last executing test programs: 26.695999541s ago: executing program 1 (id=159): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000a882, 0x0) r3 = dup(r2) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r4, 0x0, &(0x7f0000000600)=""/86}, 0x20) 23.167424066s ago: executing program 4 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/213], 0x119) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x4}, 0x11) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/255, 0xa00}], 0x1, &(0x7f00000007c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002680)='./file1\x00', 0x1c0) getpid() renameat2(0xffffffffffffff9c, &(0x7f0000002700)='./file7\x00', 0xffffffffffffffff, &(0x7f0000002740)='./file7\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002780)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f00000027c0), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002800)={&(0x7f0000002840)=[{0x9e, 0x1000, 0x0, 0x0}, {0x7fff, 0x17000, 0x3e, &(0x7f0000002880)="5f0ff92f12e1aa9e5b413523010b1a984f7b5671b802767b971e3d716781937471710b601e44bdcdae2bf70d100929f0c374d81fd7dfd00baf523dfe9d67"}], 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x6628, 0x0) 22.417985131s ago: executing program 1 (id=166): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000000)="ee7524beca7507915d5fdf00a4eacdcb1bc4d1ea7d25268c770bfd6165802242d57e740700682748a22189ffda3093dd45240cfea0394c3c00d1c6") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0x8001, 0x6}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000300)={0x1, 0x1, 0x0, 0x20, 0x63, 0x0}) sendto$inet6(r0, &(0x7f0000001340)='X', 0x34000, 0xe0, &(0x7f0000002440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002801400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)=ANY=[], 0x28}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x8000000, 0x0, 0xff, 0xa}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 20.342309402s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xb3b2}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019880)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r5, 0x84, 0x82, &(0x7f00000001c0)={0x2, 0x40}, &(0x7f0000000200)=0x8) 18.439440976s ago: executing program 1 (id=173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x10000000, 0xfffffffd}}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x630180, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mtdblock0\x00', 0x0, 0x22) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r6, r5, 0x0, 0x20000) 18.219961474s ago: executing program 4 (id=174): rt_sigqueueinfo(0x0, 0xb, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000700)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0x3a, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x2800, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xc, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8058}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x2000c050) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000540)=[{&(0x7f0000000580)=' ', 0xffffff1f}], 0x1}, 0x0) pipe2(&(0x7f0000000140), 0x80000) 14.755790751s ago: executing program 3 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x122, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r5, &(0x7f0000003440), 0x0, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007118140000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='00:', 0x3) 13.423468598s ago: executing program 3 (id=180): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) setpgid(r3, 0x0) read$msr(r6, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000019280)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000019340)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f00000193c0)={0x0, 0x9, 0x1, [0x7ff, 0xe1, 0x1f9, 0x10000, 0x100000000], [0x2, 0x7, 0x8, 0x3, 0x3, 0x100, 0xbe2e, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x7, 0x8, 0x4, 0x2ed1, 0x8, 0x58d7, 0x3, 0x5, 0x7, 0x4, 0xfffffffffffffff7, 0x7d, 0x31cdef52, 0x7, 0x40, 0x6, 0xfffffffffffff000, 0x3, 0xff, 0x1, 0x8, 0x0, 0x696, 0x7, 0x7bee, 0x7, 0x5, 0x3, 0x3, 0xfffffffffffffd0e, 0x9, 0x8, 0x3709, 0xf991, 0x9, 0x3, 0xffffffffffffff6d, 0x8, 0x1, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0xff, 0x8ae1, 0x9, 0x7, 0x52ea, 0x4, 0x6, 0x1ff, 0x6, 0x401, 0x7, 0x400, 0x7, 0x2, 0x602af74b, 0x1, 0x7, 0x9, 0x6, 0xd, 0x8789, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffff7b6, 0x3, 0x7ea, 0x800, 0xfffffffffffffff7, 0x5d1, 0x7fffffffffffffff, 0x6, 0x7, 0x0, 0x401, 0x2, 0x7, 0x3ff, 0x7, 0x80000001, 0x3, 0x3, 0x2, 0xd, 0x10, 0x6, 0x8, 0x8, 0x6, 0x2, 0x9, 0x1, 0x3, 0x7, 0x7fffffff, 0x56b, 0x7fff, 0x8000, 0x7, 0x5, 0x6, 0x3, 0x400, 0xffffffffffffff7f, 0x7f, 0x6]}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 13.340188501s ago: executing program 2 (id=181): symlinkat(&(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000380)='none\x00', 0x1ff) mount(&(0x7f00000007c0)=@filename='none\x00', 0x0, &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x143102) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x1c3902, 0x0) r2 = fsopen(&(0x7f0000000a00)='nfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x4, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source\x00', &(0x7f0000000b80)='127.0.0.1:/export\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x200000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus/file0\x00', 0x240082, 0x20) write(0xffffffffffffffff, &(0x7f0000000180)='-2 -3 +4 +4. +4.2\n', 0x13) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40014, 0x41a01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0xc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) 12.157529726s ago: executing program 0 (id=183): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019ac0)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000019b00)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f0000019b40), 0x4000000000000e7, 0x2400c8c4) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000a80)) 9.6253551s ago: executing program 0 (id=184): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) write(r4, &(0x7f0000000300)='1', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9.509304054s ago: executing program 4 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0xa, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) eventfd2(0x2, 0x1) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000040)={0x1}) 8.634628111s ago: executing program 3 (id=186): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x80) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3623c17fade0f6cc5bad28cdf8037f740dac9e94099aec796"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setpriority(0x2, 0x0, 0x4) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001140)={0x0, 0x4, 0x0, 0x4, @vifc_lcl_ifindex, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000001200)={0x0, 0x0, 0x8, 0x1, 0xa44}) openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x64200, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup.cpu/syz0\x00', 0x1ff) 8.634018435s ago: executing program 4 (id=187): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdir(&(0x7f0000000400)='./file2\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000480)='./file2\x00', &(0x7f00000004c0)='nfs\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB, @ANYBLOB="d0f1a38eda88e82b9b6d86643bb600378a298575c964da8c845fcfccdc767a7b2b7b5783a1c331d5cf27aeda1bc6a18ec25e487a9f8b8ebc6be9a93ca339ef7d2730bb25a3f2366d178ac4631659ce394c913c92a3ec7356328f143606634d4d1396b8f49f7a0aaee65852aaa23d25f9ac9b93b98b7f6a99ce8cc7d3beb74362c5b5f5cf1b1600000000000000000000db6994ef7ce1d1459579b3eb5636a041175beb53fd9c6f2305000000000000000d7540de149255d4e38956494b142221003747de43f50f313925b6"], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={0x0, 0x20}}, 0x10) dup(r1) chdir(&(0x7f0000000180)='./cgroup\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000940)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e24, 0x7, @remote, 0x1}, r4, 0x7}}, 0x48) 8.585824988s ago: executing program 2 (id=188): socket$netlink(0x10, 0x3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9f9, &(0x7f0000000340)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x297, 0x16, 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x20, 0x1, 0x7fff) socket(0x8, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(0x0, 0x0, 0x0, &(0x7f00000040c0)={0x77359400}, 0x0) 6.798643346s ago: executing program 2 (id=189): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(&(0x7f0000000400)='./file2\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000480)='./file2\x00', &(0x7f00000004c0)='nfs\x00', 0x0, &(0x7f0000000500)='addr=127.0.0.1,vers=3,proto=udp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB, @ANYBLOB="d0f1a38eda88e82b9b6d86643bb600378a298575c964da8c845fcfccdc767a7b2b7b5783a1c331d5cf27aeda1bc6a18ec25e487a9f8b8ebc6be9a93ca339ef7d2730bb25a3f2366d178ac4631659ce394c913c92a3ec7356328f143606634d4d1396b8f49f7a0aaee65852aaa23d25f9ac9b93b98b7f6a99ce8cc7d3beb74362c5b5f5cf1b1600000000000000000000db6994ef7ce1d1459579b3eb5636a041175beb53fd9c6f2305000000000000000d7540de149255d4e38956494b142221003747de43f50f313925b6"], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={0x0, 0x20}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x2}}, 0x20) 6.79762102s ago: executing program 1 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) semctl$GETALL(0x0, 0x0, 0xd, 0x0) setresuid(0xee01, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000540)={&(0x7f00000003c0)="892876767f79f7b8c2946fd15360319eaf53ade8b0c85cf174b34d7b1cd4f188d93dc2ed1d7b8267c8caf65cb7cadfcf0f09e7d1e462d992dcb987523c0b357fa15e31dc73cb01428bf74d58fc816ac35422a4c1e8a15c04f57b0966cfc739078f679cb52bc896a337e2a42b40284dd9bf11aecb690535f7cbefc5047dcc3952c0d7e94098a52cde133331fd63d605c2a66e9c73b4a2bb25281cb9b1a0a05d1e78b847599f654bbe8b152b217a77b8c7e3cc39d0b90b97f683ef79233e1a4b56b30a2d40fa37844696a6ecfc9da306dbfa7fc7833b1ad7167a959ab09334844183fd0ffe880eaf903623cd36cbe07d45ee7d9737b2b469e8", 0xf8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.393639604s ago: executing program 1 (id=190): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000c80), 0x2, 0x141102) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000dc0), 0xffffff6a) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x3fffffffffffce3, 0x700000000000000, 0x0) socketpair(0x1, 0x5, 0x739b, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e40)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='loginuid\x00') getrandom(&(0x7f00000004c0)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x123, 0x0, 0x0, [@typed={0xffffffffffffffbc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x2e}]}, 0x28}], 0x1}, 0x4000800) bind$alg(r2, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 4.627929307s ago: executing program 2 (id=191): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) pipe2$9p(&(0x7f0000000540), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1454, &(0x7f0000000580)={0x0, 0x770c, 0x40000, 0x3, 0x1e0, 0x0, r0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() tkill(r1, 0x21) 4.557549625s ago: executing program 3 (id=192): ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x5, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getrlimit(0x8, 0x0) sendmmsg$unix(r3, &(0x7f0000000540), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x2) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3.531730437s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000c80)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYBLOB="0100"/20, @ANYRES32], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000ec0)=0x2) recvmmsg(r1, &(0x7f0000000f00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xa, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000010c0)='./file2\x00', 0x81c0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000001100)={0x0, 0x2, 0xe98, 0x0, 0x100}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001180)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000040)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x13, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x0, 0xfffffffe, 0x1, 0xff, 0x47, 0x8, 0x84, 0x8, 0x1010103, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffffd, 0x38, 0xc, 0x10000006, 0x10001, 0xfffffff8]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='status\x00') prctl$PR_MCE_KILL_GET(0x22) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000003300)=0x4) symlinkat(&(0x7f0000003340)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000003380)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015"], 0xc8}}, 0x0) 3.523241484s ago: executing program 4 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000040)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000180)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) socket(0x15, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000440)="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"/297, 0x3accf8d5) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)='7', 0x1}], 0x1, 0x100000000000000) close(r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, &(0x7f0000000900)=""/4110, 0x1c, 0x100e, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'syzkaller0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.586507377s ago: executing program 3 (id=195): userfaultfd(0x801) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x280}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x5c}}, 0x2000400c) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1040) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4094) 1.986990593s ago: executing program 0 (id=196): prctl$PR_SET_PTRACER(0x1c, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x3f, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@RTM_NEWMDB={0x38, 0x54, 0x301, 0x70bd26, 0x25dfdb7d, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0xffe, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040040) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000740), 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x51d798df, 0x2003) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1.715004824s ago: executing program 2 (id=197): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x20, 0x14, 0x1, 0x70bd2a, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r1}, [@IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x20}}, 0x1c090) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0xa20, 0x8000c65) sendfile(r2, r3, 0x0, 0x8000000f3aa6ea) 980.524639ms ago: executing program 0 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r5, &(0x7f0000003440)=[{0x0}, {&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007118140000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='00:03', 0x5) 847.788207ms ago: executing program 4 (id=200): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x3, 0x80000) io_getevents(r3, 0x1, 0x7fffffffffffe0e, &(0x7f0000000040), 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) io_submit(r3, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r4, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r5 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0xa0800) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)="290000001600190f00f43fff0800da060200000000e80003dd08000401000000000000000005000000", 0x29}], 0x1) 59.547303ms ago: executing program 3 (id=201): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000500)='lo\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000900), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r5 = creat(&(0x7f0000000940)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000980)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) prlimit64(r2, 0xe, &(0x7f0000000a80)={0x0, 0x8}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0x800000d, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.353993ms ago: executing program 0 (id=202): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) sendmsg$nl_xfrm(r1, 0x0, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 0s ago: executing program 2 (id=212): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc00000019000100"/23], 0xfc}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000240)=0x3f7, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030408000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004"], 0xb4}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030508000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004000000012c"], 0xb4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000500)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000580)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000640)={{@my=0x0}, 0x1, 0x0, 0x10001}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x20000000) kernel console output (not intermixed with test programs): [ 50.030893][ T30] audit: type=1400 audit(1792938758.370:115): avc: denied { write } for pid=5495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.081991][ T30] audit: type=1400 audit(1792938758.420:116): avc: denied { write } for pid=5506 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.248399][ T30] audit: type=1400 audit(1792938758.590:117): avc: denied { write } for pid=5509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.301948][ T30] audit: type=1400 audit(1792938758.640:118): avc: denied { write } for pid=5520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.472363][ T30] audit: type=1400 audit(1792938758.810:119): avc: denied { write } for pid=5523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.517594][ T30] audit: type=1400 audit(1792938758.850:120): avc: denied { write } for pid=5534 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.685553][ T30] audit: type=1400 audit(1792938759.020:121): avc: denied { write } for pid=5537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.736418][ T30] audit: type=1400 audit(1792938759.070:122): avc: denied { write } for pid=5548 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 57.237138][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 57.237154][ T30] audit: type=1400 audit(1792938765.570:129): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.244645][ T30] audit: type=1400 audit(1792938765.580:130): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.246951][ T5602] cgroup: Unknown subsys name 'net' [ 57.249742][ T30] audit: type=1400 audit(1792938765.590:131): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.370079][ T5602] cgroup: Unknown subsys name 'cpuset' [ 57.377274][ T5602] cgroup: Unknown subsys name 'rlimit' [ 57.546143][ T30] audit: type=1400 audit(1792938765.880:132): avc: denied { setattr } for pid=5602 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.546498][ T30] audit: type=1400 audit(1792938765.880:133): avc: denied { create } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.546689][ T30] audit: type=1400 audit(1792938765.880:134): avc: denied { write } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.546913][ T30] audit: type=1400 audit(1792938765.880:135): avc: denied { read } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.555939][ T30] audit: type=1400 audit(1792938765.890:136): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.556266][ T30] audit: type=1400 audit(1792938765.890:137): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.676497][ T5604] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.681394][ T30] audit: type=1400 audit(1792938766.010:138): avc: denied { relabelto } for pid=5604 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.588495][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.336791][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 62.336808][ T30] audit: type=1400 audit(1792938770.670:144): avc: denied { create } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.336847][ T30] audit: type=1400 audit(1792938770.670:145): avc: denied { read write } for pid=5612 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.336883][ T30] audit: type=1400 audit(1792938770.670:146): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.390026][ T30] audit: type=1400 audit(1792938770.690:147): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="socket:[1698]" dev="sockfs" ino=1698 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.421612][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.422270][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.423602][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.424007][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.424659][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.425387][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.425625][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.425887][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.426276][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.426659][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.428987][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.431517][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.439741][ T30] audit: type=1400 audit(1792938770.770:148): avc: denied { read } for pid=5614 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.439785][ T30] audit: type=1400 audit(1792938770.770:149): avc: denied { open } for pid=5614 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.439933][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.448855][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.449510][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.451550][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.452159][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.452425][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.453191][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.453577][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.455941][ T30] audit: type=1400 audit(1792938770.790:150): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.470740][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.479669][ T30] audit: type=1400 audit(1792938770.810:151): avc: denied { module_request } for pid=5614 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.484847][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.488361][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.488742][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.492432][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.645823][ T30] audit: type=1400 audit(1792938770.980:152): avc: denied { sys_module } for pid=5627 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.153571][ T30] audit: type=1400 audit(1792938771.490:153): avc: denied { create } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.201820][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.202521][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.205430][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.242160][ T5615] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.272548][ T5627] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.341857][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.386719][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.476782][ T5612] infiniband rxe0: set active [ 63.478884][ T5612] infiniband rxe0: added rxe_eth0 [ 63.497695][ T1183] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.511908][ T5612] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 63.511937][ T5612] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 63.511970][ T5612] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 63.579089][ T5612] RDS/IB: rxe0: added [ 63.579303][ T5612] smc: adding ib device rxe0 with port count 1 [ 63.579359][ T5612] smc: ib device rxe0 port 1 has no pnetid [ 63.613118][ T1183] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.633214][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.849656][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.047490][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.090919][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.091690][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.092026][ T5615] bridge_slave_0: entered allmulticast mode [ 64.093395][ T5615] bridge_slave_0: entered promiscuous mode [ 64.128614][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.128688][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.128773][ T5627] bridge_slave_0: entered allmulticast mode [ 64.130009][ T5627] bridge_slave_0: entered promiscuous mode [ 64.157949][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.158007][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.158080][ T5627] bridge_slave_1: entered allmulticast mode [ 64.159747][ T5627] bridge_slave_1: entered promiscuous mode [ 64.196247][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.196315][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.196383][ T5615] bridge_slave_1: entered allmulticast mode [ 64.197299][ T5615] bridge_slave_1: entered promiscuous mode [ 64.206473][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.206536][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.206610][ T5614] bridge_slave_0: entered allmulticast mode [ 64.207626][ T5614] bridge_slave_0: entered promiscuous mode [ 64.209673][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.209740][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.210207][ T5614] bridge_slave_1: entered allmulticast mode [ 64.211209][ T5614] bridge_slave_1: entered promiscuous mode [ 64.277377][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.294193][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.310070][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.311837][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.313268][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.313313][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.370164][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.380167][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.380232][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.380306][ T5613] bridge_slave_0: entered allmulticast mode [ 64.381322][ T5613] bridge_slave_0: entered promiscuous mode [ 64.422088][ T5627] team0: Port device team_slave_0 added [ 64.422235][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.422353][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.422442][ T5613] bridge_slave_1: entered allmulticast mode [ 64.424610][ T5613] bridge_slave_1: entered promiscuous mode [ 64.427131][ T5615] team0: Port device team_slave_0 added [ 64.464375][ T5627] team0: Port device team_slave_1 added [ 64.466187][ T5615] team0: Port device team_slave_1 added [ 64.478896][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.480245][ T5614] team0: Port device team_slave_0 added [ 64.480448][ T5629] Bluetooth: hci4: command tx timeout [ 64.480452][ T5616] Bluetooth: hci2: command tx timeout [ 64.500367][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.501838][ T5614] team0: Port device team_slave_1 added [ 64.518152][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.518162][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.518179][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.564761][ T5629] Bluetooth: hci3: command tx timeout [ 64.564769][ T5616] Bluetooth: hci0: command tx timeout [ 64.577733][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.577744][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.611693][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.612597][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.612608][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.612627][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.630394][ T5613] team0: Port device team_slave_0 added [ 64.642814][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.642824][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.642842][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.667810][ T5629] Bluetooth: hci1: command tx timeout [ 64.672993][ T5613] team0: Port device team_slave_1 added [ 64.691835][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.691846][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.691863][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.694731][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.694740][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.694757][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.747644][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.758336][ T5615] hsr_slave_0: entered promiscuous mode [ 64.758963][ T5615] hsr_slave_1: entered promiscuous mode [ 64.856115][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.856128][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.856148][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.864119][ T5627] hsr_slave_0: entered promiscuous mode [ 64.864807][ T5627] hsr_slave_1: entered promiscuous mode [ 64.865347][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 64.865395][ T5627] Cannot create hsr debugfs directory [ 64.923642][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.923653][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.923670][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.979440][ T5614] hsr_slave_0: entered promiscuous mode [ 64.979874][ T5614] hsr_slave_1: entered promiscuous mode [ 64.980147][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 64.980161][ T5614] Cannot create hsr debugfs directory [ 65.067962][ T5613] hsr_slave_0: entered promiscuous mode [ 65.068386][ T5613] hsr_slave_1: entered promiscuous mode [ 65.068674][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 65.068688][ T5613] Cannot create hsr debugfs directory [ 65.320967][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.337361][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.347641][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.360536][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.366601][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.372699][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.373364][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.384764][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.460485][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.460829][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.460939][ T5612] bridge_slave_0: entered allmulticast mode [ 65.461801][ T5612] bridge_slave_0: entered promiscuous mode [ 65.471492][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.482733][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.483193][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.484053][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.484324][ T5612] bridge_slave_1: entered allmulticast mode [ 65.485381][ T5612] bridge_slave_1: entered promiscuous mode [ 65.509398][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.519472][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.535083][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.537831][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.544546][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.545109][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.551564][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.553231][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.597063][ T5612] team0: Port device team_slave_0 added [ 65.608701][ T5612] team0: Port device team_slave_1 added [ 65.644457][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.644467][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.644484][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.652279][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.658506][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.659042][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.684587][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.685175][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.685185][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.685202][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.707393][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.716305][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.727250][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.732676][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.793027][ T5612] hsr_slave_0: entered promiscuous mode [ 65.793459][ T5612] hsr_slave_1: entered promiscuous mode [ 65.793787][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 65.793802][ T5612] Cannot create hsr debugfs directory [ 65.826803][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.844015][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.844069][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.883424][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.901939][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.903661][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.904129][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.905738][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.907732][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.916972][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.936149][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.939566][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.946969][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.947054][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.965177][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.965263][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.040331][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.097035][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.123115][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.123178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.125014][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.127424][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.171195][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.171316][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.171701][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.174358][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.175055][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.177429][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.187055][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.236182][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.246154][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.271701][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.303050][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.303131][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.332915][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.334571][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.334640][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.395278][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.426224][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.426321][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.451981][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.452043][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.558848][ T5629] Bluetooth: hci2: command tx timeout [ 66.558875][ T5629] Bluetooth: hci4: command tx timeout [ 66.606143][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.638412][ T5616] Bluetooth: hci0: command tx timeout [ 66.638437][ T5616] Bluetooth: hci3: command tx timeout [ 66.659751][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.669360][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.669456][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.685087][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.685156][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.719065][ T5629] Bluetooth: hci1: command tx timeout [ 66.866052][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.017395][ T5615] veth0_vlan: entered promiscuous mode [ 67.047023][ T5615] veth1_vlan: entered promiscuous mode [ 67.136746][ T5615] veth0_macvtap: entered promiscuous mode [ 67.147139][ T5615] veth1_macvtap: entered promiscuous mode [ 67.188431][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.203796][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.238991][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240340][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240371][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240397][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.375277][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.383084][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.445194][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.445218][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.536936][ T1476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.536951][ T1476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.556924][ T5613] veth0_vlan: entered promiscuous mode [ 67.564872][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.566371][ T5627] veth0_vlan: entered promiscuous mode [ 67.594179][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 67.594192][ T30] audit: type=1400 audit(1792938775.930:156): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.8v1qJC/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.597219][ T30] audit: type=1400 audit(1792938775.930:157): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.603091][ T30] audit: type=1400 audit(1792938775.930:158): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.8v1qJC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.606925][ T5613] veth1_vlan: entered promiscuous mode [ 67.616054][ T30] audit: type=1400 audit(1792938775.950:159): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.616637][ T5627] veth1_vlan: entered promiscuous mode [ 67.636645][ T30] audit: type=1400 audit(1792938775.970:160): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.8v1qJC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.642814][ T30] audit: type=1400 audit(1792938775.970:161): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.8v1qJC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.667452][ T30] audit: type=1400 audit(1792938776.000:162): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.684988][ T30] audit: type=1400 audit(1792938776.030:163): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.697641][ T30] audit: type=1400 audit(1792938776.030:164): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="gadgetfs" ino=7661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.785291][ T5627] veth0_macvtap: entered promiscuous mode [ 67.791900][ T5613] veth0_macvtap: entered promiscuous mode [ 67.805348][ T5627] veth1_macvtap: entered promiscuous mode [ 67.837612][ T5613] veth1_macvtap: entered promiscuous mode [ 67.883624][ T30] audit: type=1400 audit(1792938776.220:165): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 67.895906][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.903487][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.910753][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.925088][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.942332][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.965957][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.008267][ T1409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008303][ T1409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008332][ T1409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008362][ T1409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008391][ T1409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008419][ T1409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008448][ T1409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008476][ T1409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149958][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.149974][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.153142][ T5612] veth0_vlan: entered promiscuous mode [ 68.209545][ T5612] veth1_vlan: entered promiscuous mode [ 68.324869][ T5612] veth0_macvtap: entered promiscuous mode [ 68.326228][ T5614] veth0_vlan: entered promiscuous mode [ 68.336291][ T5612] veth1_macvtap: entered promiscuous mode [ 68.376450][ T5614] veth1_vlan: entered promiscuous mode [ 68.401085][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.401100][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.416927][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.421146][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.438717][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.439860][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.440008][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.440132][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.505531][ T5817] xt_policy: output policy not valid in PREROUTING and INPUT [ 68.639287][ T5629] Bluetooth: hci4: command tx timeout [ 68.639361][ T5629] Bluetooth: hci2: command tx timeout [ 68.726101][ T5629] Bluetooth: hci0: command tx timeout [ 68.727066][ T5616] Bluetooth: hci3: command tx timeout [ 68.808664][ T5616] Bluetooth: hci1: command tx timeout [ 68.877696][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.877712][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.936962][ T5614] veth0_macvtap: entered promiscuous mode [ 68.947541][ T1476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.947556][ T1476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.970951][ T5614] veth1_macvtap: entered promiscuous mode [ 68.992407][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.992422][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.067557][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.080782][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.080797][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.084274][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.150117][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.200784][ T1409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.201027][ T1409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.201264][ T1409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.393234][ T1476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.393250][ T1476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.393437][ T1476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.393448][ T1476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.011405][ T5831] ======================================================= [ 70.011405][ T5831] WARNING: The mand mount option has been deprecated and [ 70.011405][ T5831] and is ignored by this kernel. Remove the mand [ 70.011405][ T5831] option from the mount to silence this warning. [ 70.011405][ T5831] ======================================================= [ 70.080229][ T5831] jffs2: notice: (5831) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.298847][ T5616] Bluetooth: hci2: command tx timeout [ 71.298866][ T5629] Bluetooth: hci4: command tx timeout [ 71.298875][ T5616] Bluetooth: hci3: command tx timeout [ 71.298886][ T5629] Bluetooth: hci0: command tx timeout [ 71.298894][ T5616] Bluetooth: hci1: command tx timeout [ 71.648225][ T5850] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5612] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5850] [ 72.262542][ T5854] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 72.310946][ T5854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.310989][ T5854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.311011][ T5854] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 73.111768][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 73.111801][ T30] audit: type=1400 audit(1792938781.260:198): avc: denied { create } for pid=5855 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.111941][ T30] audit: type=1400 audit(1792938781.270:199): avc: denied { prog_load } for pid=5855 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.112073][ T30] audit: type=1400 audit(1792938781.270:200): avc: denied { bpf } for pid=5855 comm="syz.1.9" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.112209][ T30] audit: type=1400 audit(1792938781.270:201): avc: denied { perfmon } for pid=5855 comm="syz.1.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.112333][ T30] audit: type=1400 audit(1792938781.280:202): avc: denied { prog_run } for pid=5855 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.243983][ T30] audit: type=1400 audit(1792938781.510:203): avc: denied { execute } for pid=5855 comm="syz.1.9" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 73.244140][ T30] audit: type=1400 audit(1792938781.540:204): avc: denied { ioctl } for pid=5855 comm="syz.1.9" path="socket:[9307]" dev="sockfs" ino=9307 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.244289][ T30] audit: type=1400 audit(1792938781.540:205): avc: denied { write } for pid=5855 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.399946][ T30] audit: type=1400 audit(1792938782.460:206): avc: denied { create } for pid=5858 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.398426][ T30] audit: type=1400 audit(1792938783.220:207): avc: denied { mounton } for pid=5861 comm="syz.4.11" path="/1/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 75.759855][ T5873] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 77.326496][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.339977][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.708797][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 78.708813][ T30] audit: type=1400 audit(1792938787.050:228): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 78.788949][ T30] audit: type=1400 audit(1792938787.130:229): avc: denied { write } for pid=5882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.789354][ T30] audit: type=1400 audit(1792938787.130:230): avc: denied { add_name } for pid=5882 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.920153][ T30] audit: type=1400 audit(1792938787.260:231): avc: denied { write } for pid=5896 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.920777][ T30] audit: type=1400 audit(1792938787.260:232): avc: denied { remove_name } for pid=5896 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.979024][ T5898] openvswitch: netlink: Message has 4 unknown bytes. [ 79.808075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 80.032013][ T30] audit: type=1400 audit(1792938788.370:233): avc: denied { mount } for pid=5905 comm="syz.3.18" name="/" dev="autofs" ino=8771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 81.984948][ T10] cfg80211: failed to load regulatory.db [ 82.229247][ T5918] Zero length message leads to an empty skb [ 82.268051][ T30] audit: type=1400 audit(1792938790.550:234): avc: denied { write } for pid=5909 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.977507][ T30] audit: type=1400 audit(1792938792.310:235): avc: denied { connect } for pid=5931 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.985882][ T30] audit: type=1400 audit(1792938792.320:236): avc: denied { getopt } for pid=5931 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.093399][ T30] audit: type=1400 audit(1792938792.430:237): avc: denied { execute } for pid=5925 comm="syz.0.22" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.349565][ T30] audit: type=1326 audit(1792938792.690:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.1.25" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6791d9f559 code=0x0 [ 85.427134][ T5942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.747808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.868681][ T30] audit: type=1400 audit(1792938793.810:239): avc: denied { ioctl } for pid=5940 comm="syz.1.26" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xc4089434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.034659][ T30] audit: type=1400 audit(1792938794.370:240): avc: denied { write } for pid=5908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.270148][ T30] audit: type=1400 audit(1792938794.610:241): avc: denied { write } for pid=5947 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.428474][ T30] audit: type=1400 audit(1792938794.770:242): avc: denied { setopt } for pid=5948 comm="syz.4.24" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.451004][ T30] audit: type=1400 audit(1792938794.790:243): avc: denied { connect } for pid=5948 comm="syz.4.24" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.452870][ T30] audit: type=1400 audit(1792938794.790:244): avc: denied { write } for pid=5948 comm="syz.4.24" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.518518][ T5953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.418913][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.638507][ T5973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.639091][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 89.233554][ T5977] process 'syz.2.31' launched './file0' with NULL argv: empty string added [ 89.257692][ T5976] jffs2: notice: (5976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 89.258021][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 89.258034][ T30] audit: type=1400 audit(1792938797.570:249): avc: denied { execute_no_trans } for pid=5975 comm="syz.2.31" path="/5/file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.258070][ T30] audit: type=1400 audit(1792938797.590:250): avc: denied { mounton } for pid=5975 comm="syz.2.31" path="/5/file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.904595][ T30] audit: type=1400 audit(1792938798.240:251): avc: denied { write } for pid=5954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.057153][ T30] audit: type=1400 audit(1792938798.390:252): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.098267][ T30] audit: type=1400 audit(1792938798.730:253): avc: denied { create } for pid=5986 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 91.098304][ T30] audit: type=1400 audit(1792938798.800:254): avc: denied { connect } for pid=5986 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.098323][ T30] audit: type=1400 audit(1792938798.810:255): avc: denied { bind } for pid=5986 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.182283][ T30] audit: type=1400 audit(1792938799.520:256): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.243623][ T5622] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.268436][ T30] audit: type=1400 audit(1792938801.590:257): avc: denied { write } for pid=6008 comm="syz.4.30" name="route" dev="proc" ino=4026533091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.373101][ T30] audit: type=1400 audit(1792938801.710:258): avc: denied { getopt } for pid=5997 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.918079][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 94.918099][ T30] audit: type=1400 audit(1792938803.250:261): avc: denied { write } for pid=6016 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.827237][ T30] audit: type=1400 audit(1792938804.160:262): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.977606][ T30] audit: type=1400 audit(1792938804.310:263): avc: denied { read write } for pid=6027 comm="syz.1.34" name="sg0" dev="devtmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.977702][ T30] audit: type=1400 audit(1792938804.310:264): avc: denied { open } for pid=6027 comm="syz.1.34" path="/dev/sg0" dev="devtmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.002585][ T30] audit: type=1400 audit(1792938804.310:265): avc: denied { append } for pid=6027 comm="syz.1.34" name="nbd1" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.116542][ T6031] FAULT_INJECTION: forcing a failure. [ 96.116542][ T6031] name failslab, interval 1, probability 0, space 0, times 1 [ 96.116584][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.4.36 Not tainted syzkaller #0 PREEMPT(full) [ 96.116605][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 96.116616][ T6031] Call Trace: [ 96.116622][ T6031] [ 96.116629][ T6031] dump_stack_lvl+0x100/0x190 [ 96.116662][ T6031] should_fail_ex.cold+0x5/0xa [ 96.116689][ T6031] should_failslab+0xc2/0x120 [ 96.116716][ T6031] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.116738][ T6031] ? d_instantiate+0x8a/0xb0 [ 96.116756][ T6031] ? alloc_empty_file+0x5b/0x1c0 [ 96.116778][ T6031] alloc_empty_file+0x5b/0x1c0 [ 96.116797][ T6031] alloc_file_pseudo+0x17e/0x290 [ 96.116817][ T6031] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 96.116837][ T6031] ? _raw_spin_unlock+0x28/0x50 [ 96.116858][ T6031] ? alloc_fd+0x471/0x7a0 [ 96.116887][ T6031] __anon_inode_getfile+0xe8/0x280 [ 96.116915][ T6031] anon_inode_getfd+0x68/0xc0 [ 96.116941][ T6031] map_create+0x19e1/0x3150 [ 96.116962][ T6031] ? find_held_lock+0x2b/0x80 [ 96.116980][ T6031] ? avc_has_perm_noaudit+0x11e/0x470 [ 96.117002][ T6031] ? avc_has_perm_noaudit+0x11e/0x470 [ 96.117031][ T6031] ? __pfx_map_create+0x10/0x10 [ 96.117053][ T6031] ? avc_has_perm+0x135/0x1e0 [ 96.117075][ T6031] ? __pfx_avc_has_perm+0x10/0x10 [ 96.117105][ T6031] ? selinux_bpf+0xf6/0x140 [ 96.117133][ T6031] __sys_bpf+0x14cb/0x4b60 [ 96.117163][ T6031] ? in_gate_area_no_mm+0x50/0x80 [ 96.117187][ T6031] ? __pfx___sys_bpf+0x10/0x10 [ 96.117210][ T6031] ? preempt_schedule+0x57/0xd0 [ 96.117237][ T6031] ? futex_private_hash_put.part.0+0xdc/0x180 [ 96.117267][ T6031] ? futex_private_hash_put+0x24/0x30 [ 96.117300][ T6031] ? __pfx_futex_wake+0x10/0x10 [ 96.117325][ T6031] ? rcu_is_watching+0x13/0xc0 [ 96.117343][ T6031] ? trace_sched_exit_tp+0x120/0x160 [ 96.117370][ T6031] ? __schedule+0x1270/0x6990 [ 96.117408][ T6031] ? __x64_sys_futex+0x34f/0x4d0 [ 96.117425][ T6031] ? __x64_sys_futex+0x358/0x4d0 [ 96.117453][ T6031] ? xfd_validate_state+0x129/0x190 [ 96.117478][ T6031] ? __x64_sys_bpf+0xce/0x140 [ 96.117502][ T6031] __x64_sys_bpf+0xce/0x140 [ 96.117528][ T6031] ? do_syscall_64+0xae/0x790 [ 96.117554][ T6031] do_syscall_64+0x123/0x790 [ 96.117582][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.117602][ T6031] RIP: 0033:0x7f592859f559 [ 96.117619][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.117635][ T6031] RSP: 002b:00007f59293a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.117654][ T6031] RAX: ffffffffffffffda RBX: 00007f5928826180 RCX: 00007f592859f559 [ 96.117667][ T6031] RDX: 0000000000000050 RSI: 0000200000000c00 RDI: 0000000000000000 [ 96.117678][ T6031] RBP: 00007f5928636b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.117689][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.117700][ T6031] R13: 00007f5928826218 R14: 00007f5928826180 R15: 00007fff44806558 [ 96.117725][ T6031] [ 96.523837][ T30] audit: type=1400 audit(1792938804.840:266): avc: denied { create } for pid=6027 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.728046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 97.846149][ T30] audit: type=1400 audit(1792938805.920:267): avc: denied { ioctl } for pid=6037 comm="syz.4.38" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.347639][ T30] audit: type=1400 audit(1792938806.680:268): avc: denied { mount } for pid=6035 comm="syz.2.39" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.578756][ T30] audit: type=1400 audit(1792938807.920:269): avc: denied { ioctl } for pid=6035 comm="syz.2.39" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9479 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.597998][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43'. [ 101.629064][ T30] audit: type=1400 audit(1792938809.970:270): avc: denied { unmount } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 103.041856][ T30] audit: type=1400 audit(1792938811.000:271): avc: denied { bind } for pid=6069 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.041907][ T30] audit: type=1400 audit(1792938811.000:272): avc: denied { setopt } for pid=6069 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.259900][ T30] audit: type=1400 audit(1792938811.600:273): avc: denied { read write } for pid=6066 comm="syz.1.42" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.260085][ T30] audit: type=1400 audit(1792938811.600:274): avc: denied { open } for pid=6066 comm="syz.1.42" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.223091][ T30] audit: type=1400 audit(1792938812.560:275): avc: denied { write } for pid=6078 comm="syz.2.47" name="video7" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 104.962211][ T12] IPVS: starting estimator thread 0... [ 104.962254][ T30] audit: type=1400 audit(1792938812.720:276): avc: denied { setopt } for pid=6078 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.047852][ T6082] IPVS: using max 75 ests per chain, 180000 per kthread [ 105.229611][ T30] audit: type=1400 audit(1792938813.560:277): avc: denied { ioctl } for pid=6083 comm="syz.0.48" path="socket:[8927]" dev="sockfs" ino=8927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.932112][ T6090] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.378864][ T30] audit: type=1400 audit(1792938814.720:278): avc: denied { mount } for pid=6087 comm="syz.4.40" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 106.408300][ T30] audit: type=1400 audit(1792938814.720:279): avc: denied { read } for pid=6087 comm="syz.4.40" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.565025][ T6096] overlayfs: failed to resolve './bus': -2 [ 106.645050][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 106.645071][ T30] audit: type=1400 audit(1792938814.980:287): avc: denied { read } for pid=6087 comm="syz.4.40" name="rd_mcp_0" dev="configfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.646258][ T30] audit: type=1400 audit(1792938814.980:288): avc: denied { read open } for pid=6087 comm="syz.4.40" path="/8/my_configfs/target/core/rd_mcp_0" dev="configfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.654707][ T30] audit: type=1400 audit(1792938814.990:289): avc: denied { write } for pid=6087 comm="syz.4.40" name="core" dev="configfs" ino=3597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.657299][ T30] audit: type=1400 audit(1792938814.990:290): avc: denied { remove_name } for pid=6087 comm="syz.4.40" name="rd_mcp_0" dev="configfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.657978][ T30] audit: type=1400 audit(1792938814.990:291): avc: denied { rmdir } for pid=6087 comm="syz.4.40" name="rd_mcp_0" dev="configfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.211621][ T6098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'. [ 107.226533][ T6098] bond0: (slave bond_slave_0): Releasing backup interface [ 107.968076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 108.143915][ T30] audit: type=1400 audit(1792938816.130:292): avc: denied { write } for pid=6099 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.143957][ T30] audit: type=1400 audit(1792938816.130:293): avc: denied { connect } for pid=6099 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.143983][ T30] audit: type=1400 audit(1792938816.130:294): avc: denied { name_connect } for pid=6099 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.144008][ T30] audit: type=1400 audit(1792938816.210:295): avc: denied { shutdown } for pid=6099 comm="syz.3.44" lport=44476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.144033][ T30] audit: type=1400 audit(1792938816.390:296): avc: denied { read } for pid=6099 comm="syz.3.44" lport=44476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.271720][ T6095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.272701][ T6095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.294978][ T6095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.329122][ T6095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.331204][ T6095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.332478][ T6098] bond_slave_0: entered promiscuous mode [ 108.332495][ T6098] bond_slave_0: entered allmulticast mode [ 108.363247][ T6095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.401031][ T6095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.401165][ T6095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.418924][ T6095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.472552][ T6095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.483984][ T6095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.500430][ T6095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.510363][ T6095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.510408][ T6095] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.526726][ T6095] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.583622][ T6095] hwrng_fill thread creation failed [ 110.348697][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.397816][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.479161][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.481425][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.461995][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.623148][ T6130] capability: warning: `syz.0.57' uses deprecated v2 capabilities in a way that may be insecure [ 111.796980][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 111.796996][ T30] audit: type=1400 audit(1792938820.130:307): avc: denied { write } for pid=6129 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.877840][ T6141] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 112.964599][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.964632][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.964653][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.964672][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.527929][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.746685][ T30] audit: type=1400 audit(1792938822.080:308): avc: denied { write } for pid=6125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.898589][ T30] audit: type=1400 audit(1792938822.240:309): avc: denied { write } for pid=6152 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.018832][ T30] audit: type=1400 audit(1792938822.360:310): avc: denied { connect } for pid=6154 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.072719][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 115.189043][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.189076][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.189096][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.189115][ T4934] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.648026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 115.698832][ T6164] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.058135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.177191][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.368277][ T1183] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.737089][ T30] audit: type=1400 audit(1792938827.070:311): avc: denied { read write } for pid=6177 comm="syz.4.67" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.761189][ T30] audit: type=1400 audit(1792938827.110:312): avc: denied { open } for pid=6177 comm="syz.4.67" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.984698][ T30] audit: type=1400 audit(1792938827.320:313): avc: denied { ioctl } for pid=6177 comm="syz.4.67" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.173904][ T6186] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.857779][ T30] audit: type=1400 audit(1792938828.190:314): avc: denied { prog_run } for pid=6183 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.768057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 120.791217][ T4934] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 121.044927][ T30] audit: type=1400 audit(1792938829.380:315): avc: denied { read } for pid=6198 comm="syz.2.69" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.194195][ T6208] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.194695][ T6208] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 123.689253][ T30] audit: type=1400 audit(1792938832.030:316): avc: denied { write } for pid=6206 comm="syz.3.64" path="socket:[9789]" dev="sockfs" ino=9789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.713965][ T6211] Bluetooth: MGMT ver 1.23 [ 123.724328][ T30] audit: type=1400 audit(1792938832.060:317): avc: denied { getopt } for pid=6206 comm="syz.3.64" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.859302][ T30] audit: type=1400 audit(1792938832.200:318): avc: denied { read append } for pid=6212 comm="syz.4.73" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.859854][ T30] audit: type=1400 audit(1792938832.200:319): avc: denied { open } for pid=6212 comm="syz.4.73" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.901049][ T30] audit: type=1400 audit(1792938832.820:320): avc: denied { bind } for pid=6214 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.901092][ T30] audit: type=1400 audit(1792938832.830:321): avc: denied { node_bind } for pid=6214 comm="syz.3.75" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 125.075425][ T30] audit: type=1400 audit(1792938833.410:322): avc: denied { ioctl } for pid=6219 comm="syz.2.74" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.286499][ T30] audit: type=1400 audit(1792938833.620:323): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.420339][ T30] audit: type=1400 audit(1792938833.760:324): avc: denied { write } for pid=6232 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.449510][ T30] audit: type=1400 audit(1792938833.790:325): avc: denied { write } for pid=6219 comm="syz.2.74" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.757831][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.873080][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'. [ 126.169272][ T30] audit: type=1400 audit(1792938834.500:326): avc: denied { setopt } for pid=6239 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.285051][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.285098][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.485140][ T30] audit: type=1400 audit(1792938837.820:327): avc: denied { write } for pid=6252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.554004][ T30] audit: type=1400 audit(1792938838.890:328): avc: denied { create } for pid=6271 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.557269][ T30] audit: type=1400 audit(1792938838.890:329): avc: denied { connect } for pid=6271 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.557776][ T30] audit: type=1400 audit(1792938838.890:330): avc: denied { setopt } for pid=6271 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.008108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 131.575609][ T5622] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.486688][ T30] audit: type=1400 audit(1792938840.820:331): avc: denied { map_create } for pid=6271 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.512430][ T30] audit: type=1400 audit(1792938840.850:332): avc: denied { map_read map_write } for pid=6271 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.647806][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 132.776633][ T5622] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 132.823663][ T5622] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 132.823687][ T5622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.823704][ T5622] usb 4-1: config 0 has no interface number 0 [ 132.823816][ T5622] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.115304][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.115331][ T5622] usb 4-1: Product: syz [ 133.115344][ T5622] usb 4-1: Manufacturer: syz [ 133.115356][ T5622] usb 4-1: SerialNumber: syz [ 133.636303][ T5622] usb 4-1: config 0 descriptor?? [ 133.645295][ T30] audit: type=1400 audit(1792938841.980:333): avc: denied { write } for pid=6285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.676085][ T5622] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 133.676401][ T5622] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 134.622433][ T30] audit: type=1400 audit(1792938842.510:334): avc: denied { name_bind } for pid=6292 comm="syz.0.85" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 134.622478][ T30] audit: type=1400 audit(1792938842.510:335): avc: denied { node_bind } for pid=6292 comm="syz.0.85" saddr=172.20.20.25 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 136.929223][ T29] usb 4-1: USB disconnect, device number 2 [ 136.944930][ T30] audit: type=1400 audit(1792938845.280:336): avc: denied { read write } for pid=6308 comm="syz.0.87" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.981477][ T30] audit: type=1400 audit(1792938845.320:337): avc: denied { open } for pid=6308 comm="syz.0.87" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.581752][ T30] audit: type=1400 audit(1792938845.920:338): avc: denied { ioctl } for pid=6314 comm="syz.3.88" path="socket:[10041]" dev="sockfs" ino=10041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.187821][ T30] audit: type=1400 audit(1792938846.310:339): avc: denied { write } for pid=6313 comm="syz.1.90" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.276764][ T6321] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5613] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6321] [ 138.530237][ T30] audit: type=1400 audit(1792938846.620:340): avc: denied { bind } for pid=6314 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.057827][ T30] audit: type=1326 audit(1792938847.260:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.4.89" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f592859f559 code=0x0 [ 140.447032][ T6339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 140.447055][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.447319][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 140.476470][ T6340] vhci_hcd: connection closed [ 140.482334][ T12] vhci_hcd vhci_hcd.0: stop threads [ 140.482577][ T12] vhci_hcd vhci_hcd.0: release socket [ 140.482601][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 140.617927][ T5622] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.374455][ T5622] usb 2-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 141.375806][ T5622] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 141.375828][ T5622] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.375842][ T5622] usb 2-1: config 2 interface 0 has no altsetting 0 [ 141.423510][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.423531][ T5622] usb 2-1: Product: syz [ 141.423545][ T5622] usb 2-1: Manufacturer: syz [ 141.423557][ T5622] usb 2-1: SerialNumber: syz [ 141.897756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.417155][ T6352] mmap: syz.3.96 (6352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.435897][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 142.440403][ T5616] block nbd0: Receive control failed (result -1) [ 142.555844][ T5622] usb 2-1: USB disconnect, device number 2 [ 142.886440][ T6363] pimreg: entered allmulticast mode [ 144.097927][ T30] audit: type=1400 audit(1792938852.430:342): avc: denied { create } for pid=6366 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 144.119105][ T30] audit: type=1400 audit(1792938852.460:343): avc: denied { write } for pid=6366 comm="syz.4.100" path="socket:[10118]" dev="sockfs" ino=10118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 144.407496][ T30] audit: type=1400 audit(1792938852.740:344): avc: denied { name_bind } for pid=6370 comm="syz.3.101" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 144.533134][ T6372] F2FS-fs: Conflicting test_dummy_encryption options [ 145.460352][ T30] audit: type=1400 audit(1792938853.800:345): avc: denied { read } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.460397][ T30] audit: type=1400 audit(1792938853.800:346): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.460433][ T30] audit: type=1400 audit(1792938853.800:347): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.580787][ T30] audit: type=1400 audit(1792938853.920:348): avc: denied { execmem } for pid=6373 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.600570][ T30] audit: type=1400 audit(1792938853.920:349): avc: denied { create } for pid=6373 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.368074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 146.533988][ T30] audit: type=1400 audit(1792938854.250:350): avc: denied { read } for pid=6375 comm="syz.3.104" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 146.534033][ T30] audit: type=1400 audit(1792938854.250:351): avc: denied { open } for pid=6375 comm="syz.3.104" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.141466][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 147.162543][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'. [ 148.056245][ T6401] jffs2: notice: (6401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 149.290213][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 149.290225][ T30] audit: type=1400 audit(1792938857.630:418): avc: denied { write } for pid=6400 comm="syz.2.102" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.296574][ T30] audit: type=1400 audit(1792938857.630:419): avc: denied { write } for pid=6400 comm="syz.2.102" name="file7" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 149.406356][ T30] audit: type=1400 audit(1792938857.740:420): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.551662][ T30] audit: type=1400 audit(1792938857.890:421): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 149.704749][ T6422] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.744824][ T30] audit: type=1400 audit(1792938858.030:422): avc: denied { write } for pid=6415 comm="syz.1.111" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.744864][ T30] audit: type=1400 audit(1792938858.050:423): avc: denied { create } for pid=6415 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.744895][ T30] audit: type=1400 audit(1792938858.060:424): avc: denied { prog_run } for pid=6415 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.822742][ T30] audit: type=1400 audit(1792938858.160:425): avc: denied { listen } for pid=6418 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.852018][ T30] audit: type=1400 audit(1792938858.190:426): avc: denied { read write } for pid=6418 comm="syz.3.112" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.877546][ T30] audit: type=1400 audit(1792938858.220:427): avc: denied { open } for pid=6418 comm="syz.3.112" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.883231][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 150.524426][ T6439] team0: Device xfrm0 is of different type [ 150.555507][ T6439] tipc: Started in network mode [ 150.555522][ T6439] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 150.559849][ T6439] tipc: Enabled bearer , priority 0 [ 150.848709][ T1183] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.010993][ T1183] usb 2-1: Using ep0 maxpacket: 16 [ 151.013754][ T1183] usb 2-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 151.016588][ T1183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.046602][ T1183] usb 2-1: config 0 descriptor?? [ 151.059615][ T1183] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 151.083731][ T1183] usb 2-1: Detected FT2232HP [ 151.259194][ T1183] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 152.268957][ T1183] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 152.589450][ T1183] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 152.837639][ T5816] tipc: Node number set to 11578026 [ 152.859915][ T1183] usb 2-1: USB disconnect, device number 3 [ 152.903575][ T1183] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 152.904245][ T1183] ftdi_sio 2-1:0.0: device disconnected [ 154.743618][ T5616] Bluetooth: hci1: unexpected event for opcode 0x041c [ 154.743678][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 154.743689][ T30] audit: type=1400 audit(1792939119.091:453): avc: denied { write } for pid=6466 comm="syz.3.121" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 155.078575][ T30] audit: type=1400 audit(1792939119.231:454): avc: denied { ioctl } for pid=6466 comm="syz.3.121" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x4058587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 155.176516][ T30] audit: type=1400 audit(1792939119.511:455): avc: denied { unmount } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 156.180760][ T151] rpcbind: server 127.0.0.1 not responding, timed out [ 156.265071][ T30] audit: type=1400 audit(1792939120.601:456): avc: denied { read write } for pid=6473 comm="syz.2.126" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.265098][ T30] audit: type=1400 audit(1792939120.601:457): avc: denied { open } for pid=6473 comm="syz.2.126" path="/22/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.268056][ T30] audit: type=1400 audit(1792939120.611:458): avc: denied { ioctl } for pid=6473 comm="syz.2.126" path="/22/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xc0d05640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.455593][ T5616] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 156.455674][ T5616] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 157.714200][ T6483] netlink: 'syz.2.129': attribute type 29 has an invalid length. [ 158.653457][ T30] audit: type=1400 audit(1792939122.611:459): avc: denied { mount } for pid=6484 comm="syz.3.130" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 158.718974][ T30] audit: type=1400 audit(1792939123.061:460): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 158.757407][ T30] audit: type=1400 audit(1792939123.091:461): avc: denied { create } for pid=6482 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.786970][ T30] audit: type=1400 audit(1792939123.121:462): avc: denied { write } for pid=6482 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.836707][ T5616] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 160.286221][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.132'. [ 161.776462][ T6503] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.144686][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 162.144698][ T30] audit: type=1400 audit(1792939126.321:464): avc: denied { create } for pid=6501 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 162.479766][ T30] audit: type=1400 audit(1792939126.811:465): avc: denied { audit_write } for pid=6506 comm="syz.0.134" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.856514][ T6509] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 162.904054][ T30] audit: type=1400 audit(1792939127.241:466): avc: denied { search } for pid=6511 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.168313][ T30] audit: type=1400 audit(1792939127.501:467): avc: denied { read } for pid=6512 comm="syz.3.131" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.169330][ T30] audit: type=1400 audit(1792939127.511:468): avc: denied { open } for pid=6512 comm="syz.3.131" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.178431][ T30] audit: type=1400 audit(1792939127.521:469): avc: denied { ioctl } for pid=6512 comm="syz.3.131" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0xc02064b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.178519][ T6513] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 163.181963][ T30] audit: type=1400 audit(1792939127.521:470): avc: denied { map } for pid=6512 comm="syz.3.131" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.183786][ T30] audit: type=1400 audit(1792939127.521:471): avc: denied { execute } for pid=6512 comm="syz.3.131" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.416160][ T6517] netlink: 'syz.1.137': attribute type 2 has an invalid length. [ 163.416177][ T6517] netlink: 224 bytes leftover after parsing attributes in process `syz.1.137'. [ 163.584595][ T6518] team0: Device xfrm0 is of different type [ 163.596386][ T6517] netlink: 'syz.1.137': attribute type 10 has an invalid length. [ 163.813611][ T6517] team0: Port device dummy0 added [ 164.145481][ T6518] tipc: Started in network mode [ 164.145503][ T6518] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 164.145617][ T6518] tipc: Enabled bearer , priority 0 [ 164.300508][ T30] audit: type=1400 audit(1792939128.641:472): avc: denied { ioctl } for pid=6512 comm="syz.3.131" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10937 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.917561][ T6538] capability: warning: `syz.4.140' uses 32-bit capabilities (legacy support in use) [ 165.267832][ T5740] tipc: Node number set to 11578026 [ 165.317889][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 165.327836][ T1183] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.354815][ T6520] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 165.479797][ T1183] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.480769][ T1183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.485304][ T1183] usb 2-1: config 0 descriptor?? [ 165.490796][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 165.504300][ T24] usb 1-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 165.529563][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.535036][ T24] usb 1-1: config 0 descriptor?? [ 165.539828][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 165.803807][ T6543] trusted_key: encrypted_key: insufficient parameters specified [ 165.834972][ T24] usb 1-1: Detected FT2232HP [ 165.836277][ T1183] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 165.861734][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 166.044577][ T30] audit: type=1400 audit(1792939130.381:473): avc: denied { write } for pid=6533 comm="syz.1.139" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.093756][ T1183] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 166.093776][ T1183] [drm] Initialized udl on minor 1 [ 166.138541][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 166.142418][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.171667][ T24] usb 1-1: USB disconnect, device number 2 [ 166.207982][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.208277][ T24] ftdi_sio 1-1:0.0: device disconnected [ 166.384142][ T6549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6549 comm=syz.1.139 [ 168.787881][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.943055][ T24] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 168.946707][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.946996][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.216551][ T24] rtsx_usb 1-1:1.0: probe with driver rtsx_usb failed with error -22 [ 169.384441][ T5616] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 169.384463][ T5616] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 169.405283][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.419505][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.425219][ T24] usb 1-1: USB disconnect, device number 3 [ 169.807875][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 169.807907][ T30] audit: type=1400 audit(1792939134.051:481): avc: denied { name_bind } for pid=6568 comm="syz.3.148" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 171.442909][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 172.045594][ T5616] block nbd1: Receive control failed (result -1) [ 172.287511][ T1183] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 172.299373][ T1183] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 172.307704][ T1183] usb 2-1: USB disconnect, device number 4 [ 172.314367][ T5740] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 172.392965][ T6584] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 172.430198][ T30] audit: type=1400 audit(1792939136.771:482): avc: denied { create } for pid=6581 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.575509][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.666863][ T30] audit: type=1400 audit(1792939138.001:483): avc: denied { create } for pid=6583 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 173.688123][ T30] audit: type=1400 audit(1792939138.031:484): avc: denied { sqpoll } for pid=6594 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 173.764397][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.764554][ T6592] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 173.768869][ T30] audit: type=1400 audit(1792939138.111:485): avc: denied { write } for pid=6583 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 173.769204][ T6592] bond1: (slave gre1): Error -95 calling set_mac_address [ 173.994536][ T6593] gretap1: entered promiscuous mode [ 174.120787][ T30] audit: type=1400 audit(1792939138.421:486): avc: denied { create } for pid=6599 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.120960][ T30] audit: type=1400 audit(1792939138.431:487): avc: denied { ioctl } for pid=6599 comm="syz.3.154" path="socket:[11528]" dev="sockfs" ino=11528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.121094][ T30] audit: type=1400 audit(1792939138.431:488): avc: denied { setopt } for pid=6599 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.553154][ T30] audit: type=1400 audit(1792939138.891:489): avc: denied { mount } for pid=6602 comm="syz.0.156" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.695174][ T6593] bond1: (slave gretap1): making interface the new active one [ 174.695742][ T6593] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 174.727597][ T6596] bond1 (unregistering): (slave gretap1): Releasing active interface [ 174.762529][ T30] audit: type=1400 audit(1792939139.101:490): avc: denied { write } for pid=6594 comm="syz.4.153" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.785601][ T6596] bond1 (unregistering): Released all slaves [ 174.789218][ T1183] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.816126][ T6595] loop7: detected capacity change from 0 to 7 [ 174.945753][ T30] audit: type=1400 audit(1792939139.281:491): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.972030][ T1183] usb 4-1: Using ep0 maxpacket: 8 [ 174.981261][ T1183] usb 4-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 174.984435][ T1183] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.984450][ T1183] usb 4-1: config 179 has no interface number 0 [ 174.984471][ T1183] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 174.984485][ T1183] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 174.984499][ T1183] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.984510][ T1183] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.984530][ T1183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.036625][ T6604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.094674][ T6595] Dev loop7: unable to read RDB block 7 [ 175.094704][ T6595] loop7: unable to read partition table [ 175.094861][ T6595] loop7: partition table beyond EOD, truncated [ 175.109582][ T6595] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 176.141109][ T30] audit: type=1400 audit(1792939139.981:492): avc: denied { mount } for pid=6609 comm="syz.0.157" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.141136][ T30] audit: type=1400 audit(1792939139.991:493): avc: denied { search } for pid=6609 comm="syz.0.157" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 176.141155][ T30] audit: type=1400 audit(1792939139.991:494): avc: denied { read write } for pid=6609 comm="syz.0.157" name="dynamic_events" dev="tracefs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 176.141180][ T30] audit: type=1400 audit(1792939139.991:495): avc: denied { open } for pid=6609 comm="syz.0.157" path="/32/tracefs/dynamic_events" dev="tracefs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 176.141200][ T30] audit: type=1400 audit(1792939140.031:496): avc: denied { mount } for pid=6609 comm="syz.0.157" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.141218][ T30] audit: type=1400 audit(1792939140.041:497): avc: denied { search } for pid=6609 comm="syz.0.157" name="/" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.141239][ T30] audit: type=1400 audit(1792939140.041:498): avc: denied { search } for pid=6609 comm="syz.0.157" name="target" dev="configfs" ino=3596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.141258][ T30] audit: type=1400 audit(1792939140.051:499): avc: denied { write search } for pid=6609 comm="syz.0.157" name="target" dev="configfs" ino=3596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.141277][ T30] audit: type=1400 audit(1792939140.051:500): avc: denied { add_name } for pid=6609 comm="syz.0.157" name="usb_gadget" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.358190][ T24] usb 4-1: USB disconnect, device number 3 [ 176.527621][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.527646][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.527663][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.527678][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.527699][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.577010][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.577579][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.577594][ T4985] ldm_validate_partition_table(): Disk read failed. [ 176.577616][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.577649][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.577671][ T4985] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.577694][ T4985] Dev loop7: unable to read RDB block 0 [ 176.634316][ T4985] loop7: unable to read partition table [ 176.634411][ T4985] loop7: partition table beyond EOD, truncated [ 177.852358][ T6631] Invalid ELF header magic: != ELF [ 180.535159][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 180.535170][ T30] audit: type=1400 audit(1792939144.871:529): avc: denied { write } for pid=6643 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.568549][ T30] audit: type=1400 audit(1792939144.911:530): avc: denied { remove_name } for pid=6643 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.624887][ T30] audit: type=1400 audit(1792939144.961:531): avc: denied { unlink } for pid=6643 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 180.681750][ T30] audit: type=1400 audit(1792939145.021:532): avc: denied { shutdown } for pid=6642 comm="syz.3.164" laddr=::ac14:14aa lport=54752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.684044][ T30] audit: type=1400 audit(1792939145.021:533): avc: denied { read write } for pid=6648 comm="syz.4.165" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.684080][ T30] audit: type=1400 audit(1792939145.021:534): avc: denied { open } for pid=6648 comm="syz.4.165" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.767633][ T30] audit: type=1400 audit(1792939145.101:535): avc: denied { read } for pid=6642 comm="syz.3.164" laddr=::ac14:14aa lport=54752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.832449][ T30] audit: type=1400 audit(1792939145.171:536): avc: denied { read write } for pid=6642 comm="syz.3.164" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.855610][ T30] audit: type=1400 audit(1792939145.171:537): avc: denied { open } for pid=6642 comm="syz.3.164" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.931550][ T30] audit: type=1400 audit(1792939145.271:538): avc: denied { write } for pid=6653 comm="syz.2.167" name="ipv6_route" dev="proc" ino=4026532991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.243884][ T6667] warning: `syz.0.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.318982][ T5719] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.492806][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 181.502995][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.503039][ T5719] usb 4-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 181.504112][ T5719] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.504145][ T5719] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 181.534545][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.534564][ T5719] usb 4-1: Product: syz [ 181.534575][ T5719] usb 4-1: Manufacturer: syz [ 181.534587][ T5719] usb 4-1: SerialNumber: syz [ 182.725295][ T5719] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 182.740370][ T5719] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.440099][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.564275][ T5719] usb 4-1: USB disconnect, device number 4 [ 184.649504][ T6688] netlink: 830 bytes leftover after parsing attributes in process `syz.0.171'. [ 185.876487][ T6689] pimreg: entered allmulticast mode [ 186.498158][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.085043][ T6665] udevd[6665]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.030931][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 188.030950][ T30] audit: type=1400 audit(1792939152.371:554): avc: denied { ioctl } for pid=6700 comm="syz.0.177" path="socket:[11151]" dev="sockfs" ino=11151 ioctlcmd=0x4004f50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.846882][ T30] audit: type=1400 audit(1792939152.881:555): avc: denied { read } for pid=6710 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.847031][ T30] audit: type=1400 audit(1792939152.881:556): avc: denied { write } for pid=6710 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.045626][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.045669][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.724824][ T6695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.808333][ T30] audit: type=1400 audit(1792939154.151:557): avc: denied { setopt } for pid=6719 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.005947][ T30] audit: type=1400 audit(1792939154.341:558): avc: denied { execute } for pid=6721 comm="syz.0.182" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.286002][ T30] audit: type=1400 audit(1792939157.281:559): avc: denied { read } for pid=6735 comm="syz.0.183" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.286047][ T30] audit: type=1400 audit(1792939157.281:560): avc: denied { open } for pid=6735 comm="syz.0.183" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.286084][ T30] audit: type=1400 audit(1792939157.301:561): avc: denied { ioctl } for pid=6735 comm="syz.0.183" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.457158][ T30] audit: type=1400 audit(1792939158.791:562): avc: denied { read append } for pid=6745 comm="syz.2.188" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.481927][ T30] audit: type=1400 audit(1792939158.831:563): avc: denied { open } for pid=6745 comm="syz.2.188" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.607973][ T30] audit: type=1400 audit(1792939158.951:564): avc: denied { bind } for pid=6746 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.629703][ T30] audit: type=1400 audit(1792939158.971:565): avc: denied { setopt } for pid=6746 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.651224][ T6747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.662829][ T6747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.674237][ T6747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.682658][ T30] audit: type=1400 audit(1792939159.031:566): avc: denied { bind } for pid=6746 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.715397][ T6747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.715538][ T6747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.046803][ T30] audit: type=1400 audit(1792939159.381:567): avc: denied { create } for pid=6745 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 196.306495][ T6756] pimreg: entered allmulticast mode [ 196.557827][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.654490][ T151] rpcbind: server 127.0.0.1 not responding, timed out [ 196.717773][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.717806][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.913823][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.913846][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.556902][ T30] audit: type=1326 audit(1792939161.561:568): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.1.199" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6791d9f559 code=0x0 [ 198.903103][ T6778] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 199.042464][ T30] audit: type=1400 audit(1792939163.221:569): avc: denied { create } for pid=6768 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.042660][ T30] audit: type=1400 audit(1792939163.231:570): avc: denied { write } for pid=6768 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.591574][ T6796] netlink: 128 bytes leftover after parsing attributes in process `syz.0.193'. [ 200.593728][ T30] audit: type=1400 audit(1792939164.911:571): avc: denied { append } for pid=6783 comm="syz.0.193" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.319106][ T6804] ip_tables: iptables: counters copy to user failed while replacing table [ 201.983772][ T6799] block nbd3: not configured, cannot reconfigure [ 202.761299][ T30] audit: type=1400 audit(1792939167.101:572): avc: denied { create } for pid=6780 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 202.913214][ T30] audit: type=1400 audit(1792939167.251:573): avc: denied { write } for pid=6815 comm="syz.4.200" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.988234][ T30] audit: type=1400 audit(1792939167.331:574): avc: denied { setopt } for pid=6780 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.881850][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 203.884965][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 204.834184][ T30] audit: type=1400 audit(1792939168.741:575): avc: denied { setopt } for pid=6822 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.834324][ T6821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.834338][ T6821] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 205.197743][ C1] ------------[ cut here ]------------ [ 205.197755][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 205.197777][ C1] WARNING: kernel/workqueue.c:2436 at __queue_work+0xe18/0x16f0, CPU#1: syz.2.212/6827 [ 205.219450][ C1] Modules linked in: [ 205.223316][ C1] CPU: 1 UID: 0 PID: 6827 Comm: syz.2.212 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 205.234129][ C1] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 205.239898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.249921][ C1] RIP: 0010:__queue_work+0xe1c/0x16f0 [ 205.255266][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d 88 d2 99 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 205.274842][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010046 [ 205.280876][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100e7d694e [ 205.288831][ C1] RDX: ffff888036c4d178 RSI: ffffffff8ad72790 RDI: ffffffff926c1c60 [ 205.296771][ C1] RBP: ffff888073eb4a58 R08: 0000000000000007 R09: 0000000000000000 [ 205.304709][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff888036c4d000 [ 205.312649][ C1] R13: 0000000000000000 R14: 1ffff9200014118e R15: ffffffff81d252c0 [ 205.320589][ C1] FS: 00007f8a985306c0(0000) GS:ffff8881225ac000(0000) knlGS:0000000000000000 [ 205.329489][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.336043][ C1] CR2: 0000200000006000 CR3: 0000000076d22000 CR4: 00000000003526f0 [ 205.343986][ C1] Call Trace: [ 205.347245][ C1] [ 205.350069][ C1] ? lock_acquire+0x1d1/0x380 [ 205.354752][ C1] ? call_timer_fn+0x11d/0x5f0 [ 205.359489][ C1] ? __pfx___queue_work+0x10/0x10 [ 205.364482][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 205.370089][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 205.375862][ C1] call_timer_fn+0x198/0x5f0 [ 205.380427][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 205.385521][ C1] ? __run_timers+0x560/0xb00 [ 205.390168][ C1] ? __run_timers+0x560/0xb00 [ 205.394819][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 205.400591][ C1] __run_timers+0x570/0xb00 [ 205.405070][ C1] ? __pfx___run_timers+0x10/0x10 [ 205.410069][ C1] ? lock_acquire+0x1d1/0x380 [ 205.414719][ C1] ? ktime_get+0x9f/0x320 [ 205.419020][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 205.424020][ C1] run_timer_base+0x114/0x190 [ 205.428670][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 205.433843][ C1] run_timer_softirq+0x1a/0x50 [ 205.438579][ C1] handle_softirqs+0x216/0xa20 [ 205.443313][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 205.448566][ C1] ? _raw_spin_unlock+0x28/0x50 [ 205.453387][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 205.459001][ C1] __irq_exit_rcu+0x178/0x220 [ 205.463649][ C1] irq_exit_rcu+0x9/0x30 [ 205.467872][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 205.473480][ C1] [ 205.476381][ C1] [ 205.479286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.485234][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 205.491010][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 4a f6 fe f5 48 89 df e8 d2 4c ff f5 e8 fd 44 2c f6 fb bf 01 00 00 00 d2 12 ee f5 65 48 83 3d d1 11 cd 09 00 74 06 5b e9 01 4d 00 00 [ 205.510589][ C1] RSP: 0018:ffffc90003417b18 EFLAGS: 00000202 [ 205.516624][ C1] RAX: 000000000009a15d RBX: ffff888035d08938 RCX: 0000000000000000 [ 205.524564][ C1] RDX: 0000000000000001 RSI: ffffffff8e61b3d9 RDI: 0000000000000001 [ 205.532503][ C1] RBP: ffff888027b90000 R08: 0000000000000001 R09: 0000000000000000 [ 205.540442][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 205.548382][ C1] R13: 0000000000000000 R14: 0000000000008e9c R15: 0000200000006564 [ 205.556332][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.561502][ C1] snd_rawmidi_write+0x2cb/0xd00 [ 205.566418][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 205.571860][ C1] ? selinux_file_permission+0x30/0x6a0 [ 205.577385][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 205.583162][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 205.588504][ C1] ? security_file_permission+0x76/0x210 [ 205.594104][ C1] ? rw_verify_area+0xce/0x6d0 [ 205.598838][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 205.604268][ C1] vfs_writev+0x5ed/0xdd0 [ 205.608570][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 205.613392][ C1] ? lock_acquire+0x1d1/0x380 [ 205.618038][ C1] ? __fget_files+0x34/0x3d0 [ 205.622606][ C1] ? __fget_files+0x21f/0x3d0 [ 205.627258][ C1] ? do_writev+0x28a/0x340 [ 205.631641][ C1] do_writev+0x28a/0x340 [ 205.635855][ C1] ? __pfx_do_writev+0x10/0x10 [ 205.640594][ C1] do_syscall_64+0x123/0x790 [ 205.645159][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.651020][ C1] RIP: 0033:0x7f8a9759f559 [ 205.655406][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.674984][ C1] RSP: 002b:00007f8a98530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 205.683366][ C1] RAX: ffffffffffffffda RBX: 00007f8a97825fa0 RCX: 00007f8a9759f559 [ 205.691306][ C1] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000005 [ 205.699246][ C1] RBP: 00007f8a97636b20 R08: 0000000000000000 R09: 0000000000000000 [ 205.707196][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.715134][ C1] R13: 00007f8a97826038 R14: 00007f8a97825fa0 R15: 00007ffc9c9a0ec8 [ 205.723081][ C1] [ 205.726074][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.733333][ C1] CPU: 1 UID: 0 PID: 6827 Comm: syz.2.212 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 205.744147][ C1] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 205.749916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.759947][ C1] Call Trace: [ 205.763209][ C1] [ 205.766025][ C1] dump_stack_lvl+0x100/0x190 [ 205.770681][ C1] vpanic+0x553/0x970 [ 205.774632][ C1] ? __pfx_vpanic+0x10/0x10 [ 205.779108][ C1] panic+0xd1/0xe0 [ 205.782810][ C1] ? __pfx_panic+0x10/0x10 [ 205.787199][ C1] check_panic_on_warn.cold+0x19/0x34 [ 205.792540][ C1] ? __queue_work+0xe18/0x16f0 [ 205.797271][ C1] __warn.cold+0x191/0x318 [ 205.801668][ C1] __report_bug+0x30f/0x440 [ 205.806147][ C1] ? __queue_work+0xe18/0x16f0 [ 205.810878][ C1] ? __pfx___report_bug+0x10/0x10 [ 205.815882][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 205.821142][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 205.826052][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 205.831834][ C1] report_bug_entry+0xe2/0x290 [ 205.836571][ C1] ? __queue_work+0xe1c/0x16f0 [ 205.841302][ C1] handle_bug+0x1cd/0x2a0 [ 205.845605][ C1] exc_invalid_op+0x17/0x50 [ 205.850082][ C1] asm_exc_invalid_op+0x1a/0x20 [ 205.854901][ C1] RIP: 0010:__queue_work+0xe1c/0x16f0 [ 205.860240][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d 88 d2 99 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 205.879827][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010046 [ 205.885863][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100e7d694e [ 205.893806][ C1] RDX: ffff888036c4d178 RSI: ffffffff8ad72790 RDI: ffffffff926c1c60 [ 205.901748][ C1] RBP: ffff888073eb4a58 R08: 0000000000000007 R09: 0000000000000000 [ 205.909687][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff888036c4d000 [ 205.917627][ C1] R13: 0000000000000000 R14: 1ffff9200014118e R15: ffffffff81d252c0 [ 205.925567][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 205.931347][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 205.936606][ C1] ? __queue_work+0xdea/0x16f0 [ 205.941338][ C1] ? lock_acquire+0x1d1/0x380 [ 205.945996][ C1] ? call_timer_fn+0x11d/0x5f0 [ 205.950732][ C1] ? __pfx___queue_work+0x10/0x10 [ 205.955726][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 205.961335][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 205.967109][ C1] call_timer_fn+0x198/0x5f0 [ 205.971675][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 205.976760][ C1] ? __run_timers+0x560/0xb00 [ 205.981407][ C1] ? __run_timers+0x560/0xb00 [ 205.986058][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 205.991830][ C1] __run_timers+0x570/0xb00 [ 205.996310][ C1] ? __pfx___run_timers+0x10/0x10 [ 206.001308][ C1] ? lock_acquire+0x1d1/0x380 [ 206.005958][ C1] ? ktime_get+0x9f/0x320 [ 206.010261][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 206.015258][ C1] run_timer_base+0x114/0x190 [ 206.019910][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 206.025081][ C1] run_timer_softirq+0x1a/0x50 [ 206.029817][ C1] handle_softirqs+0x216/0xa20 [ 206.034555][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 206.039809][ C1] ? _raw_spin_unlock+0x28/0x50 [ 206.044642][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 206.050248][ C1] __irq_exit_rcu+0x178/0x220 [ 206.054894][ C1] irq_exit_rcu+0x9/0x30 [ 206.059104][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 206.064709][ C1] [ 206.067612][ C1] [ 206.070516][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.076466][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 206.082241][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 4a f6 fe f5 48 89 df e8 d2 4c ff f5 e8 fd 44 2c f6 fb bf 01 00 00 00 d2 12 ee f5 65 48 83 3d d1 11 cd 09 00 74 06 5b e9 01 4d 00 00 [ 206.101818][ C1] RSP: 0018:ffffc90003417b18 EFLAGS: 00000202 [ 206.107855][ C1] RAX: 000000000009a15d RBX: ffff888035d08938 RCX: 0000000000000000 [ 206.115800][ C1] RDX: 0000000000000001 RSI: ffffffff8e61b3d9 RDI: 0000000000000001 [ 206.123740][ C1] RBP: ffff888027b90000 R08: 0000000000000001 R09: 0000000000000000 [ 206.131679][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 206.139630][ C1] R13: 0000000000000000 R14: 0000000000008e9c R15: 0000200000006564 [ 206.147576][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.152745][ C1] snd_rawmidi_write+0x2cb/0xd00 [ 206.157666][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 206.163098][ C1] ? selinux_file_permission+0x30/0x6a0 [ 206.168624][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 206.174405][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 206.179761][ C1] ? security_file_permission+0x76/0x210 [ 206.185362][ C1] ? rw_verify_area+0xce/0x6d0 [ 206.190096][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 206.195538][ C1] vfs_writev+0x5ed/0xdd0 [ 206.199842][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 206.204675][ C1] ? lock_acquire+0x1d1/0x380 [ 206.209321][ C1] ? __fget_files+0x34/0x3d0 [ 206.213891][ C1] ? __fget_files+0x21f/0x3d0 [ 206.218554][ C1] ? do_writev+0x28a/0x340 [ 206.222942][ C1] do_writev+0x28a/0x340 [ 206.227164][ C1] ? __pfx_do_writev+0x10/0x10 [ 206.231910][ C1] do_syscall_64+0x123/0x790 [ 206.236474][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.242339][ C1] RIP: 0033:0x7f8a9759f559 [ 206.246722][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.266297][ C1] RSP: 002b:00007f8a98530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 206.274680][ C1] RAX: ffffffffffffffda RBX: 00007f8a97825fa0 RCX: 00007f8a9759f559 [ 206.282622][ C1] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000005 [ 206.290562][ C1] RBP: 00007f8a97636b20 R08: 0000000000000000 R09: 0000000000000000 [ 206.298501][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.306440][ C1] R13: 00007f8a97826038 R14: 00007f8a97825fa0 R15: 00007ffc9c9a0ec8 [ 206.314386][ C1] [ 206.317581][ C1] Kernel Offset: disabled [ 206.321881][ C1] Rebooting in 86400 seconds..