last executing test programs: 18.090695239s ago: executing program 0 (id=186): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r2, 0x0, r3, 0x0, 0x46) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x5, &(0x7f00000003c0)=0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, r8, &(0x7f0000000580)="a19ca4cad9e39c6b15ebfb1799db27f1a4682b05f3378f7445ddf1e1cca2109967a95b6826044ae69c0f301198ac7220440ef0be183e30988e5066ffffffff3d81b3f83eb0b013fc73f56b58d154e01ae6e5f25a7e4135d3d39cc14b4d08361ec7656ae7eb2c254c440ba5aff9c024e9e432ae303fd7ec703d691b08d24f1bbe603ff6b174dd4f60217fdea81ea26cdf7401464ddf6e79d41607add4a581305e4e11c387522608fff2ac", 0xaa, 0x100000000, 0x0, 0x6, r5}]) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, 0x0) 16.032411131s ago: executing program 3 (id=188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xfffffffffffffffe, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) write(r0, &(0x7f00000003c0), 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) 16.019500044s ago: executing program 1 (id=189): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1cce1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1000\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r3, &(0x7f0000000180)='1\n', 0x2) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@mpls_newroute={0x2c, 0x18, 0x405, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x18, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@mpls_getroute={0x1c, 0x1a, 0x301}, 0x1c}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000002680)={0x1, 0x0, 0x100, 0x7, {0x1, 0x4, 0xfffffff7, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000040)) 14.743595392s ago: executing program 3 (id=191): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x1, 0x4) ioctl$FIONCLEX(r1, 0x5450) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xcb, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mincore(&(0x7f00001a5000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/4096) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x7, 0x4, 0x9}]}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000140)=""/220, 0x5e, 0xdc, 0x1, 0x5, 0x10000, @value=r4}, 0x28) 14.741063547s ago: executing program 0 (id=192): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setpriority(0x1, 0x0, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0xd, 0x8}, {0x8, 0xa6, 0x10, 0x5}}}}, 0x15) accept$alg(r3, 0x0, 0x0) 14.022990751s ago: executing program 3 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="000227bd7000ffdbdf2511000000140003800800030022d4000008000300090000001000068004000500080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r5, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000000c0)=@sr0, 0xee01, &(0x7f0000000280)) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x100, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_val={0x10}]}, 0x100}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13.936512679s ago: executing program 0 (id=195): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) read$fb(r6, 0x0, 0x0) 12.719695007s ago: executing program 3 (id=198): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fdatasync(r0) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) unshare(0x64000600) socket$can_bcm(0x1d, 0x2, 0x2) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/113, 0x71) 11.463162955s ago: executing program 1 (id=200): read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) 11.394687184s ago: executing program 0 (id=201): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) prlimit64(0x0, 0xe, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) rename(0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000340)={0x0, 0xffff, 0x8, &(0x7f0000000240)}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 11.29700301s ago: executing program 2 (id=202): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x200c8090) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_nanosleep(0x0, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa424, 0x3, 0x80, 0x8, 0x81}, 0x4, 0x0, 0x5, 0x5, 0x5, 0x1a, 0x5, 0x15, 0x7, 0x7fff, {0x5, 0xfd8, 0x29c, 0x7f, 0x763}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0xc9c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc70, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xfff3}}, @TCA_FW_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x457a, 0x3, 0x1, 0xa, 0x4, 0x997, 0xc, 0x4, 0x80000000, 0x0, 0x2, 0x74, 0x9, 0xfff, 0x7, 0x8, 0x7, 0x4, 0x7, 0xec0, 0xcd, 0x6, 0xe41, 0x6, 0x2, 0xac0a, 0x2, 0x80000000, 0x8, 0x0, 0x3ff, 0x1, 0x7ff, 0xffff, 0x9, 0x7, 0x2, 0x2, 0x5ba53dbf, 0x162, 0x8, 0x8, 0x2, 0x40, 0x3, 0x9, 0x10001, 0x7, 0x800, 0x8a, 0x8, 0x81, 0x6, 0x9, 0x2, 0x1f, 0x1, 0x5, 0x4, 0x0, 0xc, 0x1, 0x4, 0xa060, 0x3, 0x4, 0x8, 0x5, 0x9, 0x3, 0xf, 0x6, 0x2, 0x4, 0xd, 0x9000000, 0x0, 0x7, 0xfffffffc, 0x401, 0x101, 0x7fff, 0x4, 0x520, 0x7, 0x4, 0x6, 0xb, 0x81, 0x200, 0x7ff, 0x10, 0x9, 0x1, 0x4, 0x1, 0x0, 0x5, 0x1, 0xfffffffa, 0xf, 0xc92c, 0x40, 0x1, 0x5, 0x75d, 0x1, 0xffffff09, 0x7, 0x7, 0x1, 0x3, 0x5, 0x5, 0x6, 0x400, 0x0, 0x8, 0xfffffff8, 0xc7, 0x4de, 0x5676, 0xc, 0x81, 0x0, 0x5, 0x6, 0x0, 0xb1b9, 0x18a60c50, 0x4, 0x0, 0x8, 0x5, 0x3, 0x10001, 0xf5, 0x8000, 0x3, 0x4, 0x5, 0x8, 0xb87, 0xd3b, 0x3, 0x8, 0x2, 0x6, 0x52, 0x2, 0x9, 0x3ff, 0xa3, 0xab8, 0x36, 0x7, 0x1, 0x7, 0x63, 0x3f1f, 0xd7b5, 0x5, 0x9, 0x0, 0xa5d, 0x4, 0x3, 0x40, 0xb7400000, 0x7, 0xffffffbf, 0xfffffff8, 0x3, 0x3, 0x5, 0x7, 0x4, 0x1, 0x80000000, 0x8000, 0x1847, 0x5a5, 0x3, 0x100, 0xf80, 0x4, 0x3f, 0x6, 0x9, 0x5, 0x7, 0x8, 0x7, 0xffff7fff, 0x8, 0x101, 0x8, 0x4, 0x7, 0x9, 0x6, 0x6, 0x4, 0xfffffff9, 0x1, 0x80000000, 0x2, 0x9, 0x8, 0x7ff, 0x0, 0x40, 0xfffffffc, 0x1, 0x8, 0x6, 0xf, 0x7fff, 0x1, 0x5, 0x72e7, 0x5, 0x7fff, 0x7, 0x7, 0x7, 0x9, 0x800, 0xfffffff9, 0x5, 0x104, 0x7fffffff, 0x4, 0x6, 0xdee, 0x7, 0x7, 0x2af, 0x1, 0x4, 0x6, 0x63f, 0x240, 0x886, 0x8, 0x8, 0x9, 0x1a1, 0x6, 0x7, 0x40, 0x0, 0x6, 0x9, 0xb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x77, 0x50, 0x6, 0x0, 0x1, 0x6, 0x7, 0x6, 0xc114, 0x0, 0x2, 0x1, 0x7, 0xfffffffd, 0x6, 0x7000000, 0x3, 0xffff, 0x72, 0x6, 0x9, 0xfffffff7, 0x1, 0x10, 0xc, 0x6, 0x5, 0x9, 0xb87, 0x7, 0x401, 0x96, 0x8, 0x9, 0x980, 0x0, 0x3, 0x1, 0xfff, 0xc, 0x9, 0x5, 0x2, 0x4, 0x4, 0x8, 0x200, 0x2, 0xc22, 0x9, 0xffffffff, 0x5, 0x6, 0xfff, 0x7, 0x800, 0xcd9, 0x0, 0x6e, 0xffff596f, 0x7, 0x641f, 0x5, 0x7fff, 0x9, 0xfe, 0x8, 0x5, 0xee0, 0x9, 0xdc, 0x40, 0xffff, 0x8, 0x526e, 0x5, 0x9, 0x7, 0x7, 0x5, 0xf0e33f8, 0x81, 0x8, 0xd, 0xa2, 0x9, 0x7fffffff, 0x2, 0x89, 0x2, 0x1, 0x1, 0x3, 0x1, 0xa8ed, 0x3, 0x2, 0xffffffbf, 0x1000, 0x0, 0x825, 0xdb4, 0x6, 0xbd37, 0x1, 0x9, 0x9, 0x81, 0x8, 0x8, 0x5, 0x1, 0xbe, 0x4, 0xe, 0xe, 0x9, 0x991, 0x100, 0x4, 0x6e5, 0x3, 0xffff, 0x8, 0x80000001, 0xfffffff9, 0x0, 0x2, 0x31d, 0xba, 0x3ff, 0x5, 0x1000, 0x7ff, 0x5, 0x62, 0xcff3, 0x101, 0x80000000, 0x9, 0xf, 0x6, 0xe, 0x101, 0x0, 0x6, 0x2, 0xe8e, 0x101, 0x3ff, 0x80000000, 0xfffffffa, 0x0, 0xf63, 0x9, 0x0, 0x22, 0xcf5f, 0x401, 0x7, 0x4, 0x1, 0x7, 0xb, 0x1, 0x40, 0x6, 0x4, 0x8, 0xc00, 0x0, 0x40, 0x8, 0x401, 0x9, 0xbe4, 0x5, 0x5, 0xffff7c09, 0xd9a, 0xe, 0x1, 0x3, 0x5, 0x80000001, 0x7, 0x9, 0x7fff, 0x2, 0x8, 0xff, 0x36, 0x3, 0x7d9cbac4, 0x9, 0x1000, 0x2, 0x318, 0x2, 0x8, 0x5f, 0x100, 0x5, 0x8, 0x5, 0x463ffe59, 0x5d4d, 0x6, 0x3, 0x80000001, 0x101, 0x7, 0xa9, 0x7, 0x993d, 0x1, 0x7f, 0x9, 0x9, 0x9, 0x8b, 0x7, 0x4, 0x3, 0xb, 0x0, 0x7fffffff, 0x81, 0x1, 0x10, 0x4, 0x7, 0x5, 0x5, 0x5, 0x6, 0x5, 0x81, 0xa5e2, 0x9000000, 0x3, 0x1, 0x5, 0x5, 0x476, 0x4c7a, 0x3, 0x5, 0x3, 0x80000000, 0x0, 0x3, 0x6, 0x3, 0xee]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x644}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfffffffa, 0x1, 0x9, 0x9d5, 0xfff, 0x0, 0x8, 0xb93, 0x4b9, 0x10000, 0xfffffffa, 0x80000001, 0x4, 0x40, 0x508, 0x9, 0x7, 0x3, 0x78ed, 0x1, 0x6, 0x5, 0xfffffe01, 0x1, 0x6, 0x9, 0x73f, 0x15e, 0x101, 0x800, 0x923, 0xffff, 0xff, 0x9, 0x4, 0x4, 0x7, 0x4, 0x6, 0x0, 0x5, 0x5, 0xd1ff, 0x6407, 0x694, 0x8, 0x9f, 0x9, 0x81, 0xffff, 0x5, 0x8, 0x3, 0x200000, 0x5, 0x0, 0x1, 0xfffffffc, 0x2, 0x101, 0x3, 0x7fff, 0xe, 0x7, 0x6, 0x310, 0x3, 0x200, 0x64, 0x0, 0x7, 0xb, 0xbe2, 0xd8, 0xfffffff9, 0x2b9, 0x9e43ab2, 0x8000, 0x713b, 0x5, 0x80000000, 0x6, 0x1, 0x6, 0x3, 0x4, 0x7f, 0x1, 0x1, 0x2, 0x3, 0xaa1, 0xc, 0x889, 0x4, 0x101, 0xc2c, 0x415, 0x1000, 0x9, 0x8, 0x800, 0x4, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x400, 0xffffff00, 0x4, 0x2, 0x0, 0x30000, 0x50000, 0x80000001, 0x9, 0x7, 0x2, 0x80000001, 0x2e1, 0x0, 0x80000000, 0x4, 0x5, 0x4, 0xfffffe00, 0x3, 0x9, 0x6, 0x6, 0x2fea, 0x0, 0x401, 0x38, 0x6, 0x6, 0x0, 0x5, 0x2, 0x3, 0xf, 0x3, 0x2, 0xc, 0xea, 0x6, 0x3, 0x4, 0x5057, 0x0, 0x6, 0x3, 0x202a, 0x5bc1, 0x2c5, 0x5, 0x5, 0x0, 0x5, 0x9, 0x1ff, 0x5, 0x7c58, 0x3, 0x8000, 0x6, 0x722800f, 0x0, 0xc61, 0x5, 0x1, 0xfffffff7, 0x93fd, 0x80000000, 0x1000, 0x200, 0xc, 0xd, 0x1, 0x1, 0xe4, 0x7, 0x9, 0x22, 0x6c, 0x6, 0x5, 0x3, 0xfffffff7, 0x2, 0x3, 0x9, 0x2, 0x0, 0x1, 0x8, 0x9, 0x4000000, 0x0, 0x4, 0x3, 0x3d, 0x83, 0xffffffff, 0x401, 0x9, 0x80, 0xcd, 0x9, 0xb, 0xfff, 0x3, 0xb16, 0x6, 0x2, 0x6, 0x2, 0x80000001, 0x5, 0x63a40, 0x3a, 0x3, 0x3, 0x7, 0xe52, 0xfffffffc, 0x1, 0x200, 0x3, 0xff, 0x19, 0xff, 0x0, 0x739c, 0x7fffffff, 0x8, 0xd94, 0xe, 0x3, 0x3, 0x2, 0x2, 0xffffff9b, 0x8, 0x8, 0x10000000, 0x7f, 0x5c4f, 0x1, 0x15, 0x1, 0x0, 0x4, 0x6]}]}]}}]}, 0xc9c}, 0x1, 0x0, 0x0, 0x4005888}, 0x4000010) 10.078059267s ago: executing program 0 (id=203): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) membarrier(0x4, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x7fff, 0x48a001) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) 10.076873138s ago: executing program 1 (id=204): syz_open_dev$swradio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) syz_io_uring_setup(0xf08, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) epoll_create1(0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) 10.022772115s ago: executing program 3 (id=205): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 9.253177388s ago: executing program 4 (id=206): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2900, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) 8.55900831s ago: executing program 1 (id=207): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185300, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0x2, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x1, 0xd000, 0xc, 0xc, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xd, 0x0, 0xc0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0x8080000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3d}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0x9000, 0x0, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x8, 0x0, 0x40}, {0x4000}, {0xdddd1000, 0xff}, 0x60000015, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x4) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) 7.692279863s ago: executing program 2 (id=208): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xfffffffffffffffe, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) write(r0, &(0x7f00000003c0), 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) 7.651776625s ago: executing program 4 (id=209): mkdir(&(0x7f0000000140)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) 6.638196883s ago: executing program 2 (id=210): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x18108800, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4.949406389s ago: executing program 2 (id=211): openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42, 0xdf) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r3, 0x3) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 4.906479671s ago: executing program 4 (id=212): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000010c0)) 4.875749883s ago: executing program 3 (id=213): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0xfffffffe, 0x19, "0038e0079c7f65c5d13c000000f73809630400"}) r0 = syz_open_pts(0xffffffffffffffff, 0x900) dup3(r0, 0xffffffffffffffff, 0x80000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x4000000, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) syz_open_dev$sndctrl(0x0, 0x2, 0x80040) 4.36566749s ago: executing program 0 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="aa1d484e0a4e200000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea32db0e8f20d5bc27", 0x2c}], 0x2) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r2, 0x705, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd70000000000002180000", @ANYRES32=r3, @ANYBLOB="080004000000001008000200e000000208008900ac1414bb0800090002000000080008000000000008000200e00000"], 0x48}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r8, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x3, 0x0, 0x81}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8894}, 0x4004001) 3.822685501s ago: executing program 1 (id=215): modify_ldt$write2(0x11, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1b) close(0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.872153489s ago: executing program 2 (id=216): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xfffffffffffffffe, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) write(r0, &(0x7f00000003c0), 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) 2.281252605s ago: executing program 4 (id=217): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x8000) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8050) 1.074725428s ago: executing program 4 (id=218): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000680)={&(0x7f0000000000)=0x4, 0xfff, &(0x7f00000004c0)=[{}, {}], &(0x7f0000000640)}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x20048800) syz_emit_ethernet(0x4a, &(0x7f0000001280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x5, 0x0, 0x20, {[@md5sig={0x13, 0x12, "3cf8d8b9d377f922754884b4daf8a62a"}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='btrfs\x00', 0x40c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000480)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0x0) 932.260002ms ago: executing program 1 (id=219): socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643d3825d2167b17b9b5cdade15a0a22694f7d69d980969b5d6c0eb5e10bd48138e71ff28fb5b4671e6e531292d2af6bc9d6413478b74d7a5a8dd902", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) 131.106776ms ago: executing program 4 (id=220): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xfffffffffffffffe, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) write(r0, &(0x7f00000003c0), 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) 0s ago: executing program 2 (id=221): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x253f41, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x24b4, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1f, r2, 0x0, 0xffffffff00000000}, 0x38) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4067, 0xfe3}, {&(0x7f0000001f80)=""/4144, 0x1030}], 0x3}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x53, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r4, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000180)=""/174, 0x1000, 0x1800, 0x6, 0x2}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0x1}}}, 0x24}}, 0x4) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', '6', ':', 'a', ':', '19', '.', '10'}}, 0x15) kernel console output (not intermixed with test programs): [ 56.676849][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 56.676863][ T30] audit: type=1400 audit(1785797910.140:121): avc: denied { write } for pid=5527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.721354][ T30] audit: type=1400 audit(1785797910.190:122): avc: denied { write } for pid=5538 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.899857][ T30] audit: type=1400 audit(1785797910.370:123): avc: denied { write } for pid=5542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.943967][ T30] audit: type=1400 audit(1785797910.410:124): avc: denied { write } for pid=5553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.114415][ T30] audit: type=1400 audit(1785797910.580:125): avc: denied { write } for pid=5556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.168591][ T30] audit: type=1400 audit(1785797910.630:126): avc: denied { write } for pid=5567 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.677340][ T30] audit: type=1400 audit(1785797912.140:127): avc: denied { write } for pid=5574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.724988][ T30] audit: type=1400 audit(1785797912.190:128): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 63.876025][ T30] audit: type=1400 audit(1785797917.340:129): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.899842][ T30] audit: type=1400 audit(1785797917.370:130): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.902548][ T5592] cgroup: Unknown subsys name 'net' [ 63.929414][ T30] audit: type=1400 audit(1785797917.400:131): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.061916][ T5592] cgroup: Unknown subsys name 'cpuset' [ 64.069647][ T5592] cgroup: Unknown subsys name 'rlimit' [ 64.180552][ T30] audit: type=1400 audit(1785797917.650:132): avc: denied { setattr } for pid=5592 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.204407][ T30] audit: type=1400 audit(1785797917.650:133): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.234191][ T30] audit: type=1400 audit(1785797917.650:134): avc: denied { write } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.254814][ T30] audit: type=1400 audit(1785797917.650:135): avc: denied { read } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.293062][ T30] audit: type=1400 audit(1785797917.670:136): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.310515][ T5594] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.318337][ T30] audit: type=1400 audit(1785797917.670:137): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.349908][ T30] audit: type=1400 audit(1785797917.800:138): avc: denied { relabelto } for pid=5594 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.301352][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.199749][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.208373][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.217337][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.226512][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.235207][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.243425][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.255648][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.258934][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.264875][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.271431][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.278546][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.286902][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.299873][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.300099][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.307082][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.316626][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.328835][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.329279][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.337140][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.343904][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.351028][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.364815][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.373715][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.381705][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.392505][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.588693][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.596743][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.606739][ T5611] bridge_slave_0: entered allmulticast mode [ 68.613636][ T5611] bridge_slave_0: entered promiscuous mode [ 68.644949][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.652445][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.660251][ T5611] bridge_slave_1: entered allmulticast mode [ 68.666951][ T5611] bridge_slave_1: entered promiscuous mode [ 68.703922][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.711159][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.718287][ T5605] bridge_slave_0: entered allmulticast mode [ 68.725143][ T5605] bridge_slave_0: entered promiscuous mode [ 68.753139][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.760388][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.767551][ T5605] bridge_slave_1: entered allmulticast mode [ 68.774310][ T5605] bridge_slave_1: entered promiscuous mode [ 68.819535][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.856842][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.872821][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.879997][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.887307][ T5614] bridge_slave_0: entered allmulticast mode [ 68.894340][ T5614] bridge_slave_0: entered promiscuous mode [ 68.903446][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.914424][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.923811][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.930894][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.938061][ T5612] bridge_slave_0: entered allmulticast mode [ 68.944936][ T5612] bridge_slave_0: entered promiscuous mode [ 68.965875][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.973127][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.980366][ T5614] bridge_slave_1: entered allmulticast mode [ 68.987178][ T5614] bridge_slave_1: entered promiscuous mode [ 68.999892][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.006996][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.014155][ T5612] bridge_slave_1: entered allmulticast mode [ 69.020875][ T5612] bridge_slave_1: entered promiscuous mode [ 69.065886][ T5611] team0: Port device team_slave_0 added [ 69.085225][ T5605] team0: Port device team_slave_0 added [ 69.098446][ T5611] team0: Port device team_slave_1 added [ 69.106053][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.115535][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.122736][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.130744][ T5604] bridge_slave_0: entered allmulticast mode [ 69.137399][ T5604] bridge_slave_0: entered promiscuous mode [ 69.145551][ T5605] team0: Port device team_slave_1 added [ 69.153561][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.170571][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.180189][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.187319][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.194637][ T5604] bridge_slave_1: entered allmulticast mode [ 69.201778][ T5604] bridge_slave_1: entered promiscuous mode [ 69.215765][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.265487][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.272657][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.298865][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.323492][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.330557][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.356824][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.369156][ T5612] team0: Port device team_slave_0 added [ 69.378937][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.386070][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.411987][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.424130][ T5614] team0: Port device team_slave_0 added [ 69.430295][ T5610] Bluetooth: hci4: command tx timeout [ 69.430395][ T5610] Bluetooth: hci0: command tx timeout [ 69.430456][ T5610] Bluetooth: hci1: command tx timeout [ 69.439837][ T5613] Bluetooth: hci2: command tx timeout [ 69.447370][ T5614] team0: Port device team_slave_1 added [ 69.452729][ T5610] Bluetooth: hci3: command tx timeout [ 69.460864][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.473244][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.480376][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.506451][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.518525][ T5612] team0: Port device team_slave_1 added [ 69.536304][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.583145][ T5604] team0: Port device team_slave_0 added [ 69.595969][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.603124][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.629056][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.640713][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.647665][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.673813][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.686219][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.693288][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.719178][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.731305][ T5604] team0: Port device team_slave_1 added [ 69.743558][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.751509][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.777859][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.817510][ T5611] hsr_slave_0: entered promiscuous mode [ 69.824076][ T5611] hsr_slave_1: entered promiscuous mode [ 69.840311][ T5605] hsr_slave_0: entered promiscuous mode [ 69.846586][ T5605] hsr_slave_1: entered promiscuous mode [ 69.852611][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 69.858369][ T5605] Cannot create hsr debugfs directory [ 69.872622][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.879685][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.905705][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.917865][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.924858][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.950965][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.997219][ T5612] hsr_slave_0: entered promiscuous mode [ 70.003294][ T5612] hsr_slave_1: entered promiscuous mode [ 70.009153][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 70.015262][ T5612] Cannot create hsr debugfs directory [ 70.060084][ T5614] hsr_slave_0: entered promiscuous mode [ 70.066119][ T5614] hsr_slave_1: entered promiscuous mode [ 70.072399][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 70.078204][ T5614] Cannot create hsr debugfs directory [ 70.148794][ T5604] hsr_slave_0: entered promiscuous mode [ 70.155040][ T5604] hsr_slave_1: entered promiscuous mode [ 70.161148][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 70.166883][ T5604] Cannot create hsr debugfs directory [ 70.459150][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.473370][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.482297][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.492027][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.500147][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.510021][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.517627][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.526578][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.577319][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.587429][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.595831][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.605170][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.613428][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.621949][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.633116][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.641631][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.721757][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.732086][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.743974][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.753367][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.761999][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.771107][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.778798][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.787776][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.861043][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.877550][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.887044][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.896056][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.904652][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.918566][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.927709][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.941356][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.951212][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.985822][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.011325][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.018620][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.031601][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.038640][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.046297][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.077165][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.085798][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.094423][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.103664][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.112765][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.121751][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.130731][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.137790][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.152543][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.162179][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.193518][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.227004][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.234137][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.259267][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.266362][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.283082][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.352041][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.388213][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.395405][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.420633][ T5605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.445092][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.452301][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.480968][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.510478][ T5608] Bluetooth: hci0: command tx timeout [ 71.516326][ T5619] Bluetooth: hci4: command tx timeout [ 71.522699][ T5607] Bluetooth: hci1: command tx timeout [ 71.528545][ T5610] Bluetooth: hci3: command tx timeout [ 71.531363][ T5613] Bluetooth: hci2: command tx timeout [ 71.566831][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.607585][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.614743][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.633681][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.646596][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.653754][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.722406][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.756176][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.763332][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.778392][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.785532][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.985825][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.363406][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.486040][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.522555][ T5605] veth0_vlan: entered promiscuous mode [ 72.572754][ T5605] veth1_vlan: entered promiscuous mode [ 72.683405][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.695620][ T5611] veth0_vlan: entered promiscuous mode [ 72.707166][ T5605] veth0_macvtap: entered promiscuous mode [ 72.718845][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.727228][ T5612] veth0_vlan: entered promiscuous mode [ 72.734898][ T5605] veth1_macvtap: entered promiscuous mode [ 72.752448][ T5611] veth1_vlan: entered promiscuous mode [ 72.770591][ T5612] veth1_vlan: entered promiscuous mode [ 72.787242][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.801106][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.875309][ T5611] veth0_macvtap: entered promiscuous mode [ 72.891929][ T5614] veth0_vlan: entered promiscuous mode [ 72.908424][ T5612] veth0_macvtap: entered promiscuous mode [ 72.923651][ T5604] veth0_vlan: entered promiscuous mode [ 72.933309][ T5614] veth1_vlan: entered promiscuous mode [ 72.943126][ T5611] veth1_macvtap: entered promiscuous mode [ 72.953825][ T5612] veth1_macvtap: entered promiscuous mode [ 73.007530][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.017149][ T5604] veth1_vlan: entered promiscuous mode [ 73.028808][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.038156][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.048329][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.049063][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.066914][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.110731][ T177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.124491][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.136368][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.168040][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 73.168055][ T30] audit: type=1400 audit(1785797926.630:152): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.izEVP7/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.200282][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.202204][ T30] audit: type=1400 audit(1785797926.630:153): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.212561][ T5614] veth0_macvtap: entered promiscuous mode [ 73.234179][ T30] audit: type=1400 audit(1785797926.630:154): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.izEVP7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.262686][ T30] audit: type=1400 audit(1785797926.650:155): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.287114][ T30] audit: type=1400 audit(1785797926.650:156): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.izEVP7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.295747][ T5604] veth0_macvtap: entered promiscuous mode [ 73.317826][ T30] audit: type=1400 audit(1785797926.650:157): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.izEVP7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.354187][ T30] audit: type=1400 audit(1785797926.650:158): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.354195][ T5604] veth1_macvtap: entered promiscuous mode [ 73.362936][ T5614] veth1_macvtap: entered promiscuous mode [ 73.375659][ T30] audit: type=1400 audit(1785797926.710:159): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.411018][ T30] audit: type=1400 audit(1785797926.710:160): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="gadgetfs" ino=7745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.435266][ T30] audit: type=1400 audit(1785797926.710:161): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.475451][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.481490][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.499613][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511955][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.556746][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.599709][ T5613] Bluetooth: hci3: command tx timeout [ 73.605757][ T5608] Bluetooth: hci1: command tx timeout [ 73.611989][ T5613] Bluetooth: hci4: command tx timeout [ 73.618181][ T5608] Bluetooth: hci2: command tx timeout [ 73.624528][ T5613] Bluetooth: hci0: command tx timeout [ 73.659561][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678345][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.690627][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.699647][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.725575][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.733895][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.746296][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.790049][ T745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.882238][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.924926][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.961305][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.975320][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.987679][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.007643][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.017030][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.028700][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.043009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.058501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.179471][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.189154][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.198330][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.209523][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.251750][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.261210][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.747403][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.777952][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.863544][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.941800][ T5610] Bluetooth: hci0: command tx timeout [ 75.943040][ T5613] Bluetooth: hci2: command tx timeout [ 75.947847][ T5610] Bluetooth: hci4: command tx timeout [ 75.952767][ T5608] Bluetooth: hci1: command tx timeout [ 75.952790][ T5608] Bluetooth: hci3: command tx timeout [ 75.975632][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.071510][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.121282][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.235075][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.364041][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.702490][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.714986][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.176147][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 78.176158][ T30] audit: type=1400 audit(1785797931.640:197): avc: denied { read } for pid=5828 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.361697][ T30] audit: type=1400 audit(1785797932.830:198): avc: denied { create } for pid=5842 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.778009][ T30] audit: type=1400 audit(1785797933.230:199): avc: denied { create } for pid=5846 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.356076][ T30] audit: type=1400 audit(1785797933.230:200): avc: denied { bind } for pid=5846 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.445243][ T30] audit: type=1400 audit(1785797933.230:201): avc: denied { write } for pid=5846 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.526102][ T30] audit: type=1400 audit(1785797933.940:202): avc: denied { create } for pid=5852 comm="syz.3.8" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.547658][ T30] audit: type=1400 audit(1785797933.940:203): avc: denied { ioctl } for pid=5852 comm="syz.3.8" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9222 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.579570][ T30] audit: type=1400 audit(1785797933.940:204): avc: denied { read } for pid=5852 comm="syz.3.8" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.740128][ T30] audit: type=1400 audit(1785797933.970:205): avc: denied { bind } for pid=5850 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.305402][ T30] audit: type=1400 audit(1785797934.110:206): avc: denied { allowed } for pid=5852 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.376515][ T5851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 81.532188][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 83.798626][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 83.798664][ T30] audit: type=1400 audit(1785797937.130:219): avc: denied { create } for pid=5877 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.166816][ T30] audit: type=1400 audit(1785797937.130:220): avc: denied { connect } for pid=5877 comm="syz.3.19" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.213172][ T30] audit: type=1400 audit(1785797937.180:221): avc: denied { watch } for pid=5877 comm="syz.3.19" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 84.260870][ T5885] netlink: 'syz.1.22': attribute type 4 has an invalid length. [ 84.818809][ T30] audit: type=1400 audit(1785797938.240:222): avc: denied { read write } for pid=5884 comm="syz.1.22" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.860246][ T30] audit: type=1400 audit(1785797938.240:223): avc: denied { open } for pid=5884 comm="syz.1.22" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.893318][ T30] audit: type=1400 audit(1785797938.250:224): avc: denied { ioctl } for pid=5884 comm="syz.1.22" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.927879][ T5885] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 84.997630][ T30] audit: type=1400 audit(1785797938.460:225): avc: denied { perfmon } for pid=5884 comm="syz.1.22" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.029241][ T30] audit: type=1400 audit(1785797938.490:226): avc: denied { prog_run } for pid=5884 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.304325][ T30] audit: type=1400 audit(1785797938.520:227): avc: denied { create } for pid=5889 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.906908][ T30] audit: type=1400 audit(1785797938.520:228): avc: denied { getopt } for pid=5889 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.987071][ T10] cfg80211: failed to load regulatory.db [ 87.664496][ T5893] kexec: Could not allocate control_code_buffer [ 87.799940][ T5716] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.016089][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 88.071826][ T5716] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 88.135432][ T5716] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 88.205412][ T5716] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 88.238715][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.284538][ T5716] usb 1-1: Product: syz [ 88.309022][ T5716] usb 1-1: Manufacturer: syz [ 88.335534][ T5716] usb 1-1: SerialNumber: syz [ 89.058139][ T5716] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 89.137245][ T5716] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 89.587159][ T5928] process 'syz.3.30' launched './file0' with NULL argv: empty string added [ 89.650191][ T5716] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 89.709894][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 89.709936][ T30] audit: type=1400 audit(1785797943.050:244): avc: denied { execute } for pid=5926 comm="syz.3.30" name="file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.830022][ T30] audit: type=1400 audit(1785797943.070:245): avc: denied { execute_no_trans } for pid=5926 comm="syz.3.30" path="/6/file0" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.896958][ T30] audit: type=1400 audit(1785797943.340:246): avc: denied { ioctl } for pid=5926 comm="syz.3.30" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.922521][ T5716] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 89.977735][ T5716] usb 1-1: USB disconnect, device number 2 [ 90.017297][ T5716] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 90.030646][ T5716] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 90.042844][ T5716] visor 1-1:1.0: device disconnected [ 90.056676][ T30] audit: type=1400 audit(1785797943.520:247): avc: denied { create } for pid=5923 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.078984][ T5932] Set syz0 is full, maxelem 0 reached [ 90.160247][ T30] audit: type=1400 audit(1785797943.620:248): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 91.059440][ T5735] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 91.094979][ T5942] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.192053][ T30] audit: type=1400 audit(1785797944.660:249): avc: denied { create } for pid=5941 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.251313][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.266144][ T5735] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.281704][ T30] audit: type=1400 audit(1785797944.680:250): avc: denied { write } for pid=5941 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.301752][ T5735] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 91.311416][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.327569][ T5735] usb 5-1: config 0 descriptor?? [ 91.429483][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 91.536429][ T30] audit: type=1400 audit(1785797945.000:251): avc: denied { block_suspend } for pid=5949 comm="syz.3.37" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.623962][ T30] audit: type=1400 audit(1785797945.090:252): avc: denied { read } for pid=5954 comm="syz.1.38" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.810362][ T30] audit: type=1400 audit(1785797945.090:253): avc: denied { open } for pid=5954 comm="syz.1.38" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.493703][ T5950] IPVS: length: 30 != 120 [ 92.706399][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.714618][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.723105][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.731701][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.740914][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.750586][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.758753][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.766968][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.775131][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.783332][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: unknown main item tag 0x0 [ 92.837318][ T5735] aquacomputer_d5next 0003:0C70:F00B.0001: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 93.042265][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 93.096914][ T5972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.41'. [ 93.330499][ T10] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 93.370561][ T5666] usb 5-1: USB disconnect, device number 2 [ 93.500568][ T5972] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 93.522631][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.535433][ T10] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 93.544676][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.586922][ T10] usb 2-1: config 0 descriptor?? [ 94.002162][ T5970] Zero length message leads to an empty skb [ 94.809606][ T10] usb 2-1: string descriptor 0 read error: -71 [ 94.822326][ T10] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 94.833922][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 94.833938][ T30] audit: type=1400 audit(1785797948.310:266): avc: denied { write } for pid=5979 comm="syz.2.43" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.865315][ T10] earthmate ttyUSB0: required endpoint is missing [ 94.874466][ T10] usb 2-1: USB disconnect, device number 2 [ 94.881576][ T10] cypress_m8 2-1:0.0: device disconnected [ 94.894722][ T30] audit: type=1400 audit(1785797948.310:267): avc: denied { open } for pid=5979 comm="syz.2.43" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.040219][ T30] audit: type=1400 audit(1785797948.350:268): avc: denied { ioctl } for pid=5979 comm="syz.2.43" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.497456][ T5990] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 96.332228][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.284748][ T30] audit: type=1400 audit(1785797950.750:269): avc: denied { create } for pid=5992 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.375157][ T30] audit: type=1400 audit(1785797950.830:270): avc: denied { create } for pid=5992 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.532361][ T30] audit: type=1400 audit(1785797950.880:271): avc: denied { write } for pid=5992 comm="syz.2.46" path="socket:[9491]" dev="sockfs" ino=9491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.589438][ T5607] Bluetooth: hci5: command 0x1003 tx timeout [ 97.612003][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.719432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 98.209791][ T30] audit: type=1400 audit(1785797950.890:272): avc: denied { create } for pid=5992 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.230306][ T30] audit: type=1400 audit(1785797950.900:273): avc: denied { write } for pid=5992 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.513792][ T30] audit: type=1400 audit(1785797951.970:274): avc: denied { write } for pid=6000 comm="syz.0.48" name="netlink" dev="proc" ino=4026533237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.037925][ T30] audit: type=1400 audit(1785797952.010:275): avc: denied { mount } for pid=6000 comm="syz.0.48" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.062158][ T30] audit: type=1400 audit(1785797952.050:276): avc: denied { write } for pid=6002 comm="syz.2.50" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.244169][ T30] audit: type=1400 audit(1785797953.680:277): avc: denied { create } for pid=6008 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.600218][ T30] audit: type=1400 audit(1785797953.810:278): avc: denied { ioctl } for pid=6008 comm="syz.1.49" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.706202][ T5988] bridge1: entered promiscuous mode [ 100.786519][ T30] audit: type=1400 audit(1785797953.840:279): avc: denied { connect } for pid=6008 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.834004][ T30] audit: type=1400 audit(1785797953.840:280): avc: denied { name_connect } for pid=6008 comm="syz.1.49" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.864967][ T30] audit: type=1400 audit(1785797954.020:281): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 101.066733][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.075155][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.221549][ T30] audit: type=1400 audit(1785797954.650:282): avc: denied { setopt } for pid=6027 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.243641][ T6030] comedi comedi0: 8255: I/O base address not correctly aligned [ 101.337021][ T5666] IPVS: starting estimator thread 0... [ 101.451828][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.489921][ T6031] IPVS: using max 38 ests per chain, 91200 per kthread [ 101.938794][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.024473][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.087860][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.143287][ T30] audit: type=1400 audit(1785797955.570:283): avc: denied { mount } for pid=6020 comm="syz.4.53" name="/" dev="rpc_pipefs" ino=9536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 102.166283][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.292781][ T9] usb 4-1: config 0 descriptor?? [ 102.307533][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 102.328521][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 102.373228][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 102.413231][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 102.475792][ T9] usb 4-1: media controller created [ 102.510310][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.549157][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.586622][ T30] audit: type=1400 audit(1785797956.050:284): avc: denied { ioctl } for pid=6036 comm="syz.1.57" path="socket:[9076]" dev="sockfs" ino=9076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.591016][ T6038] vxcan0: tx address claim with different name [ 102.620633][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.657586][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 102.677069][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 102.688888][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 102.708310][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 102.717031][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.770975][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 102.779258][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 102.870418][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 102.893804][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 102.902721][ T9] dvb-usb: error while querying for an remote control event. [ 102.907096][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 103.180174][ T5700] libceph: connect (1)[c::]:6789 error -101 [ 103.402583][ T5700] libceph: mon0 (1)[c::]:6789 connect error [ 103.531230][ T5794] dvb-usb: bulk message failed: -22 (1/0) [ 103.539805][ T5794] dvb-usb: error while querying for an remote control event. [ 103.739568][ T5794] dvb-usb: bulk message failed: -22 (1/0) [ 103.748994][ T5794] dvb-usb: error while querying for an remote control event. [ 103.759022][ T6037] ceph: No mds server is up or the cluster is laggy [ 103.919570][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 103.925512][ T10] dvb-usb: error while querying for an remote control event. [ 104.092007][ T5796] dvb-usb: bulk message failed: -22 (1/0) [ 104.100326][ T5796] dvb-usb: error while querying for an remote control event. [ 104.139922][ T5824] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.704790][ T5796] dvb-usb: bulk message failed: -22 (1/0) [ 104.746634][ T5796] dvb-usb: error while querying for an remote control event. [ 104.849449][ T5824] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.965792][ T5796] dvb-usb: bulk message failed: -22 (1/0) [ 105.024134][ T5796] dvb-usb: error while querying for an remote control event. [ 105.252172][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.264457][ T5794] dvb-usb: bulk message failed: -22 (1/0) [ 105.337633][ T5794] dvb-usb: error while querying for an remote control event. [ 105.381491][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.552607][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 105.552620][ T30] audit: type=1400 audit(1785797958.990:296): avc: denied { search } for pid=6062 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.597460][ T5796] dvb-usb: bulk message failed: -22 (1/0) [ 105.623206][ T5796] dvb-usb: error while querying for an remote control event. [ 105.649732][ T30] audit: type=1400 audit(1785797958.990:297): avc: denied { search } for pid=6062 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.932303][ T5666] dvb-usb: bulk message failed: -22 (1/0) [ 105.952482][ T5666] dvb-usb: error while querying for an remote control event. [ 105.979088][ T30] audit: type=1400 audit(1785797958.990:298): avc: denied { search } for pid=6062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.005532][ T30] audit: type=1400 audit(1785797958.990:299): avc: denied { search } for pid=6062 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.038137][ T30] audit: type=1400 audit(1785797959.060:300): avc: denied { read } for pid=6065 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.120711][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 106.222182][ T10] dvb-usb: error while querying for an remote control event. [ 106.225726][ T5735] usb 4-1: USB disconnect, device number 2 [ 106.295016][ T6075] ªªªªªª: renamed from vlan0 [ 106.320132][ T6038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.328810][ T30] audit: type=1400 audit(1785797959.060:301): avc: denied { read open } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.363336][ T6038] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.425387][ T6038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.447530][ T30] audit: type=1400 audit(1785797959.060:302): avc: denied { getattr } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.477277][ T5610] Bluetooth: hci3: unexpected cc 0x0c12 length: 1 < 3 [ 106.481185][ T6038] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.497451][ T5735] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 106.645054][ T30] audit: type=1400 audit(1785797959.060:303): avc: denied { getattr } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.685983][ T6038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.729811][ T6038] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 106.769404][ T30] audit: type=1400 audit(1785797959.560:304): avc: denied { read write } for pid=6063 comm="syz.2.61" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 106.797386][ T30] audit: type=1400 audit(1785797959.560:305): avc: denied { open } for pid=6063 comm="syz.2.61" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 107.380957][ T6038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.416641][ T6038] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 107.516658][ T6038] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.556320][ T6038] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 108.913731][ T6095] overlayfs: missing 'lowerdir' [ 109.616834][ T6123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 111.841326][ T6129] syz.4.71 (6129): drop_caches: 2 [ 111.889891][ T6123] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 111.908394][ T6123] UDF-fs: Scanning with blocksize 512 failed [ 112.047303][ T6123] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 112.109606][ T6123] UDF-fs: Scanning with blocksize 1024 failed [ 112.142562][ T6123] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 112.163719][ T6123] UDF-fs: Scanning with blocksize 2048 failed [ 112.170125][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 112.170140][ T30] audit: type=1400 audit(1785797965.650:325): avc: denied { write } for pid=6142 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.256470][ T6123] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 112.284814][ T6123] UDF-fs: Scanning with blocksize 4096 failed [ 112.399597][ T30] audit: type=1400 audit(1785797965.870:326): avc: denied { create } for pid=6154 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.435482][ T6155] overlayfs: failed to resolve './file2': -2 [ 113.151543][ T30] audit: type=1400 audit(1785797966.550:327): avc: denied { write } for pid=6161 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.414855][ T30] audit: type=1400 audit(1785797966.880:328): avc: denied { write } for pid=6150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.495889][ T6173] capability: warning: `syz.1.78' uses 32-bit capabilities (legacy support in use) [ 113.911503][ T30] audit: type=1400 audit(1785797967.330:329): avc: denied { execute } for pid=6175 comm="syz.3.80" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.183312][ T30] audit: type=1326 audit(1785797967.560:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.1.78" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b519e019 code=0x0 [ 114.215705][ T6184] Device name cannot be null; rc = [-22] [ 114.535661][ T30] audit: type=1400 audit(1785797967.930:331): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 114.675625][ T30] audit: type=1400 audit(1785797968.040:332): avc: denied { name_bind } for pid=6186 comm="syz.4.81" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.886077][ T30] audit: type=1400 audit(1785797968.110:333): avc: denied { ioctl } for pid=6186 comm="syz.4.81" path="/dev/vbi7" dev="devtmpfs" ino=995 ioctlcmd=0x5649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.060642][ T30] audit: type=1400 audit(1785797968.110:334): avc: denied { accept } for pid=6186 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.185564][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 117.185580][ T30] audit: type=1400 audit(1785797970.650:344): avc: denied { read write } for pid=6218 comm="syz.4.84" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.238002][ T30] audit: type=1400 audit(1785797970.650:345): avc: denied { open } for pid=6218 comm="syz.4.84" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.430480][ T30] audit: type=1400 audit(1785797970.840:346): avc: denied { mounton } for pid=6218 comm="syz.4.84" path="/16/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.745714][ T30] audit: type=1400 audit(1785797972.210:347): avc: denied { write } for pid=6211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.875015][ T30] audit: type=1400 audit(1785797972.330:348): avc: denied { create } for pid=6234 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 118.944209][ T30] audit: type=1400 audit(1785797972.360:349): avc: denied { ioctl } for pid=6234 comm="syz.3.88" path="pid:[4026532781]" dev="nsfs" ino=4026532781 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.053521][ T30] audit: type=1400 audit(1785797972.520:350): avc: denied { getopt } for pid=6246 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.310178][ T30] audit: type=1400 audit(1785797972.560:351): avc: denied { write } for pid=6241 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.507894][ T30] audit: type=1400 audit(1785797972.660:352): avc: denied { execute } for pid=6246 comm="syz.0.91" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.645204][ T30] audit: type=1400 audit(1785797973.260:353): avc: denied { create } for pid=6254 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.194383][ T6280] Cannot find set identified by id 0 to match [ 122.764518][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 122.764536][ T30] audit: type=1400 audit(1785797976.200:361): avc: denied { write } for pid=6295 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.915318][ T30] audit: type=1400 audit(1785797976.210:362): avc: denied { cmd } for pid=6286 comm="iou-wrk-6288" path="socket:[10105]" dev="sockfs" ino=10105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.248742][ T30] audit: type=1326 audit(1785797976.630:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f574179e019 code=0x0 [ 124.852851][ T30] audit: type=1400 audit(1785797978.320:364): avc: denied { connect } for pid=6326 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.913722][ T30] audit: type=1400 audit(1785797978.350:365): avc: denied { setopt } for pid=6326 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.998709][ T30] audit: type=1400 audit(1785797978.410:366): avc: denied { read } for pid=6326 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.332757][ T30] audit: type=1400 audit(1785797978.800:367): avc: denied { write } for pid=6315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.385068][ T6341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.406991][ T30] audit: type=1400 audit(1785797978.850:368): avc: denied { map } for pid=6340 comm="syz.2.105" path="socket:[10155]" dev="sockfs" ino=10155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.479402][ T30] audit: type=1400 audit(1785797978.870:369): avc: denied { execute } for pid=6336 comm="syz.0.104" name="file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.550848][ T30] audit: type=1400 audit(1785797978.910:370): avc: denied { connect } for pid=6340 comm="syz.2.105" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.575313][ T6349] befs: (nbd2): No write support. Marking filesystem read-only [ 125.741078][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 126.414993][ T6351] ve: renamed from veth0_vlan [ 126.491601][ T6346] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 127.459547][ T5700] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.509993][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 128.510057][ T30] audit: type=1400 audit(1785797981.860:380): avc: denied { ioctl } for pid=6365 comm="syz.3.109" path="socket:[10767]" dev="sockfs" ino=10767 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.600068][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.647696][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 129.655447][ T5700] usb 4-1: can't read configurations, error -71 [ 129.728538][ T30] audit: type=1400 audit(1785797983.190:381): avc: denied { write } for pid=6366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.783941][ T30] audit: type=1400 audit(1785797983.250:382): avc: denied { write } for pid=6400 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.859877][ T5270] ve: left promiscuous mode [ 129.895154][ T5735] ve: entered promiscuous mode [ 129.901067][ T5716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.149406][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 130.161878][ T30] audit: type=1400 audit(1785797983.620:383): avc: denied { create } for pid=6405 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.846262][ T30] audit: type=1326 audit(1785797984.240:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.0.118" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e89b9e019 code=0x0 [ 131.628047][ T5716] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 131.695300][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.836420][ T5716] usb 2-1: config 0 has no interface number 0 [ 131.871457][ T5716] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.001063][ T5716] usb 2-1: config 0 interface 12 has no altsetting 0 [ 132.345090][ T5716] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 132.365180][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.381973][ T5716] usb 2-1: Product: syz [ 132.386265][ T5716] usb 2-1: Manufacturer: syz [ 132.481496][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.491039][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.616576][ T6440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.274167][ T5716] usb 2-1: SerialNumber: syz [ 133.282305][ T5716] usb 2-1: config 0 descriptor?? [ 133.289568][ T5716] usb 2-1: can't set config #0, error -71 [ 133.297775][ T5716] usb 2-1: USB disconnect, device number 3 [ 133.571771][ T30] audit: type=1400 audit(1785797987.020:385): avc: denied { setopt } for pid=6448 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 133.971027][ T30] audit: type=1400 audit(1785797987.430:386): avc: denied { write } for pid=6403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.310903][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 134.497716][ T6461] team0 (unregistering): Port device team_slave_0 removed [ 134.573966][ T6461] team0 (unregistering): Port device team_slave_1 removed [ 134.753895][ T6469] overlayfs: failed to resolve './file2': -2 [ 135.586611][ T30] audit: type=1400 audit(1785797989.050:387): avc: denied { write } for pid=6468 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.292148][ T30] audit: type=1400 audit(1785797989.750:388): avc: denied { write } for pid=6479 comm="syz.2.131" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.423323][ T30] audit: type=1400 audit(1785797989.880:389): avc: denied { mount } for pid=6483 comm="syz.3.132" name="/" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.496979][ T6486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6486 comm=syz.2.131 [ 136.717067][ T30] audit: type=1400 audit(1785797989.890:390): avc: denied { search } for pid=6483 comm="syz.3.132" name="/" dev="configfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.991479][ T30] audit: type=1400 audit(1785797989.890:391): avc: denied { search } for pid=6483 comm="syz.3.132" name="usb_gadget" dev="configfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.139701][ T30] audit: type=1400 audit(1785797989.920:392): avc: denied { write search } for pid=6483 comm="syz.3.132" name="usb_gadget" dev="configfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.164118][ T30] audit: type=1400 audit(1785797989.920:393): avc: denied { add_name } for pid=6483 comm="syz.3.132" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.253537][ T30] audit: type=1400 audit(1785797989.930:394): avc: denied { create } for pid=6483 comm="syz.3.132" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 138.664259][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 138.664279][ T30] audit: type=1400 audit(1785797992.110:399): avc: denied { create } for pid=6499 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.936760][ T30] audit: type=1400 audit(1785797992.120:400): avc: denied { getopt } for pid=6499 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.734715][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 139.785057][ T6512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6512 comm=syz.2.138 [ 139.807499][ T6512] syz.2.138 uses obsolete (PF_INET,SOCK_PACKET) [ 139.820196][ T30] audit: type=1400 audit(1785797993.280:401): avc: denied { ioctl } for pid=6511 comm="syz.2.138" path="socket:[11394]" dev="sockfs" ino=11394 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.798794][ T6519] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 141.210459][ T30] audit: type=1400 audit(1785797994.670:402): avc: denied { mounton } for pid=6520 comm="syz.3.141" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.214689][ T6524] FAT-fs (nbd3): unable to read boot sector [ 141.399078][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.141'. [ 141.910851][ T30] audit: type=1400 audit(1785797994.910:403): avc: denied { listen } for pid=6520 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.934341][ T30] audit: type=1400 audit(1785797995.400:404): avc: denied { create } for pid=6518 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 141.968281][ T30] audit: type=1400 audit(1785797995.430:405): avc: denied { write } for pid=6518 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.140576][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.776971][ T30] audit: type=1400 audit(1785797996.240:406): avc: denied { mounton } for pid=6533 comm="syz.3.143" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.777295][ T6541] binder: Bad value for 'max' [ 143.045764][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 143.054784][ T30] audit: type=1400 audit(1785797996.510:407): avc: denied { bind } for pid=6534 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.145396][ T6522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.172615][ T6522] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 143.196992][ T6522] bond1: (slave gre1): Error -95 calling set_mac_address [ 143.303104][ T6523] gretap1: entered promiscuous mode [ 143.331216][ T6523] bond1: (slave gretap1): making interface the new active one [ 143.342358][ T6523] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.356747][ T6530] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 143.400135][ T6538] bond1 (unregistering): (slave gretap1): Releasing active interface [ 143.418397][ T30] audit: type=1400 audit(1785797996.880:408): avc: denied { create } for pid=6546 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 143.479155][ T6538] bond1 (unregistering): Released all slaves [ 145.076583][ T6583] virtio-fs: tag < : kernel [ 145.076583][ T6583] priority : 100 [ 145.076583][ T6583] refcnt : 1 [ 145.076583][ T6583] selftest : passed [ 145.076583][ T6583] internal : no [ 145.076583][ T6583] type : sig [ 145.076583][ T6583] [ 145.076583][ T6583] name : ecdh-nist-p384 [ 145.076583][ T6583] driver : ecdh-nist-p384-generic [ 145.076583][ T6583] module : kernel [ 145.076583][ T6583] priority : 100 [ 145.076583][ T6583] refcnt : 1 [ 145.076583][ T6583] selftest : passed [ 145.076583][ T6583] internal : no [ 145.076583][ T6583] type : kpp [ 145.076583][ T6583] [ 145.076583][ T6583] name : ecdh-nist-p256 [ 145.076583][ T6583] driver : ecdh-nist-p256-generic [ 145.076583][ T6583] module : kernel [ 145.076583][ T6583] priority : 100 [ 145.076583][ T6583] refcnt : 1 [ 145.076583][ T6583] selftest : passed [ 145.076583][ T6583] internal : no [ 145.076583][ T6583] type : kpp [ 145.076583][ T6583] [ 145.076583][ T6583] name : ecdh-nist-p192 [ 145.076583][ T6583] driver : ecdh-nist-p192-generic [ 145.076583][ T6583] module : kernel [ 145.076583][ T6583] priority : 100 [ 145.076583][ T6583] refcnt : 1 [ 145.076583][ T6583] selftest : passed [ 145.076583][ T6583] internal : no [ 145.076583][ T6583] type : kpp [ 145.076583][ T6583] [ 145.076583][ T6583] name : zstd [ 145.076583][ T6583] driver : zstd-generic [ 145.076583][ T6583] module : kernel [ 145.076583][ T6583] priority : 0 [ 145.076583][ T6583] refcnt : 2 [ 145.076583][ T6583] selftest : passed [ 145.076583][ T6583] internal : no [ 145.076583][ T6583] type : acomp [ 145.076583][ T6583] [ 145.076583][ T6583] name : 842 [ 145.076583][ T6583] driver : 842-scomp [ 145.076583][ T6583] module : kernel [ 145.076583][ T6583] priority : 100 [ 146.322444][ T6598] FAT-fs (nbd2): unable to read boot sector [ 146.539533][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'. [ 147.480267][ T30] audit: type=1400 audit(1785798000.950:409): avc: denied { bind } for pid=6604 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.701828][ T30] audit: type=1400 audit(1785798000.970:410): avc: denied { name_bind } for pid=6604 comm="syz.3.158" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 147.979085][ T30] audit: type=1400 audit(1785798000.970:411): avc: denied { node_bind } for pid=6604 comm="syz.3.158" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 148.899688][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.086933][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 149.105980][ T29] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.124944][ T29] usb 3-1: config 0 has no interface number 0 [ 149.152282][ T29] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.181108][ T29] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.210595][ T29] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.231465][ T29] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.254455][ T29] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.289630][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.336814][ T29] usb 3-1: config 0 descriptor?? [ 149.401322][ T29] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 149.816169][ T30] audit: type=1400 audit(1785798003.280:412): avc: denied { read append } for pid=6634 comm="syz.0.166" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 150.217281][ T30] audit: type=1400 audit(1785798003.280:413): avc: denied { open } for pid=6634 comm="syz.0.166" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 150.991281][ T6652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.168'. [ 151.823855][ T30] audit: type=1400 audit(1785798004.380:414): avc: denied { mount } for pid=6644 comm="syz.0.168" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 152.031944][ T29] usb 3-1: USB disconnect, device number 2 [ 152.042485][ T29] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 152.055070][ T30] audit: type=1400 audit(1785798004.480:415): avc: denied { read write } for pid=6644 comm="syz.0.168" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 152.115300][ T30] audit: type=1400 audit(1785798004.480:416): avc: denied { open } for pid=6644 comm="syz.0.168" path="/28/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 152.148002][ T30] audit: type=1400 audit(1785798005.240:417): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 152.337328][ T6663] hsr0: entered promiscuous mode [ 152.793528][ T30] audit: type=1400 audit(1785798005.800:418): avc: denied { write } for pid=6662 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.830064][ T6664] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 153.842207][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 154.480750][ T29] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 154.660854][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.674909][ T29] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 154.690105][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.863357][ T6671] hsr_slave_0: left promiscuous mode [ 154.914352][ T29] usb 1-1: config 0 descriptor?? [ 155.006694][ T30] audit: type=1400 audit(1785798008.470:419): avc: denied { write } for pid=6638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.032352][ T6671] hsr_slave_1: left promiscuous mode [ 155.170716][ T30] audit: type=1400 audit(1785798008.640:420): avc: denied { setopt } for pid=6687 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.479453][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.192590][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.196115][ T30] audit: type=1400 audit(1785798009.660:421): avc: denied { write } for pid=6692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.251350][ T10] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=8b.40 [ 156.271529][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 156.291208][ T10] usb 3-1: Manufacturer: syz [ 156.317514][ T10] usb 3-1: config 0 descriptor?? [ 156.447561][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 156.659656][ T30] audit: type=1400 audit(1785798010.010:422): avc: denied { execute_no_trans } for pid=6696 comm="syz.1.177" path="/34/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.961395][ T30] audit: type=1400 audit(1785798010.030:423): avc: denied { mount } for pid=6696 comm="syz.1.177" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.074260][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.082868][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.198455][ T10] gspca_spca501: reg write: error -71 [ 157.204382][ T10] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 157.373935][ T10] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 157.829677][ T10] usb 3-1: USB disconnect, device number 3 [ 157.907332][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.923941][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.953752][ T6694] ve: left promiscuous mode [ 157.989978][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.035785][ T6675] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.065557][ T6698] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 158.131663][ T6698] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 158.179205][ T5833] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.211697][ T5824] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.235450][ T5824] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.262544][ T29] usb 1-1: string descriptor 0 read error: -71 [ 158.294303][ T29] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 158.336412][ T29] earthmate ttyUSB0: required endpoint is missing [ 158.384983][ T29] usb 1-1: USB disconnect, device number 3 [ 158.398746][ T29] cypress_m8 1-1:0.0: device disconnected [ 158.453800][ T30] audit: type=1400 audit(1785798011.910:424): avc: denied { connect } for pid=6728 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.642356][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.989381][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 159.006022][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.044164][ T24] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 159.063591][ T24] usb 3-1: config 4 has no interface number 0 [ 159.081183][ T24] usb 3-1: config 4 interface 55 has no altsetting 0 [ 159.102402][ T24] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 159.148614][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.163431][ T30] audit: type=1400 audit(1785798012.630:425): avc: denied { write } for pid=6716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.165028][ T24] usb 3-1: Product: syz [ 159.338744][ T24] usb 3-1: Manufacturer: syz [ 159.385973][ T24] usb 3-1: SerialNumber: syz [ 161.314853][ T6725] netlink: 148 bytes leftover after parsing attributes in process `syz.2.182'. [ 161.572673][ T30] audit: type=1400 audit(1785798014.580:426): avc: denied { write } for pid=6757 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.597018][ T30] audit: type=1400 audit(1785798015.060:427): avc: denied { getopt } for pid=6724 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.628756][ T6764] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 161.668364][ T30] audit: type=1400 audit(1785798015.130:428): avc: denied { map } for pid=6765 comm="syz.1.189" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.695787][ T6725] netlink: 148 bytes leftover after parsing attributes in process `syz.2.182'. [ 161.833838][ T30] audit: type=1400 audit(1785798015.180:429): avc: denied { create } for pid=6765 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.986859][ T30] audit: type=1400 audit(1785798015.190:430): avc: denied { connect } for pid=6765 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.114477][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.450312][ T30] audit: type=1400 audit(1785798015.190:431): avc: denied { write } for pid=6765 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.535562][ T6783] mmap: syz.3.191 (6783) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.554320][ T30] audit: type=1400 audit(1785798016.020:432): avc: denied { connect } for pid=6782 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.602718][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 162.656939][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 162.846329][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 163.012311][ T29] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 163.079357][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.099366][ T29] usb 2-1: Product: syz [ 163.113334][ T29] usb 2-1: Manufacturer: syz [ 163.122145][ T29] usb 2-1: SerialNumber: syz [ 163.145704][ T29] usb 2-1: config 0 descriptor?? [ 163.160626][ T6766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 163.184183][ T6766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 163.207538][ T24] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 163.228256][ T24] gspca_mr97310a: reg write [21] error -22 [ 163.235805][ T29] usb 2-1: ucan: probing device on interface #0 [ 163.258167][ T24] mr97310a 3-1:4.55: probe with driver mr97310a failed with error -22 [ 163.409383][ T30] audit: type=1400 audit(1785798016.860:433): avc: denied { write } for pid=6772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.463739][ T29] usb 2-1: ucan: device protocol version 0 is not supported [ 163.482032][ T29] usb 2-1: ucan: probe failed; try to update the device firmware [ 163.493611][ T24] usb 3-1: USB disconnect, device number 4 [ 164.070739][ T30] audit: type=1400 audit(1785798017.530:434): avc: denied { read write } for pid=6810 comm="syz.2.196" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 164.141568][ T29] IPVS: starting estimator thread 0... [ 164.190402][ T5716] usb 2-1: USB disconnect, device number 4 [ 164.235771][ T30] audit: type=1400 audit(1785798017.570:435): avc: denied { ioctl open } for pid=6810 comm="syz.2.196" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 164.270221][ T6815] IPVS: using max 46 ests per chain, 110400 per kthread [ 164.336769][ T30] audit: type=1400 audit(1785798017.630:436): avc: denied { write } for pid=6813 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.518282][ T6821] can0: slcan on ttyS3. [ 164.872014][ T30] audit: type=1400 audit(1785798018.320:437): avc: denied { read write } for pid=6801 comm="syz.0.195" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 164.966079][ T6819] IPVS: lc: FWM 3 0x00000003 - no destination available [ 165.103850][ T30] audit: type=1400 audit(1785798018.320:438): avc: denied { open } for pid=6801 comm="syz.0.195" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.353574][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 165.722181][ T6811] can0 (unregistered): slcan off ttyS3. [ 166.160413][ T6849] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 168.913654][ T30] audit: type=1400 audit(1785798022.370:439): avc: denied { write } for pid=6824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.154252][ T30] audit: type=1400 audit(1785798022.610:440): avc: denied { write } for pid=6880 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.371302][ T6854] syz.2.202 (6854): drop_caches: 2 [ 169.761240][ T30] audit: type=1400 audit(1785798023.210:441): avc: denied { append } for pid=6889 comm="syz.4.209" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 169.813403][ T6894] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 169.822428][ T6894] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 169.840111][ T6894] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 169.991723][ T30] audit: type=1400 audit(1785798023.260:442): avc: denied { mount } for pid=6889 comm="syz.4.209" name="/" dev="hugetlbfs" ino=12200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 170.253341][ T30] audit: type=1400 audit(1785798023.300:443): avc: denied { firmware_load } for pid=6889 comm="syz.4.209" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.427076][ T30] audit: type=1400 audit(1785798025.890:444): avc: denied { write } for pid=6882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.848650][ T30] audit: type=1400 audit(1785798026.310:445): avc: denied { write } for pid=6918 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.169512][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.339380][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 173.369069][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 173.497388][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.515498][ T24] usb 1-1: Product: syz [ 173.677902][ T30] audit: type=1400 audit(1785798027.060:446): avc: denied { bind } for pid=6926 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.700516][ T24] usb 1-1: Manufacturer: syz [ 173.714406][ T24] usb 1-1: SerialNumber: syz [ 173.835297][ T30] audit: type=1400 audit(1785798027.070:447): avc: denied { listen } for pid=6926 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.868223][ T24] usb 1-1: config 0 descriptor?? [ 173.915791][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 173.973598][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 173.973598][ T24] [ 174.043900][ T24] usb 1-1: selecting invalid altsetting 3 [ 174.115879][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 174.115879][ T24] [ 174.277751][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 174.354314][ T30] audit: type=1400 audit(1785798027.730:448): avc: denied { ioctl } for pid=6921 comm="syz.0.214" path="/dev/sg0" dev="devtmpfs" ino=757 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.451510][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 174.836969][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.997686][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 175.078064][ T24] usb 1-1: media controller created [ 175.124362][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 175.152170][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 175.191867][ T24] dvb-usb: MAC address reading failed. [ 175.321668][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.053510][ T6958] fuse: Bad value for 'fd' [ 177.071596][ T30] audit: type=1400 audit(1785798030.540:449): avc: denied { read } for pid=6952 comm="syz.1.219" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.183122][ T24] DVB: Unable to find symbol stb0899_attach() [ 177.251021][ T30] audit: type=1400 audit(1785798030.560:450): avc: denied { open } for pid=6952 comm="syz.1.219" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.286141][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 177.525195][ T30] audit: type=1400 audit(1785798030.570:451): avc: denied { ioctl } for pid=6952 comm="syz.1.219" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.922986][ T6958] [ 177.925345][ T6958] ====================================================== [ 177.932349][ T6958] WARNING: possible circular locking dependency detected [ 177.939380][ T6958] syzkaller #0 Tainted: G L [ 177.945349][ T6958] ------------------------------------------------------ [ 177.952353][ T6958] syz.1.219/6958 is trying to acquire lock: [ 177.958228][ T6958] ffff88802792bbc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkcg_deactivate_policy+0x167/0x600 [ 177.968168][ T6958] [ 177.968168][ T6958] but task is already holding lock: [ 177.975522][ T6958] ffff888057deb0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 177.984409][ T6958] [ 177.984409][ T6958] which lock already depends on the new lock. [ 177.984409][ T6958] [ 177.994800][ T6958] [ 177.994800][ T6958] the existing dependency chain (in reverse order) is: [ 178.003820][ T6958] [ 178.003820][ T6958] -> #5 (&eq->sysfs_lock){+.+.}-{4:4}: [ 178.011467][ T6958] lock_acquire+0x1b9/0x370 [ 178.016492][ T6958] __mutex_lock+0x1a4/0x1bd0 [ 178.021601][ T6958] elevator_exit+0x88/0xf0 [ 178.026536][ T6958] elevator_switch+0x3a7/0x7e0 [ 178.031817][ T6958] elevator_change+0x352/0x530 [ 178.037110][ T6958] elevator_set_none+0x92/0xf0 [ 178.042433][ T6958] blk_unregister_queue+0x178/0x310 [ 178.048162][ T6958] __del_gendisk+0x2e3/0xb20 [ 178.053290][ T6958] del_gendisk+0x10e/0x1b0 [ 178.058221][ T6958] loop_control_ioctl+0x4f8/0x620 [ 178.063762][ T6958] __x64_sys_ioctl+0x18e/0x210 [ 178.069065][ T6958] do_syscall_64+0x115/0x870 [ 178.074180][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.080593][ T6958] [ 178.080593][ T6958] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 178.088410][ T6958] lock_acquire+0x1b9/0x370 [ 178.093446][ T6958] __mutex_lock+0x1a4/0x1bd0 [ 178.098557][ T6958] elevator_change+0x1bc/0x530 [ 178.103840][ T6958] elv_iosched_store+0x3be/0x460 [ 178.109297][ T6958] queue_attr_store+0x25f/0x2f0 [ 178.114696][ T6958] sysfs_kf_write+0xf2/0x150 [ 178.119811][ T6958] kernfs_fop_write_iter+0x3e0/0x5f0 [ 178.125613][ T6958] vfs_write+0x6ac/0x1050 [ 178.130468][ T6958] ksys_write+0x12a/0x250 [ 178.135307][ T6958] do_syscall_64+0x115/0x870 [ 178.140418][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.146825][ T6958] [ 178.146825][ T6958] -> #3 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 178.155426][ T6958] lock_acquire+0x1b9/0x370 [ 178.160440][ T6958] blk_alloc_queue+0x610/0x790 [ 178.165701][ T6958] blk_mq_alloc_queue+0x174/0x290 [ 178.171221][ T6958] __blk_mq_alloc_disk+0x29/0x120 [ 178.176738][ T6958] loop_add+0x498/0xb60 [ 178.181393][ T6958] loop_init+0x1d3/0x200 [ 178.186131][ T6958] do_one_initcall+0x11d/0x700 [ 178.191389][ T6958] kernel_init_freeable+0x6ea/0x7b0 [ 178.197080][ T6958] kernel_init+0x1f/0x1e0 [ 178.201910][ T6958] ret_from_fork+0x72b/0xd50 [ 178.206995][ T6958] ret_from_fork_asm+0x1a/0x30 [ 178.212259][ T6958] [ 178.212259][ T6958] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 178.219438][ T6958] lock_acquire+0x1b9/0x370 [ 178.224439][ T6958] fs_reclaim_acquire+0xc4/0x100 [ 178.229868][ T6958] prepare_alloc_pages+0x166/0x5f0 [ 178.235478][ T6958] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 178.241871][ T6958] __alloc_pages_noprof+0xb/0x110 [ 178.247421][ T6958] pcpu_populate_chunk+0x118/0x990 [ 178.253067][ T6958] pcpu_alloc_noprof+0x881/0x1ca0 [ 178.258614][ T6958] xt_percpu_counter_alloc+0x13e/0x1b0 [ 178.264575][ T6958] find_check_entry.isra.0+0xc2/0xa00 [ 178.270448][ T6958] translate_table+0xc31/0x16c0 [ 178.275797][ T6958] ip6t_register_table+0x106/0x2c0 [ 178.281408][ T6958] ip6table_security_table_init+0x40/0x60 [ 178.287655][ T6958] xt_find_table_lock+0x2db/0x520 [ 178.293184][ T6958] xt_request_find_table_lock+0x28/0xf0 [ 178.299241][ T6958] get_info+0x1a7/0x770 [ 178.303904][ T6958] do_ip6t_get_ctl+0x231/0xc30 [ 178.309166][ T6958] nf_getsockopt+0x7c/0xe0 [ 178.314084][ T6958] ipv6_getsockopt+0x207/0x2a0 [ 178.319356][ T6958] tcp_getsockopt+0xa1/0x110 [ 178.324449][ T6958] do_sock_getsockopt+0x50a/0x6e0 [ 178.329979][ T6958] __sys_getsockopt+0x148/0x260 [ 178.335344][ T6958] __x64_sys_getsockopt+0xbd/0x160 [ 178.340966][ T6958] do_syscall_64+0x115/0x870 [ 178.346061][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.352466][ T6958] [ 178.352466][ T6958] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 178.360194][ T6958] lock_acquire+0x1b9/0x370 [ 178.365202][ T6958] __mutex_lock+0x1a4/0x1bd0 [ 178.370295][ T6958] pcpu_alloc_noprof+0xe87/0x1ca0 [ 178.375819][ T6958] percpu_ref_init+0x37/0x3f0 [ 178.381006][ T6958] blkg_alloc+0xf0/0xf80 [ 178.385757][ T6958] blkg_conf_prep+0x46e/0xf10 [ 178.390949][ T6958] tg_set_conf.isra.0+0x1ed/0x500 [ 178.396486][ T6958] cgroup_file_write+0x1e6/0x8a0 [ 178.401935][ T6958] kernfs_fop_write_iter+0x3e0/0x5f0 [ 178.407741][ T6958] vfs_write+0x6ac/0x1050 [ 178.412579][ T6958] ksys_write+0x12a/0x250 [ 178.417406][ T6958] do_syscall_64+0x115/0x870 [ 178.422498][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.428899][ T6958] [ 178.428899][ T6958] -> #0 (&q->blkcg_mutex){+.+.}-{4:4}: [ 178.436527][ T6958] check_prev_add+0xeb/0xe60 [ 178.441617][ T6958] __lock_acquire+0x136c/0x1a40 [ 178.446980][ T6958] lock_acquire+0x1b9/0x370 [ 178.451985][ T6958] __mutex_lock+0x1a4/0x1bd0 [ 178.457076][ T6958] blkcg_deactivate_policy+0x167/0x600 [ 178.463040][ T6958] bfq_exit_queue+0x29d/0x430 [ 178.468228][ T6958] blk_mq_exit_sched+0x20e/0x4e0 [ 178.473695][ T6958] elevator_exit+0x93/0xf0 [ 178.478633][ T6958] elevator_switch+0x3a7/0x7e0 [ 178.483908][ T6958] elevator_change+0x352/0x530 [ 178.489177][ T6958] elevator_set_none+0x92/0xf0 [ 178.494450][ T6958] blk_unregister_queue+0x178/0x310 [ 178.500152][ T6958] __del_gendisk+0x2e3/0xb20 [ 178.505335][ T6958] del_gendisk+0x10e/0x1b0 [ 178.510250][ T6958] loop_control_ioctl+0x4f8/0x620 [ 178.515775][ T6958] __x64_sys_ioctl+0x18e/0x210 [ 178.521049][ T6958] do_syscall_64+0x115/0x870 [ 178.526142][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.532537][ T6958] [ 178.532537][ T6958] other info that might help us debug this: [ 178.532537][ T6958] [ 178.542751][ T6958] Chain exists of: [ 178.542751][ T6958] &q->blkcg_mutex --> &q->elevator_lock --> &eq->sysfs_lock [ 178.542751][ T6958] [ 178.555943][ T6958] Possible unsafe locking scenario: [ 178.555943][ T6958] [ 178.563380][ T6958] CPU0 CPU1 [ 178.568723][ T6958] ---- ---- [ 178.574069][ T6958] lock(&eq->sysfs_lock); [ 178.578576][ T6958] lock(&q->elevator_lock); [ 178.585691][ T6958] lock(&eq->sysfs_lock); [ 178.592610][ T6958] lock(&q->blkcg_mutex); [ 178.597005][ T6958] [ 178.597005][ T6958] *** DEADLOCK *** [ 178.597005][ T6958] [ 178.605128][ T6958] 3 locks held by syz.1.219/6958: [ 178.610154][ T6958] #0: ffff8880278463a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x106/0x1b0 [ 178.620228][ T6958] #1: ffff88802792bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 178.630036][ T6958] #2: ffff888057deb0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 178.639321][ T6958] [ 178.639321][ T6958] stack backtrace: [ 178.645203][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.1.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.645223][ T6958] Tainted: [L]=SOFTLOCKUP [ 178.645228][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 178.645236][ T6958] Call Trace: [ 178.645243][ T6958] [ 178.645249][ T6958] dump_stack_lvl+0x100/0x190 [ 178.645268][ T6958] print_circular_bug.cold+0x178/0x1c7 [ 178.645290][ T6958] check_noncircular+0x146/0x160 [ 178.645309][ T6958] check_prev_add+0xeb/0xe60 [ 178.645325][ T6958] __lock_acquire+0x136c/0x1a40 [ 178.645345][ T6958] lock_acquire+0x1b9/0x370 [ 178.645360][ T6958] ? blkcg_deactivate_policy+0x167/0x600 [ 178.645381][ T6958] ? __pfx___might_resched+0x10/0x10 [ 178.645399][ T6958] __mutex_lock+0x1a4/0x1bd0 [ 178.645418][ T6958] ? blkcg_deactivate_policy+0x167/0x600 [ 178.645436][ T6958] ? blkcg_deactivate_policy+0x167/0x600 [ 178.645454][ T6958] ? preempt_schedule_thunk+0x16/0x40 [ 178.645469][ T6958] ? __pfx___mutex_lock+0x10/0x10 [ 178.645485][ T6958] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 178.645501][ T6958] ? percpu_ref_is_zero+0xe7/0x150 [ 178.645517][ T6958] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 178.645534][ T6958] ? __blk_freeze_queue_start+0xd2/0x460 [ 178.645555][ T6958] ? blkcg_deactivate_policy+0x167/0x600 [ 178.645573][ T6958] blkcg_deactivate_policy+0x167/0x600 [ 178.645594][ T6958] bfq_exit_queue+0x29d/0x430 [ 178.645609][ T6958] ? __pfx_bfq_exit_queue+0x10/0x10 [ 178.645623][ T6958] blk_mq_exit_sched+0x20e/0x4e0 [ 178.645644][ T6958] elevator_exit+0x93/0xf0 [ 178.645661][ T6958] elevator_switch+0x3a7/0x7e0 [ 178.645678][ T6958] elevator_change+0x352/0x530 [ 178.645695][ T6958] elevator_set_none+0x92/0xf0 [ 178.645713][ T6958] ? __pfx_elevator_set_none+0x10/0x10 [ 178.645732][ T6958] ? kobject_put+0xb9/0x640 [ 178.645752][ T6958] blk_unregister_queue+0x178/0x310 [ 178.645770][ T6958] __del_gendisk+0x2e3/0xb20 [ 178.645784][ T6958] ? del_gendisk+0xb9/0x1b0 [ 178.645798][ T6958] ? __pfx___del_gendisk+0x10/0x10 [ 178.645813][ T6958] ? up_write+0x2e5/0x5c0 [ 178.645832][ T6958] del_gendisk+0x10e/0x1b0 [ 178.645847][ T6958] loop_control_ioctl+0x4f8/0x620 [ 178.645864][ T6958] ? __pfx_loop_control_ioctl+0x10/0x10 [ 178.645878][ T6958] ? selinux_file_ioctl+0x13b/0x290 [ 178.645900][ T6958] ? selinux_file_ioctl+0xb6/0x290 [ 178.645921][ T6958] ? __pfx_loop_control_ioctl+0x10/0x10 [ 178.645936][ T6958] __x64_sys_ioctl+0x18e/0x210 [ 178.645956][ T6958] do_syscall_64+0x115/0x870 [ 178.645973][ T6958] ? clear_bhb_loop+0x40/0x90 [ 178.645988][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.646002][ T6958] RIP: 0033:0x7f07b519e019 [ 178.646014][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.646027][ T6958] RSP: 002b:00007f07b60b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.646040][ T6958] RAX: ffffffffffffffda RBX: 00007f07b5426180 RCX: 00007f07b519e019 [ 178.646049][ T6958] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 000000000000000a [ 178.646056][ T6958] RBP: 00007f07b523500c R08: 0000000000000000 R09: 0000000000000000 [ 178.646065][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.646072][ T6958] R13: 00007f07b5426218 R14: 00007f07b5426180 R15: 00007ffef5b69f28 [ 178.646085][ T6958] [ 178.984566][ T30] audit: type=1400 audit(1785798032.450:452): avc: denied { module_request } for pid=6952 comm="syz.1.219" kmod="net-pf-10-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 179.024556][ T6959] block device autoloading is deprecated and will be removed. [ 179.049328][ T24] rc_core: IR keymap rc-tt-1500 not found [ 179.055306][ T24] Registered IR keymap rc-empty [ 179.060755][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 179.072149][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 179.084869][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 179.116936][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 179.116936][ T24] [ 179.124289][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 179.139116][ T24] usb 1-1: USB disconnect, device number 4 [ 179.266806][ T30] audit: type=1400 audit(1785798032.590:453): avc: denied { read } for pid=4960 comm="acpid" name="event4" dev="devtmpfs" ino=2832 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.289534][ T6959] PM: Image not found (code -22) [ 179.303784][ T6966] batadv_slave_0: entered promiscuous mode [ 179.331316][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 179.342587][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 179.355001][ T30] audit: type=1400 audit(1785798032.590:454): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2832 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.379689][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.402055][ T30] audit: type=1400 audit(1785798032.590:455): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2832 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.430691][ T6966] batadv_slave_0 (unregistering): left promiscuous mode [ 179.437712][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0