last executing test programs: 6.142747387s ago: executing program 1 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 4.787736524s ago: executing program 2 (id=34): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xc1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xfe) 4.536862458s ago: executing program 3 (id=37): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "d2c4924f5689213dc64c3b6e6ff82a75e5318fca4288c20600000072020bcd2c"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 4.47052917s ago: executing program 0 (id=38): socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 4.455226299s ago: executing program 3 (id=39): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.248953214s ago: executing program 0 (id=40): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) 4.22688792s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/file0\x00', 0xaf) munmap(&(0x7f00008b4000/0x4000)=nil, 0x4000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) madvise(&(0x7f0000da1000/0x4000)=nil, 0x4000, 0x2) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.592856042s ago: executing program 0 (id=43): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.544992383s ago: executing program 1 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000003ce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.742861624s ago: executing program 3 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x419, &(0x7f0000000340)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4044094, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.551891338s ago: executing program 2 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.372035595s ago: executing program 1 (id=48): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.274720443s ago: executing program 4 (id=49): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 2.032128195s ago: executing program 4 (id=50): semget(0x1, 0x2, 0x93) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) close_range(r0, 0xffffffffffffffff, 0x0) 1.955907693s ago: executing program 1 (id=51): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277fffffeb"}) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xd, 0x0, 0x0, 0x82fb, 0xe, "1eb4d10000000800"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 1.858115647s ago: executing program 4 (id=52): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0xdfffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r3, &(0x7f0000000700)=""/90, 0x5a, 0x500, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.800327358s ago: executing program 2 (id=53): syz_open_procfs(0x0, &(0x7f00000006c0)='uid_map\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c805000000000000290000000300000043b6a6b2aa"], 0x5c8}, 0xf7e5) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 1.580146389s ago: executing program 4 (id=54): bpf$MAP_CREATE(0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0xffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/39, 0x27}], 0x1) 1.449672785s ago: executing program 2 (id=55): ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.256302419s ago: executing program 3 (id=56): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1.240626517s ago: executing program 2 (id=57): openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) fcntl$setpipe(r2, 0x407, 0x7000000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 1.151012024s ago: executing program 0 (id=58): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x780, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xf, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) write$UHID_INPUT(r5, 0x0, 0x0) 1.052245945s ago: executing program 0 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write(0xffffffffffffffff, &(0x7f0000000100)="094f2a3589cfbfdb5c318568291435ca23f9f2ac3854", 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 982.195735ms ago: executing program 1 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x300, 0x48, 0x0) 530.414096ms ago: executing program 4 (id=61): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) setreuid(0x0, 0xee00) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x57a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r1, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 462.736265ms ago: executing program 1 (id=62): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 282.841545ms ago: executing program 4 (id=63): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0xb7d4, 0x1001f0) 244.975258ms ago: executing program 3 (id=64): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 152.255102ms ago: executing program 0 (id=65): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x8850) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) 0s ago: executing program 2 (id=66): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 48.568766][ T29] audit: type=1400 audit(1737706250.178:88): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.571823][ T5803] cgroup: Unknown subsys name 'net' [ 48.591492][ T29] audit: type=1400 audit(1737706250.188:89): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.618830][ T29] audit: type=1400 audit(1737706250.218:90): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.801217][ T5803] cgroup: Unknown subsys name 'cpuset' [ 48.808039][ T5803] cgroup: Unknown subsys name 'rlimit' [ 48.990168][ T29] audit: type=1400 audit(1737706250.608:91): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.020647][ T29] audit: type=1400 audit(1737706250.608:92): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.045135][ T29] audit: type=1400 audit(1737706250.608:93): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.061109][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.065680][ T29] audit: type=1400 audit(1737706250.608:94): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.094586][ T29] audit: type=1400 audit(1737706250.608:95): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.119562][ T29] audit: type=1400 audit(1737706250.608:96): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.142858][ T29] audit: type=1400 audit(1737706250.638:97): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.883516][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.624020][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.639970][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.647672][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.655044][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.662433][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.671619][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.679152][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.687148][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.695212][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.702407][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.709461][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.719912][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.727442][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.735194][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.743040][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.750563][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.758396][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.763661][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.765805][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.776168][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.780116][ T5819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.786672][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.793446][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.801909][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.808108][ T5818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.815612][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.821207][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.841628][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.854163][ T5818] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.861658][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.116306][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 52.163057][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 52.176311][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 52.209688][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 52.243289][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 52.307940][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.316352][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.324815][ T5813] bridge_slave_0: entered allmulticast mode [ 52.332030][ T5813] bridge_slave_0: entered promiscuous mode [ 52.350307][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.357340][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.364716][ T5813] bridge_slave_1: entered allmulticast mode [ 52.371122][ T5813] bridge_slave_1: entered promiscuous mode [ 52.440675][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.451934][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.458978][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.466202][ T5823] bridge_slave_0: entered allmulticast mode [ 52.473402][ T5823] bridge_slave_0: entered promiscuous mode [ 52.480391][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.487406][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.494622][ T5823] bridge_slave_1: entered allmulticast mode [ 52.502578][ T5823] bridge_slave_1: entered promiscuous mode [ 52.516607][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.523830][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.530958][ T5814] bridge_slave_0: entered allmulticast mode [ 52.537839][ T5814] bridge_slave_0: entered promiscuous mode [ 52.544554][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.551665][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.558799][ T5814] bridge_slave_1: entered allmulticast mode [ 52.565399][ T5814] bridge_slave_1: entered promiscuous mode [ 52.572547][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.599438][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.608038][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.616140][ T5821] bridge_slave_0: entered allmulticast mode [ 52.623026][ T5821] bridge_slave_0: entered promiscuous mode [ 52.639420][ T5813] team0: Port device team_slave_0 added [ 52.650394][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.657467][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.664866][ T5820] bridge_slave_0: entered allmulticast mode [ 52.671545][ T5820] bridge_slave_0: entered promiscuous mode [ 52.677874][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.685281][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.692563][ T5821] bridge_slave_1: entered allmulticast mode [ 52.698841][ T5821] bridge_slave_1: entered promiscuous mode [ 52.709422][ T5813] team0: Port device team_slave_1 added [ 52.723303][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.738392][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.749358][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.758615][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.765872][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.772990][ T5820] bridge_slave_1: entered allmulticast mode [ 52.779486][ T5820] bridge_slave_1: entered promiscuous mode [ 52.786646][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.797850][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.807826][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.853279][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.860396][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.886870][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.899813][ T5823] team0: Port device team_slave_0 added [ 52.906798][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.922554][ T5814] team0: Port device team_slave_0 added [ 52.929970][ T5821] team0: Port device team_slave_0 added [ 52.936241][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.943349][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.969621][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.981520][ T5823] team0: Port device team_slave_1 added [ 52.990760][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.005482][ T5821] team0: Port device team_slave_1 added [ 53.012186][ T5814] team0: Port device team_slave_1 added [ 53.050484][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.057420][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.083502][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.097154][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.104130][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.130926][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.143258][ T5820] team0: Port device team_slave_0 added [ 53.149289][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.156287][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.182222][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.203631][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.210663][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.236860][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.257946][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.264988][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.295267][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.306892][ T5820] team0: Port device team_slave_1 added [ 53.312966][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.320045][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.346075][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.358973][ T5813] hsr_slave_0: entered promiscuous mode [ 53.365229][ T5813] hsr_slave_1: entered promiscuous mode [ 53.406750][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.414113][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.440505][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.470601][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.477533][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.503694][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.526157][ T5821] hsr_slave_0: entered promiscuous mode [ 53.532013][ T5821] hsr_slave_1: entered promiscuous mode [ 53.537748][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.545674][ T5821] Cannot create hsr debugfs directory [ 53.564321][ T5814] hsr_slave_0: entered promiscuous mode [ 53.570446][ T5814] hsr_slave_1: entered promiscuous mode [ 53.576195][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.583795][ T5814] Cannot create hsr debugfs directory [ 53.604232][ T5823] hsr_slave_0: entered promiscuous mode [ 53.610409][ T5823] hsr_slave_1: entered promiscuous mode [ 53.616140][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.623867][ T5823] Cannot create hsr debugfs directory [ 53.699038][ T5820] hsr_slave_0: entered promiscuous mode [ 53.705456][ T5820] hsr_slave_1: entered promiscuous mode [ 53.711532][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.719069][ T5820] Cannot create hsr debugfs directory [ 53.837463][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.844767][ T5818] Bluetooth: hci2: command tx timeout [ 53.850029][ T5826] Bluetooth: hci0: command tx timeout [ 53.870386][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.879576][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.902858][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.915785][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.922561][ T5826] Bluetooth: hci4: command tx timeout [ 53.922721][ T5826] Bluetooth: hci1: command tx timeout [ 53.933633][ T5818] Bluetooth: hci3: command tx timeout [ 53.941569][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.960402][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.984458][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.994790][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.012929][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.022048][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.049708][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.073004][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.107121][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.115784][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.137088][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.172830][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.189016][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.199681][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.207936][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.216805][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.243813][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.270578][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.278521][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.285700][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.298851][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.315186][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.322244][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.348166][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.376936][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.389021][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.396105][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.405280][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.412370][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.430636][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.437827][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.459843][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.466858][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.484343][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.497768][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.508559][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.572275][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.579114][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 54.579125][ T29] audit: type=1400 audit(1737706256.188:111): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.605737][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.618239][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.644320][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.671938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.678986][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.709297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.716364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.747049][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.780202][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.787238][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.816511][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.832440][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.845077][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.852164][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.885538][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.948546][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.978211][ T5813] veth0_vlan: entered promiscuous mode [ 55.003287][ T5813] veth1_vlan: entered promiscuous mode [ 55.060828][ T5814] veth0_vlan: entered promiscuous mode [ 55.097693][ T5813] veth0_macvtap: entered promiscuous mode [ 55.117389][ T5813] veth1_macvtap: entered promiscuous mode [ 55.128278][ T5814] veth1_vlan: entered promiscuous mode [ 55.151920][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.166852][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.181723][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.209829][ T5821] veth0_vlan: entered promiscuous mode [ 55.225564][ T5821] veth1_vlan: entered promiscuous mode [ 55.234305][ T5814] veth0_macvtap: entered promiscuous mode [ 55.247580][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.257254][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.266297][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.275457][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.292087][ T5814] veth1_macvtap: entered promiscuous mode [ 55.303547][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.337306][ T5821] veth0_macvtap: entered promiscuous mode [ 55.349166][ T5823] veth0_vlan: entered promiscuous mode [ 55.364412][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.375894][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.386445][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.399704][ T5821] veth1_macvtap: entered promiscuous mode [ 55.417234][ T5823] veth1_vlan: entered promiscuous mode [ 55.426293][ T5820] veth0_vlan: entered promiscuous mode [ 55.435498][ T5820] veth1_vlan: entered promiscuous mode [ 55.443829][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.455049][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.465695][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.478666][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.490205][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.500183][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.510863][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.522415][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.532234][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.542846][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.553523][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.564216][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.574656][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.595264][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.604345][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.613100][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.625371][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.652973][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.662234][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.670778][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.680496][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.689174][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.697858][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.733439][ T5820] veth0_macvtap: entered promiscuous mode [ 55.750254][ T5823] veth0_macvtap: entered promiscuous mode [ 55.765668][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.766993][ T5823] veth1_macvtap: entered promiscuous mode [ 55.780903][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.782301][ T5820] veth1_macvtap: entered promiscuous mode [ 55.817706][ T29] audit: type=1400 audit(1737706257.428:112): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.7p7kD9/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 55.831703][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.854218][ T29] audit: type=1400 audit(1737706257.428:113): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.859125][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.884478][ T29] audit: type=1400 audit(1737706257.438:114): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.7p7kD9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.886306][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.923302][ T5826] Bluetooth: hci2: command tx timeout [ 55.924926][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.938491][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.949849][ T5826] Bluetooth: hci0: command tx timeout [ 55.953197][ T29] audit: type=1400 audit(1737706257.438:115): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.955255][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.977239][ T29] audit: type=1400 audit(1737706257.438:116): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.7p7kD9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.988134][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.021913][ T5826] Bluetooth: hci3: command tx timeout [ 56.026000][ T29] audit: type=1400 audit(1737706257.438:117): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.7p7kD9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.027358][ T5826] Bluetooth: hci1: command tx timeout [ 56.055308][ T5818] Bluetooth: hci4: command tx timeout [ 56.061175][ T29] audit: type=1400 audit(1737706257.438:118): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.100708][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.113057][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.127987][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.142957][ T29] audit: type=1400 audit(1737706257.708:119): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.152993][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.169552][ T29] audit: type=1400 audit(1737706257.708:120): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=6814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.181847][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.208700][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.219128][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.229019][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.242424][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.253050][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.272403][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.284472][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.315375][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.333537][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.345208][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.356129][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.365953][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.376458][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.387231][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.395943][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.415214][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.425775][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.437316][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.447363][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.468492][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.478935][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.490096][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.514735][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.534611][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.549161][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.570283][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.578960][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.621448][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.634621][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.660374][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.669068][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.682176][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.691964][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.723349][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.741221][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.747519][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.756393][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.078509][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.153682][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.347633][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.358518][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.400223][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.515219][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.599865][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.607691][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.000418][ T5818] Bluetooth: hci0: command tx timeout [ 58.011147][ T5818] Bluetooth: hci2: command tx timeout [ 58.079582][ T5826] Bluetooth: hci3: command tx timeout [ 58.079577][ T5818] Bluetooth: hci1: command tx timeout [ 58.159427][ T5826] Bluetooth: hci4: command tx timeout [ 58.620802][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 58.628657][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 58.657179][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 58.672121][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 58.683903][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 58.691269][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 58.833267][ T9] libceph: connect (1)[c::]:6789 error -101 [ 58.843029][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 58.915134][ T5946] ceph: No mds server is up or the cluster is laggy [ 59.305377][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 59.315412][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:5 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 59.315434][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 59.315445][ T5826] Workqueue: hci3 hci_rx_work [ 59.315473][ T5826] Call Trace: [ 59.315479][ T5826] [ 59.315485][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 59.315507][ T5826] sysfs_warn_dup+0x7f/0xa0 [ 59.315525][ T5826] sysfs_create_dir_ns+0x24d/0x2b0 [ 59.315542][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 59.315560][ T5826] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 59.315582][ T5826] ? kobject_add_internal+0x12d/0x990 [ 59.315605][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 59.315630][ T5826] kobject_add_internal+0x2c8/0x990 [ 59.315655][ T5826] kobject_add+0x16f/0x240 [ 59.315676][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 59.315696][ T5826] ? class_to_subsys+0x3e/0x160 [ 59.315723][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 59.315748][ T5826] ? kobject_put+0xab/0x5a0 [ 59.315773][ T5826] device_add+0x289/0x1a70 [ 59.315795][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 59.315831][ T5826] ? __pfx_device_add+0x10/0x10 [ 59.315856][ T5826] ? mgmt_send_event_skb+0x2f2/0x460 [ 59.315885][ T5826] hci_conn_add_sysfs+0x17e/0x230 [ 59.315908][ T5826] le_conn_complete_evt+0x107f/0x1da0 [ 59.315935][ T5826] ? __pfx_lock_release+0x10/0x10 [ 59.315954][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 59.315975][ T5826] ? __mutex_lock+0x1cc/0xb10 [ 59.316001][ T5826] hci_le_conn_complete_evt+0x23c/0x370 [ 59.316027][ T5826] hci_le_meta_evt+0x2e2/0x5d0 [ 59.316047][ T5826] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 59.316071][ T5826] hci_event_packet+0x666/0x1180 [ 59.316091][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 59.316113][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 59.316132][ T5826] ? mark_held_locks+0x9f/0xe0 [ 59.316151][ T5826] ? kcov_remote_start+0x3cf/0x6e0 [ 59.316171][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.316193][ T5826] hci_rx_work+0x2c5/0x16b0 [ 59.316215][ T5826] ? process_one_work+0x921/0x1ba0 [ 59.316237][ T5826] process_one_work+0x9c5/0x1ba0 [ 59.316263][ T5826] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 59.316283][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 59.316300][ T5826] ? rcu_is_watching+0x12/0xc0 [ 59.316329][ T5826] ? assign_work+0x1a0/0x250 [ 59.316347][ T5826] worker_thread+0x6c8/0xf00 [ 59.316371][ T5826] ? __kthread_parkme+0x148/0x220 [ 59.316394][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 59.316413][ T5826] kthread+0x3af/0x750 [ 59.316429][ T5826] ? __pfx_kthread+0x10/0x10 [ 59.316442][ T5826] ? lock_acquire+0x2f/0xb0 [ 59.316463][ T5826] ? __pfx_kthread+0x10/0x10 [ 59.316479][ T5826] ret_from_fork+0x45/0x80 [ 59.316495][ T5826] ? __pfx_kthread+0x10/0x10 [ 59.316510][ T5826] ret_from_fork_asm+0x1a/0x30 [ 59.316545][ T5826] [ 59.316562][ T5826] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.606551][ T5826] Bluetooth: hci3: failed to register connection device [ 59.685189][ T5923] warning: `syz.3.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.959650][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 59.959665][ T29] audit: type=1400 audit(1737706261.548:193): avc: denied { unlink } for pid=5966 comm="syz.0.22" name="#1" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.215546][ T5826] Bluetooth: hci2: command tx timeout [ 60.221137][ T5826] Bluetooth: hci0: command tx timeout [ 60.226812][ T5826] Bluetooth: hci1: command tx timeout [ 60.285304][ T5817] Bluetooth: hci4: command tx timeout [ 60.297804][ T5818] Bluetooth: hci3: command tx timeout [ 60.337530][ T5969] Illegal XDP return value 198769900 on prog (id 7) dev syz_tun, expect packet loss! [ 60.473657][ T29] audit: type=1400 audit(1737706261.558:194): avc: denied { mount } for pid=5966 comm="syz.0.22" name="/" dev="overlay" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.572228][ T29] audit: type=1400 audit(1737706261.568:195): avc: denied { create } for pid=5966 comm="syz.0.22" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.595245][ T29] audit: type=1400 audit(1737706261.608:196): avc: denied { link } for pid=5966 comm="syz.0.22" name="#3" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.653387][ T29] audit: type=1400 audit(1737706261.608:197): avc: denied { rename } for pid=5966 comm="syz.0.22" name="#4" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.675507][ T29] audit: type=1400 audit(1737706262.158:198): avc: denied { create } for pid=5972 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.755104][ T29] audit: type=1400 audit(1737706262.158:199): avc: denied { connect } for pid=5972 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.835745][ T29] audit: type=1400 audit(1737706262.158:200): avc: denied { setopt } for pid=5972 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.877539][ T29] audit: type=1400 audit(1737706262.168:201): avc: denied { bind } for pid=5972 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.931359][ T29] audit: type=1400 audit(1737706262.168:202): avc: denied { write } for pid=5972 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.189482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.160599][ T11] Bluetooth: hci5: Frame reassembly failed (-90) [ 63.356887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 63.868809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.971189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.159629][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 64.169320][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 64.469606][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.489638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.671530][ T5899] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 64.698268][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 64.729815][ T6065] TCP: out of memory -- consider tuning tcp_mem [ 64.734043][ T5899] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 64.762812][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.782401][ T5899] usb 1-1: Product: syz [ 64.795868][ T5899] usb 1-1: Manufacturer: syz [ 64.806097][ T5899] usb 1-1: SerialNumber: syz [ 64.827911][ T5899] usb 1-1: config 0 descriptor?? [ 65.159535][ T5899] mos7840 1-1:0.0: required endpoints missing [ 65.173282][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 65.173294][ T29] audit: type=1400 audit(1737706266.788:217): avc: denied { read } for pid=6074 comm="syz.2.53" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.183521][ T5899] usb 1-1: USB disconnect, device number 2 [ 65.227090][ T29] audit: type=1400 audit(1737706266.828:218): avc: denied { open } for pid=6074 comm="syz.2.53" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.250770][ T29] audit: type=1400 audit(1737706266.828:219): avc: denied { ioctl } for pid=6074 comm="syz.2.53" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.259436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.347734][ T6082] mmap: syz.4.54 (6082) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.422500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.430802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.476686][ T29] audit: type=1400 audit(1737706267.088:220): avc: denied { create } for pid=6083 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.504151][ T29] audit: type=1400 audit(1737706267.118:221): avc: denied { setopt } for pid=6083 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.276819][ T6094] syz.0.59 uses obsolete (PF_INET,SOCK_PACKET) [ 66.300783][ T29] audit: type=1400 audit(1737706267.908:222): avc: denied { ioctl } for pid=6093 comm="syz.0.59" path="socket:[8012]" dev="sockfs" ino=8012 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.389672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.427786][ T29] audit: type=1400 audit(1737706267.978:223): avc: denied { ioctl } for pid=6093 comm="syz.0.59" path="socket:[8736]" dev="sockfs" ino=8736 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.824205][ T6115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.65'. [ 66.843675][ T6115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.65'. [ 66.994615][ T1780] ------------[ cut here ]------------ [ 67.000179][ T1780] WARNING: CPU: 1 PID: 1780 at net/wireless/scan.c:1181 cfg80211_scan_done+0x196/0x560 [ 67.009965][ T1780] Modules linked in: [ 67.013862][ T1780] CPU: 1 UID: 0 PID: 1780 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 67.024396][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.034524][ T1780] Workqueue: events_unbound cfg80211_wiphy_work [ 67.040852][ T1780] RIP: 0010:cfg80211_scan_done+0x196/0x560 [ 67.046959][ T1780] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 03 00 00 48 39 9d b8 fa ff ff 74 09 e8 6b ea 10 f7 90 <0f> 0b 90 e8 62 ea 10 f7 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 [ 67.066846][ T1780] RSP: 0018:ffffc9000558f9f8 EFLAGS: 00010293 [ 67.072972][ T1780] RAX: 0000000000000000 RBX: ffff8880621d6000 RCX: ffffffff8a88fbaf [ 67.080988][ T1780] RDX: ffff888029838000 RSI: ffffffff8a88f8e5 RDI: ffff888042fd01b8 [ 67.088961][ T1780] RBP: ffff888042fd0700 R08: 0000000000000001 R09: 0000000000000000 [ 67.096972][ T1780] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888042fd29f0 [ 67.104975][ T1780] R13: 1ffff92000ab1f3f R14: ffff8880621d6070 R15: ffff8880621d6060 [ 67.112994][ T1780] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 67.123231][ T1780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.129984][ T1780] CR2: 0000001b2f40aff8 CR3: 0000000061448000 CR4: 00000000003526f0 [ 67.137962][ T1780] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.146259][ T1780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.154527][ T1780] Call Trace: [ 67.157810][ T1780] [ 67.160944][ T1780] ? __warn+0xea/0x3c0 [ 67.165025][ T1780] ? cfg80211_scan_done+0x196/0x560 [ 67.170263][ T1780] ? report_bug+0x3c0/0x580 [ 67.174775][ T1780] ? handle_bug+0x54/0xa0 [ 67.179111][ T1780] ? exc_invalid_op+0x17/0x50 [ 67.183821][ T1780] ? asm_exc_invalid_op+0x1a/0x20 [ 67.188858][ T1780] ? cfg80211_scan_done+0x45f/0x560 [ 67.194100][ T1780] ? cfg80211_scan_done+0x195/0x560 [ 67.199370][ T1780] ? cfg80211_scan_done+0x196/0x560 [ 67.204583][ T1780] ? cfg80211_scan_done+0x195/0x560 [ 67.209834][ T1780] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 67.215387][ T1780] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 67.220734][ T1780] __ieee80211_scan_completed+0x34a/0xe60 [ 67.226471][ T1780] ieee80211_scan_work+0x440/0x2080 [ 67.231743][ T1780] ? cfg80211_wiphy_work+0x3b7/0x570 [ 67.237031][ T1780] ? __pfx_lock_release+0x10/0x10 [ 67.242104][ T1780] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 67.247742][ T1780] ? mark_held_locks+0x9f/0xe0 [ 67.252857][ T1780] ? rcu_is_watching+0x12/0xc0 [ 67.257641][ T1780] cfg80211_wiphy_work+0x3ed/0x570 [ 67.263064][ T1780] process_one_work+0x9c5/0x1ba0 [ 67.268020][ T1780] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.273710][ T1780] ? __pfx_process_one_work+0x10/0x10 [ 67.279089][ T1780] ? rcu_is_watching+0x12/0xc0 [ 67.283974][ T1780] ? assign_work+0x1a0/0x250 [ 67.288573][ T1780] worker_thread+0x6c8/0xf00 [ 67.293226][ T1780] ? __kthread_parkme+0x148/0x220 [ 67.298261][ T1780] ? __pfx_worker_thread+0x10/0x10 [ 67.303416][ T1780] kthread+0x3af/0x750 [ 67.307492][ T1780] ? __pfx_kthread+0x10/0x10 [ 67.312132][ T1780] ? lock_acquire+0x2f/0xb0 [ 67.316644][ T1780] ? __pfx_kthread+0x10/0x10 [ 67.321273][ T1780] ret_from_fork+0x45/0x80 [ 67.325693][ T1780] ? __pfx_kthread+0x10/0x10 [ 67.330326][ T1780] ret_from_fork_asm+0x1a/0x30 [ 67.335119][ T1780] [ 67.338137][ T1780] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.345407][ T1780] CPU: 1 UID: 0 PID: 1780 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 67.355900][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.365955][ T1780] Workqueue: events_unbound cfg80211_wiphy_work [ 67.372204][ T1780] Call Trace: [ 67.375484][ T1780] [ 67.378412][ T1780] dump_stack_lvl+0x3d/0x1f0 [ 67.383006][ T1780] panic+0x71d/0x800 [ 67.386909][ T1780] ? __pfx_panic+0x10/0x10 [ 67.391337][ T1780] ? show_trace_log_lvl+0x29d/0x3d0 [ 67.396543][ T1780] ? check_panic_on_warn+0x1f/0xb0 [ 67.401646][ T1780] ? cfg80211_scan_done+0x196/0x560 [ 67.406832][ T1780] check_panic_on_warn+0xab/0xb0 [ 67.411757][ T1780] __warn+0xf6/0x3c0 [ 67.415633][ T1780] ? cfg80211_scan_done+0x196/0x560 [ 67.420817][ T1780] report_bug+0x3c0/0x580 [ 67.425129][ T1780] handle_bug+0x54/0xa0 [ 67.429266][ T1780] exc_invalid_op+0x17/0x50 [ 67.433751][ T1780] asm_exc_invalid_op+0x1a/0x20 [ 67.438585][ T1780] RIP: 0010:cfg80211_scan_done+0x196/0x560 [ 67.444376][ T1780] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 03 00 00 48 39 9d b8 fa ff ff 74 09 e8 6b ea 10 f7 90 <0f> 0b 90 e8 62 ea 10 f7 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 [ 67.463966][ T1780] RSP: 0018:ffffc9000558f9f8 EFLAGS: 00010293 [ 67.470018][ T1780] RAX: 0000000000000000 RBX: ffff8880621d6000 RCX: ffffffff8a88fbaf [ 67.477967][ T1780] RDX: ffff888029838000 RSI: ffffffff8a88f8e5 RDI: ffff888042fd01b8 [ 67.485920][ T1780] RBP: ffff888042fd0700 R08: 0000000000000001 R09: 0000000000000000 [ 67.493870][ T1780] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888042fd29f0 [ 67.501819][ T1780] R13: 1ffff92000ab1f3f R14: ffff8880621d6070 R15: ffff8880621d6060 [ 67.509773][ T1780] ? cfg80211_scan_done+0x45f/0x560 [ 67.514957][ T1780] ? cfg80211_scan_done+0x195/0x560 [ 67.520142][ T1780] ? cfg80211_scan_done+0x195/0x560 [ 67.525327][ T1780] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 67.530858][ T1780] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 67.536134][ T1780] __ieee80211_scan_completed+0x34a/0xe60 [ 67.541846][ T1780] ieee80211_scan_work+0x440/0x2080 [ 67.547033][ T1780] ? cfg80211_wiphy_work+0x3b7/0x570 [ 67.552298][ T1780] ? __pfx_lock_release+0x10/0x10 [ 67.557305][ T1780] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 67.562925][ T1780] ? mark_held_locks+0x9f/0xe0 [ 67.567670][ T1780] ? rcu_is_watching+0x12/0xc0 [ 67.572422][ T1780] cfg80211_wiphy_work+0x3ed/0x570 [ 67.577517][ T1780] process_one_work+0x9c5/0x1ba0 [ 67.582442][ T1780] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.588056][ T1780] ? __pfx_process_one_work+0x10/0x10 [ 67.593408][ T1780] ? rcu_is_watching+0x12/0xc0 [ 67.598163][ T1780] ? assign_work+0x1a0/0x250 [ 67.602738][ T1780] worker_thread+0x6c8/0xf00 [ 67.607315][ T1780] ? __kthread_parkme+0x148/0x220 [ 67.612325][ T1780] ? __pfx_worker_thread+0x10/0x10 [ 67.617417][ T1780] kthread+0x3af/0x750 [ 67.621468][ T1780] ? __pfx_kthread+0x10/0x10 [ 67.626040][ T1780] ? lock_acquire+0x2f/0xb0 [ 67.630527][ T1780] ? __pfx_kthread+0x10/0x10 [ 67.635096][ T1780] ret_from_fork+0x45/0x80 [ 67.639495][ T1780] ? __pfx_kthread+0x10/0x10 [ 67.644068][ T1780] ret_from_fork_asm+0x1a/0x30 [ 67.648826][ T1780] [ 67.652006][ T1780] Kernel Offset: disabled [ 67.656338][ T1780] Rebooting in 86400 seconds..