123/0x790 [ 45.322007][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.323987][ T6137] [ 45.323987][ T6137] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 45.326372][ T6137] check_prev_add+0xeb/0xe60 [ 45.327974][ T6137] __lock_acquire+0x1528/0x1f40 [ 45.329652][ T6137] lock_acquire+0x1d1/0x380 [ 45.331219][ T6137] __mutex_lock+0x19f/0x1c10 [ 45.332813][ T6137] autofs_notify_daemon+0x509/0xe00 [ 45.334594][ T6137] autofs_wait+0x10f8/0x1b30 [ 45.336195][ T6137] autofs_mount_wait+0x132/0x3b0 [ 45.337894][ T6137] autofs_d_automount+0x490/0x950 [ 45.339697][ T6137] __traverse_mounts+0x1b9/0x8a0 [ 45.341410][ T6137] step_into_slowpath+0xb7e/0xf90 [ 45.343129][ T6137] path_lookupat+0x58b/0xc40 [ 45.344747][ T6137] filename_lookup+0x202/0x590 [ 45.346399][ T6137] kern_path+0x37/0x50 [ 45.347875][ T6137] lookup_bdev+0xd8/0x2a0 [ 45.349410][ T6137] resume_store+0x1f5/0x480 [ 45.350978][ T6137] kobj_attr_store+0x58/0x80 [ 45.352576][ T6137] sysfs_kf_write+0xf2/0x150 [ 45.354181][ T6137] kernfs_fop_write_iter+0x3e0/0x5f0 [ 45.356003][ T6137] vfs_write+0x6af/0x1050 [ 45.357527][ T6137] ksys_write+0x12a/0x250 [ 45.359046][ T6137] do_syscall_64+0x123/0x790 [ 45.360644][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.362622][ T6137] [ 45.362622][ T6137] other info that might help us debug this: [ 45.362622][ T6137] [ 45.365734][ T6137] Chain exists of: [ 45.365734][ T6137] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 45.365734][ T6137] [ 45.369406][ T6137] Possible unsafe locking scenario: [ 45.369406][ T6137] [ 45.371695][ T6137] CPU0 CPU1 [ 45.373387][ T6137] ---- ---- [ 45.375084][ T6137] lock(&of->mutex); [ 45.376355][ T6137] lock(&p->lock); [ 45.378399][ T6137] lock(&of->mutex); [ 45.380416][ T6137] lock(&sbi->pipe_mutex); [ 45.381816][ T6137] [ 45.381816][ T6137] *** DEADLOCK *** [ 45.381816][ T6137] [ 45.384322][ T6137] locks held by syz.1.70/6137: 4, last CPU#2: [ 45.386202][ T6137] #0: ffff88803732aef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 45.388993][ T6137] #1: ffff88802c724478 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 45.391743][ T6137] #2: ffff88804b0ce880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 45.394749][ T6137] #3: ffff88801e725e18 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 45.397840][ T6137] [ 45.397840][ T6137] stack backtrace: [ 45.399667][ T6137] CPU: 2 UID: 0 PID: 6137 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) [ 45.402457][ T6137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.405571][ T6137] Call Trace: [ 45.406636][ T6137] [ 45.407571][ T6137] dump_stack_lvl+0x100/0x190 [ 45.409066][ T6137] print_circular_bug.cold+0x178/0x1be [ 45.410766][ T6137] check_noncircular+0x146/0x160 [ 45.412326][ T6137] check_prev_add+0xeb/0xe60 [ 45.413801][ T6137] __lock_acquire+0x1528/0x1f40 [ 45.415330][ T6137] lock_acquire+0x1d1/0x380 [ 45.416773][ T6137] ? autofs_notify_daemon+0x509/0xe00 [ 45.418437][ T6137] ? __pfx___might_resched+0x10/0x10 [ 45.420081][ T6137] __mutex_lock+0x19f/0x1c10 [ 45.421519][ T6137] ? autofs_notify_daemon+0x509/0xe00 [ 45.423185][ T6137] ? autofs_notify_daemon+0x509/0xe00 [ 45.424863][ T6137] ? find_held_lock+0x2b/0x80 [ 45.426327][ T6137] ? autofs_notify_daemon+0x4b1/0xe00 [ 45.427991][ T6137] ? autofs_notify_daemon+0x4b1/0xe00 [ 45.429659][ T6137] ? __pfx___mutex_lock+0x10/0x10 [ 45.431228][ T6137] ? __mutex_unlock_slowpath+0x35d/0x930 [ 45.432970][ T6137] ? from_kgid_munged+0xab/0x130 [ 45.434534][ T6137] ? __pfx_from_kgid_munged+0x10/0x10 [ 45.436206][ T6137] ? __traverse_mounts+0x1b9/0x8a0 [ 45.437800][ T6137] ? autofs_notify_daemon+0x509/0xe00 [ 45.439466][ T6137] autofs_notify_daemon+0x509/0xe00 [ 45.441090][ T6137] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 45.442858][ T6137] ? lockdep_init_map_type+0x5c/0x250 [ 45.444562][ T6137] ? lockdep_init_map_type+0x5c/0x250 [ 45.446232][ T6137] autofs_wait+0x10f8/0x1b30 [ 45.447680][ T6137] ? __pfx_autofs_wait+0x10/0x10 [ 45.449225][ T6137] ? find_held_lock+0x2b/0x80 [ 45.450690][ T6137] ? path_has_submounts+0xcf/0x120 [ 45.452285][ T6137] ? do_raw_spin_unlock+0x145/0x1e0 [ 45.453914][ T6137] ? find_held_lock+0x2b/0x80 [ 45.455381][ T6137] autofs_mount_wait+0x132/0x3b0 [ 45.456949][ T6137] autofs_d_automount+0x490/0x950 [ 45.458515][ T6137] __traverse_mounts+0x1b9/0x8a0 [ 45.460065][ T6137] step_into_slowpath+0xb7e/0xf90 [ 45.461640][ T6137] ? rcu_is_watching+0x13/0xc0 [ 45.463139][ T6137] ? __pfx_step_into_slowpath+0x10/0x10 [ 45.464889][ T6137] ? lookup_slow+0x5f/0x80 [ 45.466296][ T6137] ? lookup_slow+0x5f/0x80 [ 45.467696][ T6137] path_lookupat+0x58b/0xc40 [ 45.469145][ T6137] filename_lookup+0x202/0x590 [ 45.470635][ T6137] ? __pfx_filename_lookup+0x10/0x10 [ 45.472283][ T6137] ? do_getname_kernel+0x5d/0x250 [ 45.473877][ T6137] ? __asan_memcpy+0x3c/0x60 [ 45.475327][ T6137] kern_path+0x37/0x50 [ 45.476630][ T6137] lookup_bdev+0xd8/0x2a0 [ 45.477994][ T6137] ? __pfx_lookup_bdev+0x10/0x10 [ 45.479538][ T6137] ? __asan_memcpy+0x3c/0x60 [ 45.480990][ T6137] resume_store+0x1f5/0x480 [ 45.482404][ T6137] ? __pfx_resume_store+0x10/0x10 [ 45.483990][ T6137] ? lock_acquire+0x1d1/0x380 [ 45.485461][ T6137] ? sysfs_file_kobj+0x21/0x290 [ 45.486981][ T6137] ? find_held_lock+0x2b/0x80 [ 45.488457][ T6137] ? sysfs_file_kobj+0xe4/0x290 [ 45.489973][ T6137] ? sysfs_file_kobj+0xe4/0x290 [ 45.491485][ T6137] ? __pfx_resume_store+0x10/0x10 [ 45.493054][ T6137] kobj_attr_store+0x58/0x80 [ 45.494512][ T6137] ? __pfx_kobj_attr_store+0x10/0x10 [ 45.496159][ T6137] sysfs_kf_write+0xf2/0x150 [ 45.497611][ T6137] kernfs_fop_write_iter+0x3e0/0x5f0 [ 45.499249][ T6137] ? __pfx_sysfs_kf_write+0x10/0x10 [ 45.500877][ T6137] vfs_write+0x6af/0x1050 [ 45.502226][ T6137] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 45.504042][ T6137] ? __pfx_vfs_write+0x10/0x10 [ 45.505540][ T6137] ? find_held_lock+0x2b/0x80 [ 45.507016][ T6137] ksys_write+0x12a/0x250 [ 45.508369][ T6137] ? __pfx_ksys_write+0x10/0x10 [ 45.509889][ T6137] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 45.511745][ T6137] do_syscall_64+0x123/0x790 [ 45.513211][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.515046][ T6137] RIP: 0033:0x7f1233f9fb19 [ 45.516462][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.522330][ T6137] RSP: 002b:00007f1234f44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.524920][ T6137] RAX: ffffffffffffffda RBX: 00007f1234225fa0 RCX: 00007f1233f9fb19 [ 45.527374][ T6137] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 0000000000000008 [ 45.529809][ T6137] RBP: 00007f1234037b70 R08: 0000000000000000 R09: 0000000000000000 [ 45.532248][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.534691][ T6137] R13: 00007f1234226038 R14: 00007f1234225fa0 R15: 00007fff4024de38 [ 45.537142][ T6137] [ 45.538966][ T6137] PM: Image not found (code -6) [ 45.614516][ T5794] Bluetooth: hci1: command tx timeout [ 45.864576][ T5794] Bluetooth: hci0: command tx timeout [ 47.134566][ T5794] Bluetooth: hci3: command tx timeout [ 47.134585][ T5794] Bluetooth: hci2: command tx timeout [ 49.883768][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.912397][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 49.912412][ T43] audit: type=1400 audit(1794067802.655:314): avc: denied { write } for pid=6157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.946884][ T43] audit: type=1400 audit(1794067802.695:315): avc: denied { write } for pid=6160 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1