last executing test programs: 7.025380246s ago: executing program 4 (id=371): r0 = socket(0x2, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 6.556498482s ago: executing program 4 (id=373): r0 = socket(0x10, 0x800, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x1, @mcast1, 0x7}}, 0x2, 0x0, 0x19, 0x0, "598ae7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96372b74ee2bf69384a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x9}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000a00)='\x00y\x1ap\x1d\xf2\xb8\x8b\x8c\x950S\x81P\a\xe6\xe06Z:\xe3e\x88\xd5\xd6\xf6P\x17\xad\x91\x98-n\xe79B;L;\xeb\xbb\xd3\x04\xa0u\xe0hp\xb4\f\x8a\xcc\xa5\xa1\xbf\x0ec}\xdcl*\x1d\xd9\xc8\fd\xc5\x12\xbc\xcdv\v7\xb2\xe1)?\x86\x8e\x12\xe3*nLe\xd1\xe1(sN\x80\x10\nq\a\f&\x96@W)\xbc\x96\xdb\x91\x96\x95\xee\x81\x02\xfc\xb1\xef[\xde@\xe0\xef\xa2\xf84GG\x89\x17\v\xef\xf1(\x91\a\xf5$\x15\xc8\xf1\xa1\xb3\x8c7\xd6\x1a\xa58\xc8hT.\x95i\x8b\x00\xd1hP\f\x15*\x19\x96E\xfdjqwMoZ\xad\xe1\x89\x94Y\xed\x9c\x01\xc8\x86Ug\xf9U\x9ezK\x81+\xa3k-\xfe\x12h\xb2\x00\x8dh@|O^E\n{\xbe\xc9\xec-\x81,<,2G\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = gettid() fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000001440)=ANY=[], 0xffffff6a) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(r2, 0xffffffffffffffff, 0x60000000000, 0x0) 5.602540743s ago: executing program 4 (id=395): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.73037733s ago: executing program 2 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 3.428804101s ago: executing program 2 (id=418): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x0) 2.370435419s ago: executing program 3 (id=422): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020a0600060000002abd7000ffdbdf2504001743"], 0x30}}, 0x44880) 2.209253115s ago: executing program 3 (id=425): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x88, 0x0, &(0x7f0000000500)=[@exit_looper, @release={0x40046306, 0x3}, @enter_looper, @acquire={0x40046305, 0x3}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/118, 0x76, 0x1, 0x31}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x3}, @free_buffer, @exit_looper, @exit_looper], 0xae, 0x0, &(0x7f0000000680)="3aad9415642053ef53f2f7c346902839b68466de8cc4222de9f1f124137dda8be7f9a4dbd6f85079290617508d2f1376e8f5e5c483f8604900e1940615848d0afdfb013a4142dc9bb7fa1db4de0a5407eac8489279272439476e45d41a2eefa34af9c801c848239f2ed07a37d42ad1931c0f0ec5198e304bb76bbf62f826c709800dbfc37ba1980300df410c90d498dd80334176de313fe06667fbbc8a86f795116e40f972779ed69635f7e43b79"}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r8, 0x1, 0x0, @void}, 0x10) r9 = socket(0x2, 0x3, 0xff) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) umount2(&(0x7f00000008c0)='./file0\x00', 0xa) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sendmmsg$unix(r9, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="643c87cf08d21d994efea03321af0c6c7715a604", 0x14}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) getpeername(r13, &(0x7f0000000780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000800)=0x80) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010429c140c15300000000000000", @ANYRES32=0x0, @ANYBLOB="9320000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r12, @ANYBLOB="0a000100aaaaaaaaaa200000"], 0x48}}, 0x20000000) openat2(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0xac27cb79444d4d25, 0x50, 0x21}, 0x18) 1.686187889s ago: executing program 1 (id=428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) 1.685832944s ago: executing program 1 (id=429): r0 = socket(0x28, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x111080, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r2, &(0x7f0000000a40)=0x8000000000000001, 0x7) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) 1.685134623s ago: executing program 1 (id=431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6af", 0x30}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de06f7ae089f225831692ec6b873fd77d10d2dad93fe6c91c512642975ee56e49f55095952b3f13d13c8fccc2410378f6469a8e1e04d3a9642f5ee714672c9de817233992c0ad8234921cc929670b81833cc694046c8121c16872b4b6474893f3ec6e9457f81f43c48214fbe7ebe", 0xf5}], 0x6}}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.679715422s ago: executing program 3 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x2000c0d0) 1.570217775s ago: executing program 4 (id=434): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) prlimit64(r0, 0x3, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.356681471s ago: executing program 3 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x80, 0x48000036, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000000000), 0x400000000000172, 0x0, 0x0) 1.148638606s ago: executing program 4 (id=438): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000200)={0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791080000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_free\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) fcntl$setpipe(r6, 0x407, 0x10000000000000) close_range(r6, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x254000, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r10, 0x80045200, &(0x7f00000000c0)) splice(r9, 0x0, r8, 0x0, 0x3, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000a00)=ANY=[], 0x338) 1.082407155s ago: executing program 2 (id=439): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="8d00", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff02f}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/95, 0x7ffff000}, {&(0x7f0000001140)=""/4096}, {&(0x7f0000000200)=""/239}], 0x286, 0x0) 1.079408113s ago: executing program 3 (id=440): pipe2(0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x11, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000300)={0x200f}) 900.69805ms ago: executing program 2 (id=442): r0 = socket(0x28, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x111080, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r2, &(0x7f0000000a40)=0x8000000000000001, 0x7) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) 853.75241ms ago: executing program 0 (id=443): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) 853.395621ms ago: executing program 1 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 804.709425ms ago: executing program 0 (id=445): r0 = socket$alg(0x26, 0x5, 0x0) accept(r0, 0x0, 0x0) 681.669918ms ago: executing program 2 (id=446): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x17a6) 598.436071ms ago: executing program 0 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x2000c0d0) 493.029118ms ago: executing program 1 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_socket_connect_nvme_tcp() 471.61743ms ago: executing program 0 (id=449): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) prlimit64(r0, 0x3, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 278.313798ms ago: executing program 2 (id=450): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x0) 137.534051ms ago: executing program 0 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x80, 0x48000036, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000000000), 0x400000000000172, 0x0, 0x0) 90.902151ms ago: executing program 1 (id=452): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x800, 0x5349f0be2bb814ed, 0x3, 0x1, "86127580c82b1f9c42e62c636c83e79b14be610cae5a321bad5455a59463d6ec15a62091d436728855a05fce5877ed566374257d86dbe82a1667b346e762b3ba", "43353adcf9b62e4595d5640a8f8fae5bb383e30d8d6a43235bd9812c8e4e47b5", [0x8, 0x9]}) 46.542619ms ago: executing program 3 (id=453): statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)=""/248) 24.378096ms ago: executing program 0 (id=454): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(r0, &(0x7f0000000080)='.\x00', 0x40000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r1, 0x402, 0xd) fcntl$notify(r1, 0x402, 0x0) 0s ago: executing program 4 (id=455): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 58.124060][ T30] audit: type=1400 audit(1743841933.604:88): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.127667][ T5809] cgroup: Unknown subsys name 'net' [ 58.146826][ T30] audit: type=1400 audit(1743841933.604:89): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.177045][ T30] audit: type=1400 audit(1743841933.654:90): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.314369][ T5809] cgroup: Unknown subsys name 'cpuset' [ 58.322357][ T5809] cgroup: Unknown subsys name 'rlimit' [ 58.447324][ T30] audit: type=1400 audit(1743841933.924:91): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.477897][ T30] audit: type=1400 audit(1743841933.924:92): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.510431][ T30] audit: type=1400 audit(1743841933.924:93): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.526651][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.531032][ T30] audit: type=1400 audit(1743841933.924:94): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.560321][ T30] audit: type=1400 audit(1743841933.924:95): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.586525][ T30] audit: type=1400 audit(1743841933.924:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.610306][ T30] audit: type=1400 audit(1743841933.954:97): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.453100][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.466504][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.483640][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.491961][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.499857][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.508441][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.516393][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.520201][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.524856][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.538604][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.541807][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.546574][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.561095][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.568748][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.569121][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.576129][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.584194][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.599816][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.600110][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.608631][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.621938][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.624925][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.630084][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.641061][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.644177][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.651673][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.092062][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.158432][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 62.170184][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 62.270171][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 62.360779][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 62.376438][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.383635][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.392082][ T5824] bridge_slave_0: entered allmulticast mode [ 62.398839][ T5824] bridge_slave_0: entered promiscuous mode [ 62.406455][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.413806][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.421005][ T5820] bridge_slave_0: entered allmulticast mode [ 62.427653][ T5820] bridge_slave_0: entered promiscuous mode [ 62.461614][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.468706][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.476048][ T5824] bridge_slave_1: entered allmulticast mode [ 62.482854][ T5824] bridge_slave_1: entered promiscuous mode [ 62.489909][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.497512][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.504800][ T5820] bridge_slave_1: entered allmulticast mode [ 62.511624][ T5820] bridge_slave_1: entered promiscuous mode [ 62.572080][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.609687][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.628089][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.637513][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.645395][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.652963][ T5827] bridge_slave_0: entered allmulticast mode [ 62.659618][ T5827] bridge_slave_0: entered promiscuous mode [ 62.692513][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.701808][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.708908][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.716088][ T5827] bridge_slave_1: entered allmulticast mode [ 62.722816][ T5827] bridge_slave_1: entered promiscuous mode [ 62.737265][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.744713][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.752097][ T5823] bridge_slave_0: entered allmulticast mode [ 62.758771][ T5823] bridge_slave_0: entered promiscuous mode [ 62.768180][ T5824] team0: Port device team_slave_0 added [ 62.790005][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.797323][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.804528][ T5819] bridge_slave_0: entered allmulticast mode [ 62.811785][ T5819] bridge_slave_0: entered promiscuous mode [ 62.818578][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.825845][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.833332][ T5823] bridge_slave_1: entered allmulticast mode [ 62.839983][ T5823] bridge_slave_1: entered promiscuous mode [ 62.847652][ T5824] team0: Port device team_slave_1 added [ 62.868077][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.875340][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.882668][ T5819] bridge_slave_1: entered allmulticast mode [ 62.890771][ T5819] bridge_slave_1: entered promiscuous mode [ 62.915427][ T5820] team0: Port device team_slave_0 added [ 62.923777][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.935327][ T5820] team0: Port device team_slave_1 added [ 62.965391][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.992020][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.002307][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.009250][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.036165][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.065005][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.075824][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.094609][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.101846][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.128619][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.155235][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.162481][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.188744][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.200403][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.207735][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.233970][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.246116][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.277959][ T5827] team0: Port device team_slave_0 added [ 63.298690][ T5823] team0: Port device team_slave_0 added [ 63.308702][ T5823] team0: Port device team_slave_1 added [ 63.316670][ T5827] team0: Port device team_slave_1 added [ 63.335362][ T5819] team0: Port device team_slave_0 added [ 63.359118][ T5819] team0: Port device team_slave_1 added [ 63.387613][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.394943][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.421422][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.441200][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.448161][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.474440][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.501678][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.508646][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.534760][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.557848][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.565031][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.591271][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.610127][ T5824] hsr_slave_0: entered promiscuous mode [ 63.616388][ T5824] hsr_slave_1: entered promiscuous mode [ 63.621940][ T53] Bluetooth: hci4: command tx timeout [ 63.631590][ T5820] hsr_slave_0: entered promiscuous mode [ 63.637641][ T5820] hsr_slave_1: entered promiscuous mode [ 63.644205][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.651966][ T5820] Cannot create hsr debugfs directory [ 63.668738][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.675876][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.702150][ T5830] Bluetooth: hci1: command tx timeout [ 63.702157][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.709048][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.718316][ T53] Bluetooth: hci3: command tx timeout [ 63.718577][ T53] Bluetooth: hci0: command tx timeout [ 63.718688][ T53] Bluetooth: hci2: command tx timeout [ 63.742379][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.768363][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.834710][ T5827] hsr_slave_0: entered promiscuous mode [ 63.841044][ T5827] hsr_slave_1: entered promiscuous mode [ 63.846941][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.855104][ T5827] Cannot create hsr debugfs directory [ 63.916181][ T5823] hsr_slave_0: entered promiscuous mode [ 63.922268][ T5823] hsr_slave_1: entered promiscuous mode [ 63.928158][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.936177][ T5823] Cannot create hsr debugfs directory [ 63.968221][ T5819] hsr_slave_0: entered promiscuous mode [ 63.974800][ T5819] hsr_slave_1: entered promiscuous mode [ 63.980831][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.988394][ T5819] Cannot create hsr debugfs directory [ 64.279999][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.303520][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.314053][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.331958][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.375952][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.392925][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.407340][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.417471][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.475778][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.503660][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.514064][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.530298][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.597846][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.607625][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.618215][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.642207][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.670354][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.723248][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.740239][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.758921][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.775816][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.787947][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.799628][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.833791][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.841031][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.851669][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.858849][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.886289][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.918748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.925849][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.974505][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.981640][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.008507][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.030458][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.096336][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.114154][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 65.114169][ T30] audit: type=1400 audit(1743841940.594:111): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.115807][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.174356][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.195522][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.202729][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.215043][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.222221][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.252844][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259956][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.283325][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.290479][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.337490][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.399590][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.412335][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.444508][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.489050][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.496193][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.545961][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.553137][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.636077][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.703354][ T5828] Bluetooth: hci4: command tx timeout [ 65.724216][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.744727][ T5820] veth0_vlan: entered promiscuous mode [ 65.758155][ T5820] veth1_vlan: entered promiscuous mode [ 65.790828][ T5828] Bluetooth: hci1: command tx timeout [ 65.796307][ T5828] Bluetooth: hci2: command tx timeout [ 65.799246][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.802137][ T5828] Bluetooth: hci0: command tx timeout [ 65.811412][ T5830] Bluetooth: hci3: command tx timeout [ 65.834028][ T5827] veth0_vlan: entered promiscuous mode [ 65.847038][ T5827] veth1_vlan: entered promiscuous mode [ 65.868472][ T5820] veth0_macvtap: entered promiscuous mode [ 65.879465][ T5820] veth1_macvtap: entered promiscuous mode [ 65.897272][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.908397][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.953606][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.969995][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980233][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.992038][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075985][ T5827] veth0_macvtap: entered promiscuous mode [ 66.099987][ T5827] veth1_macvtap: entered promiscuous mode [ 66.125719][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.162232][ T5819] veth0_vlan: entered promiscuous mode [ 66.177331][ T5819] veth1_vlan: entered promiscuous mode [ 66.204215][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.216187][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.218640][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.234153][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.243676][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.253478][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.264421][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.278473][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.319856][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.329608][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.339878][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.348994][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.386997][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.393069][ T5823] veth0_vlan: entered promiscuous mode [ 66.400374][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.443804][ T5823] veth1_vlan: entered promiscuous mode [ 66.446252][ T30] audit: type=1400 audit(1743841941.914:112): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.MCoFMZ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.475376][ T30] audit: type=1400 audit(1743841941.924:113): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.500004][ T30] audit: type=1400 audit(1743841941.924:114): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.MCoFMZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.507927][ T5819] veth0_macvtap: entered promiscuous mode [ 66.548079][ T30] audit: type=1400 audit(1743841941.924:115): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.577838][ T5824] veth0_vlan: entered promiscuous mode [ 66.596950][ T5819] veth1_macvtap: entered promiscuous mode [ 66.600421][ T30] audit: type=1400 audit(1743841941.934:116): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.MCoFMZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.616581][ T5823] veth0_macvtap: entered promiscuous mode [ 66.637034][ T30] audit: type=1400 audit(1743841941.934:117): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.MCoFMZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.674604][ T30] audit: type=1400 audit(1743841941.944:118): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.678344][ T5824] veth1_vlan: entered promiscuous mode [ 66.700331][ T30] audit: type=1400 audit(1743841942.014:119): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.726619][ T30] audit: type=1400 audit(1743841942.014:120): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="gadgetfs" ino=7275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.728967][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.779311][ T5823] veth1_macvtap: entered promiscuous mode [ 66.841399][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.849268][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.892731][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.903118][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.919042][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.936470][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.954007][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.964811][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.979796][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.997899][ T5904] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 67.012383][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.026420][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.050720][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.068600][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.078665][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.089781][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.101939][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.112582][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.124983][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.135461][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.148639][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.159644][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.178301][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.189479][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.200299][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.214694][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.250638][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.268644][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.282587][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.298888][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.332504][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.342563][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.351996][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.521192][ T81] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.771081][ T81] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 67.795285][ T5830] Bluetooth: hci4: command tx timeout [ 67.820261][ T81] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.833499][ T5824] veth0_macvtap: entered promiscuous mode [ 67.842754][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.864388][ T5830] Bluetooth: hci0: command tx timeout [ 67.870396][ T5830] Bluetooth: hci2: command tx timeout [ 67.876520][ T5830] Bluetooth: hci1: command tx timeout [ 67.888159][ T5830] Bluetooth: hci3: command tx timeout [ 67.903995][ T81] usb 1-1: config 0 has no interface number 0 [ 67.910144][ T81] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 67.923783][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.958790][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.098349][ T81] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.126956][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.158010][ T81] usb 1-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.288034][ T5824] veth1_macvtap: entered promiscuous mode [ 68.296278][ T81] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 68.350157][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.368870][ T81] usb 1-1: Product: syz [ 68.382914][ T81] usb 1-1: Manufacturer: syz [ 68.387560][ T81] usb 1-1: SerialNumber: syz [ 68.414991][ T81] usb 1-1: config 0 descriptor?? [ 68.638219][ T81] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.675482][ T81] usb 1-1: MIDIStreaming interface descriptor not found [ 68.801220][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.870790][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891547][ T81] usb 1-1: USB disconnect, device number 2 [ 68.915034][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.925560][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.935399][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.945854][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.955975][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.966497][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.978226][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.071043][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.091950][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.122312][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.132903][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.143220][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.153695][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.163521][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.173945][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.184616][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.197035][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.197249][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.211341][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.214741][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.229626][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.243639][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.244887][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.316418][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.330670][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.388889][ T5937] input: syz1 as /devices/virtual/input/input5 [ 69.530749][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.547249][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.564075][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.581049][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.601256][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.637396][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.715188][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.724782][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.861444][ T53] Bluetooth: hci4: command tx timeout [ 69.941324][ T5830] Bluetooth: hci1: command tx timeout [ 69.946785][ T5830] Bluetooth: hci2: command tx timeout [ 69.953918][ T5828] Bluetooth: hci0: command tx timeout [ 69.960942][ T53] Bluetooth: hci3: command tx timeout [ 70.039236][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 70.076440][ T5951] sch_tbf: burst 88 is lower than device erspan0 mtu (1464) ! [ 70.704924][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 70.704940][ T30] audit: type=1400 audit(1743841946.184:166): avc: denied { read } for pid=5968 comm="syz.1.22" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.738048][ T30] audit: type=1400 audit(1743841946.214:167): avc: denied { open } for pid=5968 comm="syz.1.22" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.768414][ T30] audit: type=1400 audit(1743841946.214:168): avc: denied { ioctl } for pid=5968 comm="syz.1.22" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.225806][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235277][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.244904][ T30] audit: type=1400 audit(1743841946.714:169): avc: denied { validate_trans } for pid=5983 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.339273][ T30] audit: type=1400 audit(1743841946.744:170): avc: denied { append } for pid=5986 comm="syz.1.30" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.401092][ T30] audit: type=1400 audit(1743841946.864:171): avc: denied { name_bind } for pid=5988 comm="syz.1.31" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.460904][ T5939] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 71.600442][ T30] audit: type=1400 audit(1743841947.074:172): avc: denied { setopt } for pid=5997 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.699684][ T6001] netlink: 96 bytes leftover after parsing attributes in process `syz.3.36'. [ 71.735529][ T30] audit: type=1400 audit(1743841947.214:173): avc: denied { create } for pid=5980 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.767179][ T30] audit: type=1400 audit(1743841947.214:174): avc: denied { write } for pid=5980 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.875453][ T30] audit: type=1400 audit(1743841947.354:175): avc: denied { getopt } for pid=6004 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.906167][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 71.915300][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 71.950349][ T6006] geneve2: entered allmulticast mode [ 72.021983][ T53] Bluetooth: hci0: command 0x0401 tx timeout [ 72.266590][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.362970][ T6027] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.578774][ T6032] netlink: 'syz.2.51': attribute type 6 has an invalid length. [ 72.592668][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.640803][ T5826] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.781300][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 72.806292][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 72.818147][ T5826] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 72.820132][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 72.834035][ T5826] usb 5-1: config 0 has no interface number 0 [ 72.848124][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.858627][ T5826] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 72.869428][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.877133][ T10] usb 4-1: Product: syz [ 72.886822][ T5826] usb 5-1: Product: syz [ 72.897589][ T10] usb 4-1: Manufacturer: syz [ 72.914593][ T10] usb 4-1: SerialNumber: syz [ 72.935037][ T6049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'. [ 72.941719][ T10] usb 4-1: config 0 descriptor?? [ 72.944329][ T5826] usb 5-1: Manufacturer: syz [ 72.964692][ T5826] usb 5-1: SerialNumber: syz [ 72.972437][ T6026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.979997][ T6026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.992611][ T5826] usb 5-1: config 0 descriptor?? [ 73.072241][ T6054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 73.208106][ T5826] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 73.227330][ T5826] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 73.238623][ T6026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.248701][ T5826] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 73.257521][ T6026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.275648][ T5826] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 73.303482][ T5826] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 73.492444][ T5869] usb 5-1: USB disconnect, device number 2 [ 73.551126][ T5869] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 73.581357][ T5869] keyspan 5-1:0.133: device disconnected [ 73.683845][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 73.950102][ T6082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'. [ 74.215502][ T6092] SELinux: syz.4.78 (6092) set checkreqprot to 1. This is no longer supported. [ 74.302860][ T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 74.348676][ T10] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, ce:fb:6b:f3:06:e8 [ 74.412804][ T10] usb 4-1: USB disconnect, device number 2 [ 74.446126][ T10] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 74.770837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.779382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.788097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 74.821444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.830682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.131512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.438745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.643549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.659756][ T6116] xt_hashlimit: size too large, truncated to 1048576 [ 75.884521][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 75.884536][ T30] audit: type=1400 audit(1743841951.364:455): avc: denied { ioctl } for pid=6120 comm="syz.3.88" path="socket:[8011]" dev="sockfs" ino=8011 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.011944][ T6123] ======================================================= [ 76.011944][ T6123] WARNING: The mand mount option has been deprecated and [ 76.011944][ T6123] and is ignored by this kernel. Remove the mand [ 76.011944][ T6123] option from the mount to silence this warning. [ 76.011944][ T6123] ======================================================= [ 76.013765][ T30] audit: type=1400 audit(1743841951.494:456): avc: denied { remount } for pid=6122 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.088491][ T30] audit: type=1400 audit(1743841951.564:457): avc: denied { create } for pid=6122 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.108436][ T30] audit: type=1400 audit(1743841951.564:458): avc: denied { accept } for pid=6122 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.363554][ T971] cfg80211: failed to load regulatory.db [ 76.729705][ T6154] process 'syz.2.101' launched '/dev/fd/5' with NULL argv: empty string added [ 76.740709][ T30] audit: type=1400 audit(1743841952.194:459): avc: denied { execute } for pid=6153 comm="syz.2.101" dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.790027][ T30] audit: type=1400 audit(1743841952.254:460): avc: denied { execute_no_trans } for pid=6153 comm="syz.2.101" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.827346][ T30] audit: type=1400 audit(1743841952.254:461): avc: denied { create } for pid=6156 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.923083][ T30] audit: type=1400 audit(1743841952.254:462): avc: denied { write } for pid=6156 comm="syz.4.104" path="socket:[8048]" dev="sockfs" ino=8048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.953333][ T30] audit: type=1400 audit(1743841952.264:463): avc: denied { nlmsg_read } for pid=6156 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 77.031427][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'. [ 77.168271][ T30] audit: type=1326 audit(1743841952.644:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515c58d169 code=0x7fc00000 [ 78.913663][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 79.132505][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.140787][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.204236][ T6240] bridge_slave_1: left allmulticast mode [ 79.211655][ T6240] bridge_slave_1: left promiscuous mode [ 79.218412][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.264185][ T6240] bridge_slave_0: left allmulticast mode [ 79.269968][ T6240] bridge_slave_0: left promiscuous mode [ 79.284762][ T6242] netlink: 9 bytes leftover after parsing attributes in process `syz.2.136'. [ 79.294292][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.370008][ T6242] gretap0: entered promiscuous mode [ 79.379493][ T6247] netlink: 5 bytes leftover after parsing attributes in process `syz.2.136'. [ 79.398506][ T6247] 0猉功D: renamed from gretap0 [ 79.465672][ T6247] 0猉功D: left promiscuous mode [ 79.477601][ T6247] 0猉功D: entered allmulticast mode [ 79.486005][ T6247] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 79.749311][ T6257] netlink: 'syz.2.140': attribute type 6 has an invalid length. [ 80.848352][ T6310] overlayfs: missing 'lowerdir' [ 81.314787][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 81.314804][ T30] audit: type=1400 audit(1743841956.794:485): avc: denied { watch } for pid=6321 comm="syz.1.167" path="/46" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.625824][ T30] audit: type=1400 audit(1743841957.104:486): avc: denied { mount } for pid=6324 comm="syz.0.168" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.735636][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 82.983161][ T30] audit: type=1400 audit(1743841958.464:487): avc: denied { audit_write } for pid=6362 comm="syz.0.183" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.021326][ T30] audit: type=1107 audit(1743841958.464:488): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 83.462037][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 83.479129][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 83.488147][ T6384] bridge_slave_1: left allmulticast mode [ 83.494649][ T6384] bridge_slave_1: left promiscuous mode [ 83.500576][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.523035][ T6384] bridge_slave_0: left allmulticast mode [ 83.538890][ T6384] bridge_slave_0: left promiscuous mode [ 83.552939][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.639760][ T6391] netlink: 9 bytes leftover after parsing attributes in process `syz.3.194'. [ 83.685657][ T6391] gretap0: entered promiscuous mode [ 83.934513][ T30] audit: type=1400 audit(1743841959.404:489): avc: denied { sqpoll } for pid=6402 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.980876][ T30] audit: type=1400 audit(1743841959.434:490): avc: denied { setopt } for pid=6402 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.136068][ T30] audit: type=1400 audit(1743841959.614:491): avc: denied { write } for pid=6417 comm="syz.0.205" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.462125][ T30] audit: type=1400 audit(1743841959.944:492): avc: denied { map } for pid=6434 comm="syz.0.213" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.510273][ T30] audit: type=1400 audit(1743841959.964:493): avc: denied { read write } for pid=6434 comm="syz.0.213" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.784833][ T30] audit: type=1400 audit(1743841960.264:494): avc: denied { lock } for pid=6443 comm="syz.2.218" path="socket:[9197]" dev="sockfs" ino=9197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 84.871990][ T6445] hub 2-0:1.0: USB hub found [ 84.878109][ T6445] hub 2-0:1.0: 1 port detected [ 86.529129][ T6526] hub 2-0:1.0: USB hub found [ 86.535466][ T6526] hub 2-0:1.0: 1 port detected [ 86.669648][ T6534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.710413][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 86.710432][ T30] audit: type=1400 audit(1743841962.184:498): avc: denied { setopt } for pid=6533 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.085322][ T6550] 0猉功D: left allmulticast mode [ 87.196330][ T6550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.416102][ T6560] 8021q: VLANs not supported on gre0 [ 88.043678][ T30] audit: type=1400 audit(1743841963.524:499): avc: denied { bind } for pid=6586 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.120949][ T30] audit: type=1400 audit(1743841963.544:500): avc: denied { listen } for pid=6586 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.181932][ T30] audit: type=1400 audit(1743841963.544:501): avc: denied { connect } for pid=6586 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.772526][ T6612] geneve0: entered allmulticast mode [ 88.785408][ T6613] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.893655][ T6615] netlink: 'syz.4.289': attribute type 4 has an invalid length. [ 89.195076][ T30] audit: type=1400 audit(1743841964.534:502): avc: denied { setopt } for pid=6624 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.312906][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.296'. [ 89.361065][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.296'. [ 90.389115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.491585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.926679][ T30] audit: type=1400 audit(1743841966.404:503): avc: denied { bind } for pid=6655 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.596247][ T6685] xt_hashlimit: max too large, truncated to 1048576 [ 91.607885][ T6685] Cannot find set identified by id 0 to match [ 92.438229][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 92.506840][ T6706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.325'. [ 92.518285][ T6702] bridge_slave_1: left allmulticast mode [ 92.538181][ T6702] bridge_slave_1: left promiscuous mode [ 92.549644][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.568998][ T6702] bridge_slave_0: left allmulticast mode [ 92.591426][ T6702] bridge_slave_0: left promiscuous mode [ 92.598753][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.609512][ T30] audit: type=1400 audit(1743841968.074:504): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.724280][ T30] audit: type=1400 audit(1743841968.194:505): avc: denied { mounton } for pid=6714 comm="syz.3.328" path="/58/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.888765][ T30] audit: type=1400 audit(1743841968.324:506): avc: denied { watch_reads } for pid=6720 comm="syz.3.331" path="/59" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.603851][ T6738] input: syz1 as /devices/virtual/input/input6 [ 93.819726][ T30] audit: type=1400 audit(1743841969.294:507): avc: denied { setopt } for pid=6740 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.929828][ T30] audit: type=1400 audit(1743841969.324:508): avc: denied { write } for pid=6740 comm="syz.3.340" path="socket:[10053]" dev="sockfs" ino=10053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.285461][ T6776] hub 2-0:1.0: USB hub found [ 95.290500][ T6776] hub 2-0:1.0: 1 port detected [ 95.595660][ T6787] No control pipe specified [ 95.739173][ T6797] input: syz0 as /devices/virtual/input/input7 [ 95.861138][ T6799] geneve0: entered allmulticast mode [ 95.911073][ T30] audit: type=1400 audit(1743841971.384:509): avc: denied { mount } for pid=6800 comm="syz.0.363" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.950798][ T30] audit: type=1400 audit(1743841971.404:510): avc: denied { unmount } for pid=6800 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.121812][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 96.149326][ T6811] bridge_slave_1: left allmulticast mode [ 96.155822][ T6811] bridge_slave_1: left promiscuous mode [ 96.170243][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.382931][ T6811] bridge_slave_0: left allmulticast mode [ 96.480948][ T6811] bridge_slave_0: left promiscuous mode [ 96.578747][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.812106][ T6835] capability: warning: `syz.0.378' uses deprecated v2 capabilities in a way that may be insecure [ 96.910954][ T30] audit: type=1400 audit(1743841972.394:511): avc: denied { getopt } for pid=6839 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.117668][ T6855] geneve2: entered promiscuous mode [ 97.128417][ T6855] geneve2: entered allmulticast mode [ 97.427594][ T6872] input: syz0 as /devices/virtual/input/input8 [ 98.560112][ T30] audit: type=1107 audit(1743841974.034:512): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 98.575441][ T5826] kernel write not supported for file bpf-prog (pid: 5826 comm: kworker/1:3) [ 98.595705][ T30] audit: type=1400 audit(1743841974.054:513): avc: denied { mounton } for pid=6900 comm="syz.0.402" path=2F36312FE91F7189591E9233614B dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 98.998415][ T6912] hub 2-0:1.0: USB hub found [ 99.003908][ T6912] hub 2-0:1.0: 1 port detected [ 99.316994][ T6930] No control pipe specified [ 101.568225][ T7019] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.597829][ T7019] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.633230][ T7019] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.669944][ T7019] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.691684][ T7019] geneve3: entered promiscuous mode [ 101.700326][ T7019] geneve3: entered allmulticast mode [ 101.744658][ T7024] hub 2-0:1.0: USB hub found [ 101.749658][ T7024] hub 2-0:1.0: 1 port detected [ 102.616195][ T7054] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.626723][ T7054] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.636294][ T7054] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.645499][ T7054] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.654982][ T7054] geneve2: entered promiscuous mode [ 102.660297][ T7054] geneve2: entered allmulticast mode [ 102.786115][ T7059] hub 2-0:1.0: USB hub found [ 102.791167][ T7059] hub 2-0:1.0: 1 port detected [ 102.863360][ T30] audit: type=1400 audit(1743841978.304:514): avc: denied { read } for pid=7029 comm="syz.4.438" path="socket:[11085]" dev="sockfs" ino=11085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.251403][ T7066] [ 103.253781][ T7066] ====================================================== [ 103.260803][ T7066] WARNING: possible circular locking dependency detected [ 103.267829][ T7066] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 103.274596][ T7066] ------------------------------------------------------ [ 103.281617][ T7066] syz.1.452/7066 is trying to acquire lock: [ 103.287509][ T7066] ffffffff90697468 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 103.297266][ T7066] [ 103.297266][ T7066] but task is already holding lock: [ 103.304614][ T7066] ffff888025b31428 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 103.315830][ T7066] [ 103.315830][ T7066] which lock already depends on the new lock. [ 103.315830][ T7066] [ 103.326210][ T7066] [ 103.326210][ T7066] the existing dependency chain (in reverse order) is: [ 103.335212][ T7066] [ 103.335212][ T7066] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 103.343804][ T7066] blk_alloc_queue+0x619/0x760 [ 103.349081][ T7066] blk_mq_alloc_queue+0x179/0x290 [ 103.354607][ T7066] __blk_mq_alloc_disk+0x29/0x120 [ 103.360135][ T7066] loop_add+0x496/0xb70 [ 103.364788][ T7066] loop_init+0x164/0x270 [ 103.369654][ T7066] do_one_initcall+0x120/0x6e0 [ 103.374947][ T7066] kernel_init_freeable+0x5c2/0x900 [ 103.380767][ T7066] kernel_init+0x1c/0x2b0 [ 103.385604][ T7066] ret_from_fork+0x45/0x80 [ 103.390613][ T7066] ret_from_fork_asm+0x1a/0x30 [ 103.395902][ T7066] [ 103.395902][ T7066] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 103.403102][ T7066] fs_reclaim_acquire+0x102/0x150 [ 103.408647][ T7066] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 103.414960][ T7066] __alloc_skb+0x2b2/0x380 [ 103.419882][ T7066] alloc_uevent_skb+0x7d/0x210 [ 103.425150][ T7066] kobject_uevent_env+0xca4/0x1870 [ 103.430784][ T7066] kobject_synth_uevent+0x7d4/0x8a0 [ 103.436486][ T7066] bus_uevent_store+0x3d/0x90 [ 103.441670][ T7066] bus_attr_store+0x71/0xb0 [ 103.446681][ T7066] sysfs_kf_write+0xef/0x150 [ 103.451797][ T7066] kernfs_fop_write_iter+0x351/0x510 [ 103.457597][ T7066] vfs_write+0x5ba/0x1180 [ 103.462432][ T7066] ksys_write+0x12a/0x240 [ 103.467270][ T7066] do_syscall_64+0xcd/0x260 [ 103.472374][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.478780][ T7066] [ 103.478780][ T7066] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 103.486590][ T7066] __lock_acquire+0x1173/0x1ba0 [ 103.491952][ T7066] lock_acquire+0x179/0x350 [ 103.497000][ T7066] __mutex_lock+0x199/0xb90 [ 103.502039][ T7066] kobject_uevent_env+0xb36/0x1870 [ 103.507655][ T7066] loop_set_status+0x9c7/0xb90 [ 103.512939][ T7066] loop_set_status_old+0x162/0x1d0 [ 103.518555][ T7066] lo_ioctl+0x695/0x26d0 [ 103.523305][ T7066] blkdev_ioctl+0x274/0x6d0 [ 103.528333][ T7066] __x64_sys_ioctl+0x190/0x200 [ 103.533607][ T7066] do_syscall_64+0xcd/0x260 [ 103.538620][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.545023][ T7066] [ 103.545023][ T7066] other info that might help us debug this: [ 103.545023][ T7066] [ 103.555231][ T7066] Chain exists of: [ 103.555231][ T7066] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 103.555231][ T7066] [ 103.569055][ T7066] Possible unsafe locking scenario: [ 103.569055][ T7066] [ 103.576483][ T7066] CPU0 CPU1 [ 103.581847][ T7066] ---- ---- [ 103.587188][ T7066] lock(&q->q_usage_counter(io)#24); [ 103.592545][ T7066] lock(fs_reclaim); [ 103.599039][ T7066] lock(&q->q_usage_counter(io)#24); [ 103.606921][ T7066] lock(uevent_sock_mutex); [ 103.611512][ T7066] [ 103.611512][ T7066] *** DEADLOCK *** [ 103.611512][ T7066] [ 103.619640][ T7066] 3 locks held by syz.1.452/7066: [ 103.624648][ T7066] #0: ffff888025b42368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90 [ 103.634033][ T7066] #1: ffff888025b31428 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 103.645687][ T7066] #2: ffff888025b31460 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 103.657599][ T7066] [ 103.657599][ T7066] stack backtrace: [ 103.663468][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.1.452 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 103.663485][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.663493][ T7066] Call Trace: [ 103.663499][ T7066] [ 103.663504][ T7066] dump_stack_lvl+0x116/0x1f0 [ 103.663525][ T7066] print_circular_bug+0x275/0x350 [ 103.663547][ T7066] check_noncircular+0x14c/0x170 [ 103.663569][ T7066] __lock_acquire+0x1173/0x1ba0 [ 103.663584][ T7066] lock_acquire+0x179/0x350 [ 103.663596][ T7066] ? kobject_uevent_env+0xb36/0x1870 [ 103.663608][ T7066] ? __pfx___might_resched+0x10/0x10 [ 103.663629][ T7066] __mutex_lock+0x199/0xb90 [ 103.663647][ T7066] ? kobject_uevent_env+0xb36/0x1870 [ 103.663658][ T7066] ? kfree+0x252/0x4d0 [ 103.663677][ T7066] ? kobject_uevent_env+0xb36/0x1870 [ 103.663689][ T7066] ? __pfx___mutex_lock+0x10/0x10 [ 103.663708][ T7066] ? __asan_memcpy+0x3c/0x60 [ 103.663728][ T7066] ? kobject_get_path+0x8e/0x2a0 [ 103.663747][ T7066] ? kobject_uevent_env+0xb36/0x1870 [ 103.663758][ T7066] kobject_uevent_env+0xb36/0x1870 [ 103.663772][ T7066] ? __asan_memcpy+0x3c/0x60 [ 103.663791][ T7066] loop_set_status+0x9c7/0xb90 [ 103.663807][ T7066] loop_set_status_old+0x162/0x1d0 [ 103.663821][ T7066] ? __pfx_loop_set_status_old+0x10/0x10 [ 103.663838][ T7066] ? find_held_lock+0x2b/0x80 [ 103.663854][ T7066] ? is_bpf_text_address+0x8a/0x1a0 [ 103.663876][ T7066] ? stack_trace_save+0x8e/0xc0 [ 103.663893][ T7066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.663908][ T7066] lo_ioctl+0x695/0x26d0 [ 103.663922][ T7066] ? __lock_acquire+0x5ca/0x1ba0 [ 103.663935][ T7066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.663950][ T7066] ? __pfx_lo_ioctl+0x10/0x10 [ 103.663963][ T7066] ? find_held_lock+0x2b/0x80 [ 103.663978][ T7066] ? avc_has_extended_perms+0x33a/0x1090 [ 103.663993][ T7066] ? avc_has_extended_perms+0x47c/0x1090 [ 103.664008][ T7066] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 103.664021][ T7066] ? kasan_quarantine_put+0x10a/0x240 [ 103.664033][ T7066] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.664050][ T7066] ? find_held_lock+0x2b/0x80 [ 103.664067][ T7066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.664081][ T7066] ? blkdev_common_ioctl+0x1dd/0x2250 [ 103.664100][ T7066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.664114][ T7066] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 103.664133][ T7066] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.664153][ T7066] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 103.664174][ T7066] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 103.664195][ T7066] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 103.664218][ T7066] ? __pfx_lo_ioctl+0x10/0x10 [ 103.664231][ T7066] blkdev_ioctl+0x274/0x6d0 [ 103.664249][ T7066] ? __pfx_blkdev_ioctl+0x10/0x10 [ 103.664267][ T7066] ? selinux_file_ioctl+0x180/0x270 [ 103.664286][ T7066] ? selinux_file_ioctl+0xb4/0x270 [ 103.664310][ T7066] ? __pfx_blkdev_ioctl+0x10/0x10 [ 103.664329][ T7066] __x64_sys_ioctl+0x190/0x200 [ 103.664347][ T7066] do_syscall_64+0xcd/0x260 [ 103.664365][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.664378][ T7066] RIP: 0033:0x7f128058d169 [ 103.664390][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.664402][ T7066] RSP: 002b:00007f127e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.664414][ T7066] RAX: ffffffffffffffda RBX: 00007f12807a5fa0 RCX: 00007f128058d169 [ 103.664422][ T7066] RDX: 0000200000000280 RSI: 0000000000004c02 RDI: 0000000000000003 [ 103.664430][ T7066] RBP: 00007f128060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.664438][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.664445][ T7066] R13: 0000000000000000 R14: 00007f12807a5fa0 R15: 00007ffecd4fafa8 [ 103.664457][ T7066]