last executing test programs: 1m6.24178979s ago: executing program 0 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1m5.848699712s ago: executing program 0 (id=14): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0), 0x8) 1m5.60258991s ago: executing program 0 (id=15): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xb, 0x7, 0x4, 0x800, 0xb, 0x30, 0x1fe, 0x6e, 0x80, 0x9, 0x1}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 1m4.752363646s ago: executing program 0 (id=18): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f]}, 0x2a) 1m4.508129084s ago: executing program 0 (id=20): r0 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1) 1m4.091540667s ago: executing program 0 (id=21): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2, 0x0, 0xffffffff], [0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e0], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) preadv(r0, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) 50.171693952s ago: executing program 1 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24048010) 49.792168404s ago: executing program 1 (id=46): sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 49.624689299s ago: executing program 1 (id=47): socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x1}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x11, 0x1, 0x0, 0x5, 0x0}) 49.372350637s ago: executing program 1 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400c810) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b36, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 45.780076429s ago: executing program 1 (id=49): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000980)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x9c}}, 0xc0a5) recvmsg$can_raw(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000440)=""/242, 0xf2}], 0x1}, 0x40) 45.603884454s ago: executing program 1 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000180)) 18.395929475s ago: executing program 32 (id=21): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2, 0x0, 0xffffffff], [0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e0], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) preadv(r0, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) 0s ago: executing program 33 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25145' (ED25519) to the list of known hosts. [ 123.938330][ T30] audit: type=1400 audit(123.730:58): avc: denied { name_bind } for pid=3295 comm="sshd" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 124.237106][ T30] audit: type=1400 audit(124.030:59): avc: denied { execute } for pid=3297 comm="sh" name="syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 124.243142][ T30] audit: type=1400 audit(124.030:60): avc: denied { execute_no_trans } for pid=3297 comm="sh" path="/syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 128.004877][ T30] audit: type=1400 audit(127.800:61): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 128.016398][ T30] audit: type=1400 audit(127.800:62): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.035967][ T3297] cgroup: Unknown subsys name 'net' [ 128.066021][ T30] audit: type=1400 audit(127.860:63): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.435236][ T3297] cgroup: Unknown subsys name 'cpuset' [ 128.464329][ T3297] cgroup: Unknown subsys name 'rlimit' [ 128.789196][ T30] audit: type=1400 audit(128.580:64): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.793199][ T30] audit: type=1400 audit(128.580:65): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 128.795163][ T30] audit: type=1400 audit(128.590:66): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 129.056141][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 129.061964][ T30] audit: type=1400 audit(128.850:67): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 129.078115][ T30] audit: type=1400 audit(128.870:68): avc: denied { write } for pid=3299 comm="mkswap" path="/swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 129.140638][ T30] audit: type=1400 audit(128.930:69): avc: denied { read } for pid=3297 comm="syz-executor" name="swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 129.144901][ T30] audit: type=1400 audit(128.940:70): avc: denied { open } for pid=3297 comm="syz-executor" path="/swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 129.155835][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 134.821564][ T30] audit: type=1400 audit(134.610:71): avc: denied { execmem } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 134.872653][ T30] audit: type=1400 audit(134.670:72): avc: denied { read } for pid=3302 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 134.874430][ T30] audit: type=1400 audit(134.670:73): avc: denied { open } for pid=3302 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 134.884134][ T30] audit: type=1400 audit(134.680:74): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 134.922574][ T30] audit: type=1400 audit(134.710:75): avc: denied { module_request } for pid=3302 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 135.040547][ T30] audit: type=1400 audit(134.830:76): avc: denied { sys_module } for pid=3302 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.978615][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.064563][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.272311][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.292225][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.782135][ T3302] hsr_slave_0: entered promiscuous mode [ 140.788884][ T3302] hsr_slave_1: entered promiscuous mode [ 141.066071][ T3304] hsr_slave_0: entered promiscuous mode [ 141.074978][ T3304] hsr_slave_1: entered promiscuous mode [ 141.082303][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.085731][ T3304] Cannot create hsr debugfs directory [ 142.315775][ T30] audit: type=1400 audit(142.110:77): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.319749][ T30] audit: type=1400 audit(142.110:78): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.338898][ T30] audit: type=1400 audit(142.130:79): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.424433][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.475246][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.552264][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.612446][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.729086][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.748860][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.788108][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.814963][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.218800][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.378430][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.475712][ T3304] veth0_vlan: entered promiscuous mode [ 150.518692][ T3304] veth1_vlan: entered promiscuous mode [ 150.684352][ T3304] veth0_macvtap: entered promiscuous mode [ 150.749335][ T3304] veth1_macvtap: entered promiscuous mode [ 150.763126][ T3302] veth0_vlan: entered promiscuous mode [ 150.826011][ T3302] veth1_vlan: entered promiscuous mode [ 151.059656][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.060539][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.060740][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.064476][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.088834][ T3302] veth0_macvtap: entered promiscuous mode [ 151.140271][ T3302] veth1_macvtap: entered promiscuous mode [ 151.344001][ T30] audit: type=1400 audit(151.140:80): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.382535][ T30] audit: type=1400 audit(151.160:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzkaller.MSh92g/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.391899][ T30] audit: type=1400 audit(151.180:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.415459][ T30] audit: type=1400 audit(151.210:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzkaller.MSh92g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 151.426766][ T30] audit: type=1400 audit(151.220:84): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzkaller.MSh92g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 151.462395][ T30] audit: type=1400 audit(151.260:85): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 151.507319][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.508511][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.509593][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.510608][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.539488][ T30] audit: type=1400 audit(151.330:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 151.559863][ T30] audit: type=1400 audit(151.350:87): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 151.812422][ T30] audit: type=1400 audit(151.590:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 151.813040][ T30] audit: type=1400 audit(151.600:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 151.956681][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 156.917756][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 156.918319][ T30] audit: type=1400 audit(156.710:98): avc: denied { perfmon } for pid=3441 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.946248][ T30] audit: type=1400 audit(156.740:99): avc: denied { write } for pid=3441 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.073923][ T30] audit: type=1400 audit(158.860:100): avc: denied { create } for pid=3450 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.090684][ T30] audit: type=1400 audit(158.880:101): avc: denied { setopt } for pid=3450 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.781664][ T30] audit: type=1400 audit(159.570:102): avc: denied { read write } for pid=3453 comm="syz.0.4" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.795672][ T30] audit: type=1400 audit(159.590:103): avc: denied { open } for pid=3453 comm="syz.0.4" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 160.232434][ T30] audit: type=1400 audit(160.020:104): avc: denied { create } for pid=3459 comm="syz.1.6" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.237218][ T30] audit: type=1400 audit(160.030:105): avc: denied { create } for pid=3459 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.240032][ T3460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.244937][ T30] audit: type=1400 audit(160.040:106): avc: denied { ioctl } for pid=3459 comm="syz.1.6" path="socket:[3561]" dev="sockfs" ino=3561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.424263][ T30] audit: type=1400 audit(160.220:107): avc: denied { create } for pid=3461 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.756173][ T3463] block device autoloading is deprecated and will be removed. [ 160.844865][ T3454] md2: using deprecated bitmap file support [ 162.387375][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 162.388538][ T30] audit: type=1400 audit(162.180:120): avc: denied { read } for pid=3472 comm="syz.0.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.390593][ T30] audit: type=1400 audit(162.180:121): avc: denied { open } for pid=3472 comm="syz.0.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.418067][ T30] audit: type=1400 audit(162.210:122): avc: denied { ioctl } for pid=3472 comm="syz.0.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.890374][ T30] audit: type=1400 audit(162.680:123): avc: denied { create } for pid=3479 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.894212][ T30] audit: type=1400 audit(162.680:124): avc: denied { write } for pid=3479 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.844197][ T30] audit: type=1400 audit(163.640:125): avc: denied { append } for pid=3486 comm="syz.1.16" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.848269][ T30] audit: type=1400 audit(163.640:126): avc: denied { open } for pid=3486 comm="syz.1.16" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.863498][ T3487] random: crng reseeded on system resumption [ 163.949372][ T30] audit: type=1400 audit(163.740:127): avc: denied { ioctl } for pid=3486 comm="syz.1.16" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.777916][ T30] audit: type=1400 audit(164.570:128): avc: denied { shutdown } for pid=3494 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.787262][ T30] audit: type=1400 audit(164.580:129): avc: denied { read } for pid=3494 comm="syz.0.20" path="socket:[3625]" dev="sockfs" ino=3625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.217449][ T3498] input: syz0 as /devices/virtual/input/input1 [ 166.818240][ T3511] 0f<îÎL: renamed from lo (while UP) [ 169.791648][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 169.792165][ T30] audit: type=1400 audit(169.580:134): avc: denied { setopt } for pid=3518 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.803004][ T30] audit: type=1400 audit(169.600:135): avc: denied { name_bind } for pid=3518 comm="syz.1.27" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 170.223289][ T30] audit: type=1400 audit(170.010:136): avc: denied { ioctl } for pid=3522 comm="syz.1.29" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4170 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 174.098863][ T30] audit: type=1400 audit(173.890:137): avc: denied { name_bind } for pid=3547 comm="syz.1.39" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 174.103479][ T30] audit: type=1400 audit(173.900:138): avc: denied { node_bind } for pid=3547 comm="syz.1.39" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 174.315972][ T30] audit: type=1400 audit(174.110:139): avc: denied { setopt } for pid=3549 comm="syz.1.40" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.954275][ T3556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.549154][ T30] audit: type=1400 audit(179.340:140): avc: denied { append } for pid=3566 comm="syz.1.47" name="001" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.496491][ T30] audit: type=1400 audit(183.290:141): avc: denied { read write } for pid=3574 comm="syz.1.50" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.500331][ T30] audit: type=1400 audit(183.290:142): avc: denied { open } for pid=3574 comm="syz.1.50" path="/dev/raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.510413][ T30] audit: type=1400 audit(183.300:143): avc: denied { ioctl } for pid=3574 comm="syz.1.50" path="/dev/raw-gadget" dev="devtmpfs" ino=701 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.522988][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.537689][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.324271][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.339055][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.098473][ T3578] hsr_slave_0: entered promiscuous mode [ 216.104091][ T3578] hsr_slave_1: entered promiscuous mode [ 216.106543][ T3578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.108414][ T3578] Cannot create hsr debugfs directory [ 599.082293][ T33] INFO: task kworker/1:4:3448 blocked for more than 430 seconds. [ 599.083157][ T33] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 599.083402][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.083771][ T33] task:kworker/1:4 state:D stack:0 pid:3448 tgid:3448 ppid:2 task_flags:0x4288060 flags:0x00000008 [ 599.089551][ T33] Workqueue: md_misc mddev_delayed_delete [ 599.111514][ T33] Call trace: [ 599.112027][ T33] __switch_to+0x204/0x4bc (T) [ 599.112406][ T33] __schedule+0xd34/0x3188 [ 599.112643][ T33] schedule+0xd0/0x344 [ 599.112857][ T33] schedule_timeout+0x1ec/0x224 [ 599.113057][ T33] __wait_for_common+0x1d0/0x3f8 [ 599.113322][ T33] wait_for_completion+0x20/0x2c [ 599.113549][ T33] devtmpfs_submit_req+0xac/0x114 [ 599.113764][ T33] devtmpfs_delete_node+0xd8/0x128 [ 599.113997][ T33] device_del+0x59c/0x7b4 [ 599.114198][ T33] del_gendisk+0x3fc/0x87c [ 599.114412][ T33] md_kobj_release+0x84/0xd8 [ 599.114618][ T33] kobject_put+0x17c/0x430 [ 599.114816][ T33] mddev_delayed_delete+0x14/0x20 [ 599.115011][ T33] process_one_work+0x7cc/0x18d4 [ 599.115212][ T33] worker_thread+0x734/0xb84 [ 599.115413][ T33] kthread+0x348/0x5fc [ 599.115613][ T33] ret_from_fork+0x10/0x20 [ 599.116010][ T33] INFO: task syz.0.21:3498 blocked for more than 430 seconds. [ 599.116217][ T33] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 599.116412][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.116589][ T33] task:syz.0.21 state:D stack:0 pid:3498 tgid:3497 ppid:3302 task_flags:0x400040 flags:0x0000000d [ 599.116921][ T33] Call trace: [ 599.117093][ T33] __switch_to+0x204/0x4bc (T) [ 599.117296][ T33] __schedule+0xd34/0x3188 [ 599.117505][ T33] schedule+0xd0/0x344 [ 599.117700][ T33] schedule_timeout+0x1ec/0x224 [ 599.117931][ T33] __wait_for_common+0x1d0/0x3f8 [ 599.118181][ T33] wait_for_completion+0x20/0x2c [ 599.118419][ T33] devtmpfs_submit_req+0xac/0x114 [ 599.118624][ T33] devtmpfs_create_node+0x120/0x18c [ 599.118953][ T33] device_add+0xbd0/0x12bc [ 599.119166][ T33] cdev_device_add+0xd4/0x1f4 [ 599.119375][ T33] evdev_connect+0x2c8/0x3dc [ 599.119584][ T33] input_attach_handler.isra.0+0xe8/0x1cc [ 599.119778][ T33] input_register_device+0x5d4/0xb14 [ 599.119972][ T33] uinput_ioctl_handler.isra.0+0xd38/0x17c8 [ 599.120171][ T33] uinput_ioctl+0x3c/0x64 [ 599.120373][ T33] __arm64_sys_ioctl+0x12c/0x188 [ 599.120579][ T33] invoke_syscall+0x6c/0x258 [ 599.151619][ T33] el0_svc_common.constprop.0+0xac/0x230 [ 599.152609][ T33] do_el0_svc+0x40/0x58 [ 599.153311][ T33] el0_svc+0x50/0x180 [ 599.154053][ T33] el0t_64_sync_handler+0x10c/0x138 [ 599.154810][ T33] el0t_64_sync+0x198/0x19c [ 599.155635][ T33] [ 599.155635][ T33] Showing all locks held in the system: [ 599.165717][ T33] 3 locks held by kworker/u8:0/12: [ 599.166689][ T33] #0: ffff00000d831148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 [ 599.169963][ T33] #1: ffff80008d507c80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 [ 599.173135][ T33] #2: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 [ 599.175877][ T33] 2 locks held by kdevtmpfs/25: [ 599.176644][ T33] #0: ffff00000de30950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0xd4/0x1f8 [ 599.179995][ T33] #1: ffff80008771a7e8 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x30/0x168 [ 599.183936][ T33] 3 locks held by kworker/u8:1/27: [ 599.184700][ T33] #0: ffff000017ccd948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 [ 599.187822][ T33] #1: ffff80008d607c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 [ 599.190683][ T33] #2: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 [ 599.193738][ T33] 1 lock held by khungtaskd/33: [ 599.194518][ T33] #0: ffff80008728da60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 [ 599.197361][ T33] 1 lock held by syslogd/3108: [ 599.198108][ T33] 1 lock held by klogd/3112: [ 599.198839][ T33] 1 lock held by dhcpcd/3153: [ 599.199547][ T33] #0: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 [ 599.202625][ T33] 2 locks held by getty/3242: [ 599.203325][ T33] #0: ffff000017f9f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 599.206003][ T33] #1: ffff80008d50b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0xdb4 [ 599.212189][ T33] 1 lock held by syz-executor/3297: [ 599.213259][ T33] 2 locks held by kworker/1:4/3448: [ 599.214355][ T33] #0: ffff00000ef71d48 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x6f8/0x18d4 [ 599.217529][ T33] #1: ffff8000a1a67c80 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x71c/0x18d4 [ 599.221303][ T33] 2 locks held by syz.0.21/3498: [ 599.222378][ T33] #0: ffff000012aab870 (&newdev->mutex){+.+.}-{4:4}, at: uinput_ioctl_handler.isra.0+0xc8/0x17c8 [ 599.225659][ T33] #1: ffff800088202ce8 (input_mutex){+.+.}-{4:4}, at: input_register_device+0x52c/0xb14 [ 599.228830][ T33] 1 lock held by syz.1.50/3575: [ 599.229896][ T33] #0: ffff00000de30950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: walk_component+0x1e0/0x484 [ 599.233916][ T33] 2 locks held by syz-executor/3578: [ 599.235030][ T33] #0: ffff800087091bb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0xb8/0x218 [ 599.238594][ T33] #1: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x4b8/0x1810 [ 599.242808][ T33] 1 lock held by syz-executor/3610: [ 599.243846][ T33] #0: ffff8000887e3e68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 [ 599.247150][ T33] [ 599.247909][ T33] ============================================= [ 599.247909][ T33] [ 599.249744][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 599.250936][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT [ 599.251739][ T33] Hardware name: linux,dummy-virt (DT) [ 599.252098][ T33] Call trace: [ 599.252405][ T33] show_stack+0x18/0x24 (C) [ 599.252679][ T33] dump_stack_lvl+0x38/0xf4 [ 599.252959][ T33] dump_stack+0x1c/0x28 [ 599.253212][ T33] panic+0x5b0/0x664 [ 599.253479][ T33] watchdog+0x658/0x1140 [ 599.253751][ T33] kthread+0x348/0x5fc [ 599.254078][ T33] ret_from_fork+0x10/0x20 [ 599.254874][ T33] SMP: stopping secondary CPUs [ 599.256482][ T33] Kernel Offset: disabled [ 599.256850][ T33] CPU features: 0x0410,00040068,01000400,0200421b [ 599.257287][ T33] Memory Limit: none [ 599.258525][ T33] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:10:48 Registers: info registers vcpu 0 CPU#0 PC=ffff8000854619f0 X00=ffff800080033198 X01=0000000000000000 X02=0000000000000010 X03=1ffff000142e8ebf X04=1ffff000142e8ebe X05=0000000000000001 X06=ffff000014130a98 X07=ffff8000802dbad8 X08=ffff000014130000 X09=ffff8000896fc000 X10=ffff000014130a98 X11=1ffff000142e8ece X12=ffff7000142e8ecf X13=0000000000000000 X14=1fffe0000d418836 X15=185035d0181096f0 X16=18e800007b05ffff X17=e266e7bc1303e37a X18=ffff00003cd59b40 X19=ffff80008702a648 X20=ffff00001a7ee658 X21=0000000000000000 X22=1fffe000034fdcca X23=ffff8000800332c8 X24=1ffff000142e8f47 X25=1ffff000142e8f41 X26=0000000000000003 X27=ffff8000a1747a08 X28=0000000000000000 X29=ffff8000a1747660 X30=ffff80008053d140 SP=ffff8000a1747660 PSTATE=20000005 --C- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000001 Q01=0000000000000000:000000000000000a Q02=0000aaaae63488f6:0000aaaae6348720 Q03=0000ffffd2138360:0000ffffd21380c8 Q04=0000000000000000:0000000000000000 Q05=0000ffffd2138020:0000000000000000 Q06=3000000000000000:3000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:000001f40000000a Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd2138430:0000ffffd2138430 Q17=ffffff80ffffffd0:0000ffffd2138400 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b67350 X00=0000000000000002 X01=0000000000000000 X02=0000000000000002 X03=dfff800000000000 X04=0000000000000018 X05=ffff80008d9179e0 X06=ffff700011b22f3c X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011b22f3c X11=1ffff00011b22f3c X12=ffff700011b22f3d X13=0000000000008000 X14=20202020303a6b63 X15=3434333a64697020 X16=3a64696774202038 X17=7070202038343433 X18=ffff80008d90748c X19=ffff00000f212080 X20=ffff80008d3fb018 X21=ffff800087a62b60 X22=000000000000006b X23=dfff800000000000 X24=ffff00000f21e065 X25=0000000000000004 X26=0000000000000f01 X27=1fffe00001e4245a X28=ffff00000f2122d0 X29=ffff80008d917990 X30=ffff800081b675dc SP=ffff80008d917990 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000001 Q01=0000000000000000:000000000000000a Q02=0000aaaae63488f6:0000aaaae6348720 Q03=0000ffffd2138360:0000ffffd21380c8 Q04=0000000000000000:0000000000000000 Q05=0000ffffd2138020:0000000000000000 Q06=3000000000000000:3000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:000001f40000000a Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd2138430:0000ffffd2138430 Q17=ffffff80ffffffd0:0000ffffd2138400 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000