last executing test programs: 28.099195302s ago: executing program 2 (id=6): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2c]}) 27.725358602s ago: executing program 3 (id=4): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x26}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x345000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000030000000000"], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x0, 0x20, 0x10000000fffff}, 0x2f) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sched_kthread_stop_ret\x00', r5}, 0x10) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f00000003c0)=ANY=[@ANYBLOB="634782cbc224c4bcb4e10526c246eea0d2fb85c3b6a2e9041d0f93eac3ea280b48cecdfb00d5f908fa8edc7fe282b6e6d304000000ce9200d4dac455141bf0ee0ffa6a1427e7ea3d9864264f759aadfe9e850a268e9d542df1c407e9a28c8b41790ca7b60100008000000000ae010d9b86a836c184c0b31d61ac66a4258d4c76938cedbd0c1c6df1a7a5ef00000000000000000000000000a4702872c8b4857588573befa9fa3a80d732525a7699a8679d0b17fd918c903929fbdb54d3b426b8e0603cd757a228fb4de64c9e2485cc95526864a98d2eab9ba71ab60425a807973d3a585ccf30d1c8774939dddaae979d85"], 0x9, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.885217432s ago: executing program 2 (id=8): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) listen(r0, 0x1ff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000000c0)="19", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 26.388666414s ago: executing program 1 (id=2): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002040), 0x143002, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x4) io_uring_setup(0x1c1c, &(0x7f0000000040)={0x0, 0x43, 0x41, 0x3, 0xfffffff7}) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) socket$inet6(0xa, 0x80000, 0x401) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x3, &(0x7f0000000080)='nr0\x00'}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x338}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000000c0)={0x9, 0x1}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) socket$nl_route(0x10, 0x3, 0x0) 25.217867591s ago: executing program 4 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000040), &(0x7f0000000340), 0x1001, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0) io_setup(0xff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x960010, 0x0, 0x0, 0x0, r6, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2}]) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) 25.156565736s ago: executing program 2 (id=10): socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) fanotify_init(0x0, 0x101000) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffd], [0x0, 0xffffffff]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b400000000008000a40000000000900010073797a3000000000140000001100010000000000000000000000004a"], 0xa4}}, 0x0) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000b40)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9ed5"]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000006580)={0x2020}, 0x2020) 23.263246156s ago: executing program 2 (id=11): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000a40)=ANY=[@ANYBLOB='8\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x738}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 22.907319962s ago: executing program 0 (id=12): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000400)="f7624a800e6dc300a7c8af1073f7f80565d85cb0e73f45f4f3d53666f000784332e6113ff3e3a0d49c7ea76f4a31561cf1828eae6bec281c2a70ddd7a2", 0x3d}]) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 22.792182952s ago: executing program 2 (id=13): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f20c0350d000000440f22c0c4e27d0f78780fb7da160af2260f001e0f21480f0013660f38804700b9150b00000f32c4a38144df6f", 0x36}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.5937577s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4003}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 22.543407311s ago: executing program 3 (id=15): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000400)="f7624a800e6dc300a7c8af1073f7f80565d85cb0e73f45f4f3d53666f000784332e6113ff3e3a0d49c7ea76f4a31561cf1828eae6bec281c2a70ddd7a2", 0x3d}]) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 22.286729382s ago: executing program 0 (id=16): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) listen(r0, 0x1ff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000000c0)="19", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 20.462207137s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) ioperm(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) 20.426677815s ago: executing program 3 (id=18): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) 19.082869305s ago: executing program 0 (id=19): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002040), 0x143002, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x4) io_uring_setup(0x1c1c, &(0x7f0000000040)={0x0, 0x43, 0x41, 0x3, 0xfffffff7}) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) socket$inet6(0xa, 0x80000, 0x401) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x3, &(0x7f0000000080)='nr0\x00'}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x338}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000000c0)={0x9, 0x1}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19.000689392s ago: executing program 4 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r0 = epoll_create1(0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 18.819254968s ago: executing program 1 (id=21): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x24, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x9, 0x200, 0xffffffffffffffff, 0x4}, 0x48) mmap(&(0x7f0000f4e000/0x4000)=nil, 0x4000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000300), 0xfeb9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(&(0x7f0000000200)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='ext3\x00', 0x4220800, 0x0) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x20000080) madvise(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x16) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000f32000/0x2000)=nil, 0x2000, 0x14000, 0x3, &(0x7f0000abb000/0x14000)=nil) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xb1, &(0x7f000000cf3d)=""/177, 0x0, 0x0, '\x00', 0x0, 0x15, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) munlockall() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 18.739771912s ago: executing program 3 (id=22): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000b40)) r5 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x52e, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) 17.898850518s ago: executing program 2 (id=23): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000040), &(0x7f0000000340), 0x1001, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) io_submit(0x0, 0x7, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x960010, 0x0, 0x0, 0x0, r7, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127afce74b41c9ef761c96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xffffff15, 0x0, 0x0, 0x2}]) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) 12.815398924s ago: executing program 4 (id=24): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de201020301090212000100000000090400"], 0x0) socket(0x0, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x101, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "12c70076"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.338550701s ago: executing program 0 (id=25): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0x4f, 0x7f, 0x40, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0xa1, 0xc0, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10, 0x200) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffff7) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b11, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000205"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xfff, 0x80) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x7, 0x14, 0xff, 0x1, "1c8b16025be68627b7c1469e562dfae7372334194cb2e80128435bd908c26044"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b16, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0xa8, 0x9d, 0x6d, 0x20, 0x5ac, 0x231, 0x80fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xf5, 0x2}}]}}]}}, 0x0) 9.666088629s ago: executing program 4 (id=26): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) 1.839108372s ago: executing program 4 (id=30): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = dup2(r0, r0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa33, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) socket(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x7fb1}) r3 = socket(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffff9ffff000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e000000000000558d7a2006c2257800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4f500000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000040f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000080000001567cc0fb18ebd10677f000000000000000000000000b038562daba737bd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce113362da06e0fa83f39b50390000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d659920000000000e5c7ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002292091a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000df0000ecffffff0000000000000000000000000000000010be099dac2faa3c6cb226eccfecd2030000726564697265637400"/2367]}, 0x9b7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x3, 0x7, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.838748282s ago: executing program 0 (id=31): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x8, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$kcm(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000b40)) io_uring_enter(0xffffffffffffffff, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x52e, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x100, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 0s ago: executing program 4 (id=32): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x47, 0x76, 0xb8, 0x8, 0x979, 0x270, 0xa817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xb6, 0x2a}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b0000000000010902240001000000000904000001030000000921000000012205000905810398"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d300000000000000500040020000000050003"], 0x3c}}, 0x0) fsopen(&(0x7f0000000440)='msdos\x00', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0x0, 0x4, 0xff, 0x32}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x408}}, {0x27, &(0x7f0000000280)=@string={0x27, 0x3, "9c9652ecd9e99484c32672b905528b0d4d71ef22e9bb340a05aa7a0667b0cb41a3c13a1969"}}, {0x0, 0x0}, {0x28, &(0x7f0000000340)=@string={0x28, 0x3, "0116f3f0a4fb28b5b88a25f262b4ff4d3057b29f6ceb709d62d38a1ec6eba225ac5e28ccbb02"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}]}) kernel console output (not intermixed with test programs): [ 61.731990][ T29] audit: type=1400 audit(1722654514.947:78): avc: denied { transition } for pid=5067 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.761112][ T29] audit: type=1400 audit(1722654514.947:79): avc: denied { noatsecure } for pid=5067 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.780527][ T29] audit: type=1400 audit(1722654514.967:80): avc: denied { write } for pid=5067 comm="sh" path="pipe:[4283]" dev="pipefs" ino=4283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 61.807223][ T29] audit: type=1400 audit(1722654514.967:81): avc: denied { rlimitinh } for pid=5067 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.826242][ T29] audit: type=1400 audit(1722654514.967:82): avc: denied { siginh } for pid=5067 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.846331][ T29] audit: type=1400 audit(1722654515.027:83): avc: denied { read } for pid=4652 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.303476][ T29] audit: type=1400 audit(1722654515.517:84): avc: denied { write } for pid=5070 comm="sftp-server" path="pipe:[3402]" dev="pipefs" ino=3402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 63.128912][ T29] audit: type=1400 audit(1722654516.347:85): avc: denied { append } for pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.174296][ T29] audit: type=1400 audit(1722654516.347:86): avc: denied { open } for pid=4652 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.224276][ T29] audit: type=1400 audit(1722654516.347:87): avc: denied { getattr } for pid=4652 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 74.077224][ T29] audit: type=1400 audit(1722654527.297:88): avc: denied { mounton } for pid=5205 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 74.085531][ T5205] cgroup: Unknown subsys name 'net' [ 74.100024][ T29] audit: type=1400 audit(1722654527.297:89): avc: denied { mount } for pid=5205 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.127371][ T29] audit: type=1400 audit(1722654527.327:90): avc: denied { unmount } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.293956][ T5205] cgroup: Unknown subsys name 'rlimit' [ 74.471354][ T29] audit: type=1400 audit(1722654527.687:91): avc: denied { setattr } for pid=5205 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.494729][ T29] audit: type=1400 audit(1722654527.687:92): avc: denied { create } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.534287][ T29] audit: type=1400 audit(1722654527.687:93): avc: denied { write } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.556217][ T29] audit: type=1400 audit(1722654527.687:94): avc: denied { read } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.577771][ T29] audit: type=1400 audit(1722654527.717:95): avc: denied { mounton } for pid=5205 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 74.602703][ T29] audit: type=1400 audit(1722654527.717:96): avc: denied { mount } for pid=5205 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 74.626161][ T29] audit: type=1400 audit(1722654527.737:97): avc: denied { read } for pid=4884 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 74.632496][ T5208] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 75.989918][ T5205] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.396389][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.414908][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.423193][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.435194][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.443224][ T5218] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.451218][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.534675][ T4608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.544882][ T4608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.552834][ T4608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.560293][ T4608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.574349][ T4608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.585570][ T5223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.594606][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.604512][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.613799][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.621874][ T5223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.629841][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.664105][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.670676][ T5223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.679060][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.679415][ T5223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.698393][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.706497][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.714311][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.766406][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.780777][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.790955][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.805759][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.816907][ T5218] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.824501][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.374690][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 79.374708][ T29] audit: type=1400 audit(1722654532.597:112): avc: denied { module_request } for pid=5220 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.552537][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 79.573006][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 79.609183][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 79.653272][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 79.728812][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 79.921318][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.928625][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.936826][ T5215] bridge_slave_0: entered allmulticast mode [ 79.943858][ T5215] bridge_slave_0: entered promiscuous mode [ 79.977748][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.984956][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.992516][ T5220] bridge_slave_0: entered allmulticast mode [ 80.000448][ T5220] bridge_slave_0: entered promiscuous mode [ 80.008483][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.015922][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.023054][ T5215] bridge_slave_1: entered allmulticast mode [ 80.030696][ T5215] bridge_slave_1: entered promiscuous mode [ 80.070217][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.077456][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.085280][ T5220] bridge_slave_1: entered allmulticast mode [ 80.092208][ T5220] bridge_slave_1: entered promiscuous mode [ 80.133348][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.141420][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.148637][ T5222] bridge_slave_0: entered allmulticast mode [ 80.156539][ T5222] bridge_slave_0: entered promiscuous mode [ 80.179760][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.187147][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.194426][ T5226] bridge_slave_0: entered allmulticast mode [ 80.201361][ T5226] bridge_slave_0: entered promiscuous mode [ 80.254426][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.262481][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.270195][ T5222] bridge_slave_1: entered allmulticast mode [ 80.277694][ T5222] bridge_slave_1: entered promiscuous mode [ 80.297296][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.305428][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.312698][ T5226] bridge_slave_1: entered allmulticast mode [ 80.322971][ T5226] bridge_slave_1: entered promiscuous mode [ 80.333812][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.347293][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.360905][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.384133][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.391316][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.398541][ T5230] bridge_slave_0: entered allmulticast mode [ 80.406797][ T5230] bridge_slave_0: entered promiscuous mode [ 80.444150][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.469705][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.477007][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.485184][ T5230] bridge_slave_1: entered allmulticast mode [ 80.492109][ T5230] bridge_slave_1: entered promiscuous mode [ 80.502272][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.516144][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.525130][ T4608] Bluetooth: hci0: command tx timeout [ 80.616070][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.629441][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.641819][ T5220] team0: Port device team_slave_0 added [ 80.653756][ T5215] team0: Port device team_slave_0 added [ 80.694898][ T5222] team0: Port device team_slave_0 added [ 80.718067][ T5220] team0: Port device team_slave_1 added [ 80.727357][ T5215] team0: Port device team_slave_1 added [ 80.736149][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.749367][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.761166][ T5222] team0: Port device team_slave_1 added [ 80.764381][ T4608] Bluetooth: hci3: command tx timeout [ 80.772371][ T4608] Bluetooth: hci1: command tx timeout [ 80.774303][ T5218] Bluetooth: hci2: command tx timeout [ 80.858465][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.865462][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.891720][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.911140][ T5226] team0: Port device team_slave_0 added [ 80.924857][ T5218] Bluetooth: hci4: command tx timeout [ 80.933891][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.941234][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.967239][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.006872][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.013829][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.039962][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.061581][ T5226] team0: Port device team_slave_1 added [ 81.085551][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.092491][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.118398][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.130603][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.140933][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.167370][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.182138][ T5230] team0: Port device team_slave_0 added [ 81.192805][ T5230] team0: Port device team_slave_1 added [ 81.221784][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.228900][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.255201][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.300901][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.307931][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.334300][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.348303][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.355783][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.382127][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.413606][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.420615][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.446533][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.532169][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.539180][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.566334][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.598558][ T5220] hsr_slave_0: entered promiscuous mode [ 81.606005][ T5220] hsr_slave_1: entered promiscuous mode [ 81.635595][ T5215] hsr_slave_0: entered promiscuous mode [ 81.642240][ T5215] hsr_slave_1: entered promiscuous mode [ 81.649029][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.656928][ T5215] Cannot create hsr debugfs directory [ 81.666759][ T5222] hsr_slave_0: entered promiscuous mode [ 81.673883][ T5222] hsr_slave_1: entered promiscuous mode [ 81.680523][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.688192][ T5222] Cannot create hsr debugfs directory [ 81.795587][ T5226] hsr_slave_0: entered promiscuous mode [ 81.802144][ T5226] hsr_slave_1: entered promiscuous mode [ 81.813245][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.820879][ T5226] Cannot create hsr debugfs directory [ 81.896305][ T5230] hsr_slave_0: entered promiscuous mode [ 81.902615][ T5230] hsr_slave_1: entered promiscuous mode [ 81.912259][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.919872][ T5230] Cannot create hsr debugfs directory [ 82.604497][ T5218] Bluetooth: hci0: command tx timeout [ 82.680186][ T5220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.710173][ T5220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.736279][ T5220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.755399][ T5220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.854598][ T5218] Bluetooth: hci2: command tx timeout [ 82.858106][ T4608] Bluetooth: hci1: command tx timeout [ 82.860047][ T5218] Bluetooth: hci3: command tx timeout [ 82.877353][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.896004][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.909039][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.939237][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.005268][ T5218] Bluetooth: hci4: command tx timeout [ 83.060385][ T5222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.073302][ T5222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.092797][ T5222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.128922][ T5222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.240082][ T5215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.252663][ T5215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.287913][ T5215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.298783][ T5215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.429508][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.470180][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.479393][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.492159][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.523360][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.549676][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.581768][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.669492][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.676990][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.697111][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.704273][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.717431][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.756088][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.763260][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.810634][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.822804][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.830090][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.011078][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.045818][ T29] audit: type=1400 audit(1722654537.257:113): avc: denied { sys_module } for pid=5230 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.127405][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.134622][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.193721][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.200956][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.223817][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.360820][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.382728][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.409734][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.458202][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.465535][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.481073][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.488214][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.580003][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.595533][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.636647][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.643844][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.686544][ T5218] Bluetooth: hci0: command tx timeout [ 84.738182][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.745418][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.926146][ T5218] Bluetooth: hci3: command tx timeout [ 84.931601][ T5218] Bluetooth: hci1: command tx timeout [ 84.938045][ T4608] Bluetooth: hci2: command tx timeout [ 84.938954][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.026830][ T5230] veth0_vlan: entered promiscuous mode [ 85.092820][ T5218] Bluetooth: hci4: command tx timeout [ 85.101751][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.178840][ T5230] veth1_vlan: entered promiscuous mode [ 85.305983][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.398474][ T5220] veth0_vlan: entered promiscuous mode [ 85.418607][ T5222] veth0_vlan: entered promiscuous mode [ 85.429541][ T5230] veth0_macvtap: entered promiscuous mode [ 85.441788][ T5230] veth1_macvtap: entered promiscuous mode [ 85.469261][ T5220] veth1_vlan: entered promiscuous mode [ 85.510028][ T5222] veth1_vlan: entered promiscuous mode [ 85.523157][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.556808][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.593781][ T5215] veth0_vlan: entered promiscuous mode [ 85.619035][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.628736][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638122][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647617][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.670503][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.690745][ T5220] veth0_macvtap: entered promiscuous mode [ 85.707475][ T5215] veth1_vlan: entered promiscuous mode [ 85.751328][ T5220] veth1_macvtap: entered promiscuous mode [ 85.894054][ T5222] veth0_macvtap: entered promiscuous mode [ 85.910682][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.922419][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.935349][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.951076][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.959845][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.980602][ T5222] veth1_macvtap: entered promiscuous mode [ 86.033085][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.050420][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.062467][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.090544][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.101190][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.112704][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.123499][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.136623][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.150120][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.150882][ T5226] veth0_vlan: entered promiscuous mode [ 86.165763][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.176431][ T5215] veth0_macvtap: entered promiscuous mode [ 86.190135][ T5220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.199189][ T5220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.209076][ T5220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218179][ T5220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.247307][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.259269][ T29] audit: type=1400 audit(1722654539.477:114): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/root/syzkaller.amSXNQ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 86.284387][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.295360][ T29] audit: type=1400 audit(1722654539.477:115): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.300995][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.322870][ T29] audit: type=1400 audit(1722654539.477:116): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/root/syzkaller.amSXNQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.328863][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.360502][ T29] audit: type=1400 audit(1722654539.477:117): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.370801][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.400970][ T29] audit: type=1400 audit(1722654539.477:118): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.425105][ T29] audit: type=1400 audit(1722654539.607:119): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 86.427550][ T5215] veth1_macvtap: entered promiscuous mode [ 86.455094][ T29] audit: type=1400 audit(1722654539.617:120): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.487819][ T5226] veth1_vlan: entered promiscuous mode [ 86.548139][ T5222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.551031][ T29] audit: type=1400 audit(1722654539.767:121): avc: denied { read write } for pid=5230 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.581757][ T5222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.581826][ T5222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.581865][ T5222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.643366][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.664726][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.683246][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.697807][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.707810][ T29] audit: type=1400 audit(1722654539.817:122): avc: denied { open } for pid=5230 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.733352][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.744824][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.754741][ T29] audit: type=1400 audit(1722654539.817:123): avc: denied { ioctl } for pid=5230 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.782861][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.808743][ T5226] veth0_macvtap: entered promiscuous mode [ 86.821531][ T5226] veth1_macvtap: entered promiscuous mode [ 86.835937][ T5218] Bluetooth: hci0: command tx timeout [ 87.004875][ T5218] Bluetooth: hci1: command tx timeout [ 87.005165][ T5224] Bluetooth: hci2: command tx timeout [ 87.010288][ T5218] Bluetooth: hci3: command tx timeout [ 87.353305][ T5218] Bluetooth: hci4: command tx timeout [ 87.780507][ T941] cfg80211: failed to load regulatory.db [ 87.868422][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.880628][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.891196][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.909342][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.919646][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.931411][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.943262][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.955892][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.970345][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.006446][ T5215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016348][ T5215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.026217][ T5215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.034996][ T5215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132934][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.145682][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.158251][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.168802][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.178738][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.189333][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.201058][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.212006][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.223296][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.263351][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.282127][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.292664][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.310212][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.320130][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.330719][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.340676][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.351316][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.362637][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.387726][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.399444][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.441672][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.450975][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.460171][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.473315][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.514081][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.522016][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.618912][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.635635][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.773024][ T5308] loop0: detected capacity change from 0 to 7 [ 88.785168][ T5308] Dev loop0: unable to read RDB block 7 [ 88.796928][ T5308] loop0: unable to read partition table [ 88.802881][ T5308] loop0: partition table beyond EOD, truncated [ 88.838221][ T5308] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 88.838221][ T5308] ) failed (rc=-5) [ 88.906587][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.935344][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.199417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.214339][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.070367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.091486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.549446][ T5326] sctp: failed to load transform for md5: -2 [ 91.680866][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 91.680894][ T29] audit: type=1400 audit(1722654544.277:135): avc: denied { listen } for pid=5319 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.714205][ C1] sched: RT throttling activated [ 91.730230][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.801580][ T29] audit: type=1400 audit(1722654544.367:136): avc: denied { write } for pid=5319 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.821052][ T29] audit: type=1400 audit(1722654544.377:137): avc: denied { connect } for pid=5319 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.844697][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.937699][ T29] audit: type=1400 audit(1722654544.377:138): avc: denied { name_connect } for pid=5319 comm="syz.2.8" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.061927][ T29] audit: type=1400 audit(1722654545.107:139): avc: denied { create } for pid=5312 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.143702][ T29] audit: type=1400 audit(1722654545.117:140): avc: denied { read write } for pid=5333 comm="syz.1.2" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.174877][ T29] audit: type=1400 audit(1722654545.117:141): avc: denied { open } for pid=5333 comm="syz.1.2" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.228815][ T5340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.271283][ T29] audit: type=1400 audit(1722654545.137:142): avc: denied { setattr } for pid=5312 comm="syz.3.4" name="NETLINK" dev="sockfs" ino=6947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.386966][ T5341] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 92.445765][ T29] audit: type=1400 audit(1722654545.177:143): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/root/syzkaller.gt8k4l/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.496125][ T5341] PKCS7: Only support pkcs7_signedData type [ 92.572952][ T29] audit: type=1400 audit(1722654545.197:144): avc: denied { bind } for pid=5312 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.958965][ T5346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.248157][ T5341] fuse: Bad value for 'group_id' [ 93.256860][ T5341] fuse: Bad value for 'group_id' [ 93.725963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.751548][ T5351] loop0: detected capacity change from 0 to 7 [ 93.778525][ T5351] Dev loop0: unable to read RDB block 7 [ 93.796807][ T5351] loop0: unable to read partition table [ 93.818436][ T5351] loop0: partition table beyond EOD, truncated [ 93.837870][ T5351] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 93.837870][ T5351] ) failed (rc=-5) [ 94.314647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.324420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.334269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 96.277790][ T5370] sctp: failed to load transform for md5: -2 [ 96.504472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 96.924998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.005256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.126676][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 97.126693][ T29] audit: type=1400 audit(1722654550.347:176): avc: denied { create } for pid=5380 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.645325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.715031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.724330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.910394][ T29] audit: type=1400 audit(1722654550.347:177): avc: denied { ioctl } for pid=5380 comm="syz.3.18" path="socket:[7119]" dev="sockfs" ino=7119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.010459][ T29] audit: type=1400 audit(1722654551.107:178): avc: denied { bind } for pid=5380 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.225208][ T29] audit: type=1400 audit(1722654551.117:179): avc: denied { connect } for pid=5380 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.321454][ T29] audit: type=1400 audit(1722654551.127:180): avc: denied { write } for pid=5380 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.398082][ T29] audit: type=1400 audit(1722654551.357:181): avc: denied { write } for pid=5354 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.402698][ T5355] kvm: emulating exchange as write [ 98.501996][ T29] audit: type=1400 audit(1722654551.557:182): avc: denied { write } for pid=5386 comm="syz.4.20" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.612654][ T29] audit: type=1400 audit(1722654551.617:183): avc: denied { read } for pid=5386 comm="syz.4.20" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.691552][ T29] audit: type=1400 audit(1722654551.617:184): avc: denied { open } for pid=5386 comm="syz.4.20" path="/dev/ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.469908][ T29] audit: type=1400 audit(1722654552.657:185): avc: denied { map } for pid=5393 comm="syz.3.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.532664][ T29] audit: type=1400 audit(1722654552.657:186): avc: denied { read write } for pid=5393 comm="syz.3.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.582371][ T29] audit: type=1400 audit(1722654552.687:187): avc: denied { listen } for pid=5396 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.220740][ T29] audit: type=1400 audit(1722654557.437:188): avc: denied { ioctl } for pid=5401 comm="syz.4.24" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.554847][ T941] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.768192][ T941] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 104.794288][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.805654][ T941] usb 5-1: Product: syz [ 104.809842][ T941] usb 5-1: Manufacturer: syz [ 104.821394][ T941] usb 5-1: SerialNumber: syz [ 104.851197][ T941] r8152-cfgselector 5-1: Unknown version 0x0000 [ 104.863650][ T941] r8152-cfgselector 5-1: config 0 descriptor?? [ 106.984510][ T5269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.174459][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 107.187501][ T5269] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 107.198937][ T5269] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.224522][ T5269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.254885][ T5269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.288765][ T941] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 107.312733][ T5269] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.387219][ T5269] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.430184][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.572584][ T5406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.560849][ T5269] usb 1-1: usb_control_msg returned -110 [ 114.580894][ T5269] usbtmc 1-1:16.0: can't read capabilities [ 114.647094][ T5406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.038756][ T5269] usb 1-1: USB disconnect, device number 2 [ 115.420927][ T29] audit: type=1400 audit(1722654568.627:189): avc: denied { read } for pid=5420 comm="syz.0.31" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.674361][ T29] audit: type=1400 audit(1722654568.627:190): avc: denied { open } for pid=5420 comm="syz.0.31" path="/dev/input/event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.933682][ T29] audit: type=1400 audit(1722654568.667:191): avc: denied { create } for pid=5420 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.136431][ T29] audit: type=1400 audit(1722654568.677:192): avc: denied { write } for pid=5421 comm="syz.4.30" path="socket:[7579]" dev="sockfs" ino=7579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.323141][ T29] audit: type=1400 audit(1722654568.787:193): avc: denied { read } for pid=5421 comm="syz.4.30" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.554017][ T29] audit: type=1400 audit(1722654568.787:194): avc: denied { open } for pid=5421 comm="syz.4.30" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.326733][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.336641][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.344889][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.353693][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.362129][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 117.376672][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.444284][ T29] audit: type=1400 audit(1722654570.617:195): avc: denied { mounton } for pid=5429 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 117.542136][ T4608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.557187][ T4608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.566245][ T4608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.585359][ T4608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.595992][ T4608] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.606015][ T4608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.707821][ T29] audit: type=1326 audit(1722654570.877:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fab779f9 code=0x7ffc0000 [ 117.787912][ T5218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.797504][ T5218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.809447][ T5218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.819816][ T5218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.829536][ T5218] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 117.837458][ T5218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.953588][ T29] audit: type=1326 audit(1722654570.877:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fab779f9 code=0x7ffc0000 [ 118.001022][ T941] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.574379][ T4608] Bluetooth: hci5: command tx timeout [ 120.524283][ T941] usb 5-1: Using ep0 maxpacket: 8 [ 120.533748][ T4608] Bluetooth: hci4: command tx timeout [ 120.533784][ T5218] Bluetooth: hci6: command tx timeout [ 225.544233][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.551276][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P35/1:b..l [ 225.559334][ C1] rcu: (detected by 1, t=10502 jiffies, g=9705, q=741 ncpus=2) [ 225.566977][ C1] task:kworker/u8:2 state:R running task stack:24080 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 225.579348][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 225.587217][ C1] Call Trace: [ 225.590498][ C1] [ 225.593436][ C1] __schedule+0xe37/0x5490 [ 225.597870][ C1] ? __pfx_mark_lock+0x10/0x10 [ 225.602656][ C1] ? __pfx___schedule+0x10/0x10 [ 225.607518][ C1] ? hlock_class+0x4e/0x130 [ 225.612045][ C1] ? mark_held_locks+0x9f/0xe0 [ 225.616830][ C1] preempt_schedule_irq+0x51/0x90 [ 225.621872][ C1] irqentry_exit+0x36/0x90 [ 225.626303][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.632306][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 225.637611][ C1] Code: c1 05 5a 14 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 225.657237][ C1] RSP: 0018:ffffc90000ab7a70 EFLAGS: 00000206 [ 225.663313][ C1] RAX: dffffc0000000000 RBX: 1ffff92000156f50 RCX: 0000000000000001 [ 225.671293][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cc800 RDI: ffffffff8bb08400 [ 225.679270][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c56d8 [ 225.687248][ C1] R10: ffffffff9462b6c7 R11: 0000000000000000 R12: 0000000000000000 [ 225.695225][ C1] R13: 0000000000000000 R14: ffffffff8ddb53a0 R15: 0000000000000000 [ 225.703210][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 225.708257][ C1] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 225.714432][ C1] ? __pfx_lock_release+0x10/0x10 [ 225.719486][ C1] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 225.725404][ C1] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 225.731491][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 225.737838][ C1] ? batadv_send_skb_packet+0x56e/0x6b0 [ 225.743405][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 225.750450][ C1] process_one_work+0x9c5/0x1b40 [ 225.755408][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 225.762972][ C1] ? __pfx_process_one_work+0x10/0x10 [ 225.768365][ C1] ? assign_work+0x1a0/0x250 [ 225.772969][ C1] worker_thread+0x6c8/0xf20 [ 225.777580][ C1] ? __pfx_worker_thread+0x10/0x10 [ 225.782708][ C1] kthread+0x2c1/0x3a0 [ 225.786784][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.791996][ C1] ? __pfx_kthread+0x10/0x10 [ 225.796594][ C1] ret_from_fork+0x45/0x80 [ 225.801030][ C1] ? __pfx_kthread+0x10/0x10 [ 225.805632][ C1] ret_from_fork_asm+0x1a/0x30 [ 225.810424][ C1] [ 225.813455][ C1] rcu: rcu_preempt kthread starved for 10526 jiffies! g9705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 225.824573][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 225.834545][ C1] rcu: RCU grace-period kthread stack dump: [ 225.840431][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 225.852179][ C1] Call Trace: [ 225.855460][ C1] [ 225.858396][ C1] __schedule+0xe37/0x5490 [ 225.862825][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 225.868039][ C1] ? __pfx___schedule+0x10/0x10 [ 225.872902][ C1] ? schedule+0x298/0x350 [ 225.877333][ C1] ? __pfx_lock_release+0x10/0x10 [ 225.882371][ C1] ? __pfx___mod_timer+0x10/0x10 [ 225.887326][ C1] ? lock_acquire+0x1b1/0x560 [ 225.892023][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 225.897500][ C1] schedule+0xe7/0x350 [ 225.901579][ C1] schedule_timeout+0x136/0x2a0 [ 225.906452][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 225.911845][ C1] ? __pfx_process_timeout+0x10/0x10 [ 225.917141][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 225.922966][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 225.928449][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 225.933226][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 225.938524][ C1] ? rcu_gp_init+0xc82/0x1630 [ 225.943214][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 225.948426][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 225.954243][ C1] rcu_gp_kthread+0x271/0x380 [ 225.958928][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 225.964138][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.969347][ C1] ? __kthread_parkme+0x148/0x220 [ 225.974408][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 225.979618][ C1] kthread+0x2c1/0x3a0 [ 225.983694][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.988901][ C1] ? __pfx_kthread+0x10/0x10 [ 225.993501][ C1] ret_from_fork+0x45/0x80 [ 225.997937][ C1] ? __pfx_kthread+0x10/0x10 [ 226.002532][ C1] ret_from_fork_asm+0x1a/0x30 [ 226.007326][ C1] [ 226.010349][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 226.016686][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 226.027024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 226.037087][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 226.042498][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 f8 f8 f1 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d a8 0a aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 226.062143][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 226.068227][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b11c529 [ 226.076209][ C1] RDX: 0000000000000001 RSI: ffff88801a2b5800 RDI: ffff88801a2b5864 [ 226.084188][ C1] RBP: ffff88801a2b5864 R08: 0000000000000001 R09: ffffed1017266fd9 [ 226.092169][ C1] R10: ffff8880b9337ecb R11: 0000000000000000 R12: ffff88801a3ff800 [ 226.100149][ C1] R13: ffffffff8e94fea0 R14: 0000000000000001 R15: 0000000000000000 [ 226.108127][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 226.117069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.123663][ C1] CR2: 00007ff66a9f7fa8 CR3: 00000000223ba000 CR4: 00000000003506f0 [ 226.131736][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.139716][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.147697][ C1] Call Trace: [ 226.150983][ C1] [ 226.153832][ C1] ? show_regs+0x8c/0xa0 [ 226.158099][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 226.164441][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 226.169658][ C1] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 226.175133][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 226.180868][ C1] ? tmigr_requires_handle_remote+0x141/0x480 [ 226.186955][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 226.193391][ C1] ? hrtimer_run_queues+0x97/0x450 [ 226.198523][ C1] ? update_process_times+0x175/0x220 [ 226.203911][ C1] ? __pfx_update_process_times+0x10/0x10 [ 226.209645][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 226.215124][ C1] ? update_wall_time+0x1c/0x40 [ 226.219989][ C1] ? tick_nohz_handler+0x376/0x530 [ 226.225122][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 226.230605][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 226.236003][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 226.241742][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 226.247823][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 226.252955][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 226.259156][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 226.264975][ C1] [ 226.267912][ C1] [ 226.270847][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.277021][ C1] ? ct_kernel_exit+0x139/0x190 [ 226.281883][ C1] ? acpi_safe_halt+0x1a/0x20 [ 226.286580][ C1] acpi_idle_enter+0xc5/0x160 [ 226.291275][ C1] cpuidle_enter_state+0x85/0x500 [ 226.296317][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 226.302500][ C1] cpuidle_enter+0x4e/0xa0 [ 226.306931][ C1] do_idle+0x313/0x3f0 [ 226.311014][ C1] ? __pfx_do_idle+0x10/0x10 [ 226.315620][ C1] cpu_startup_entry+0x4f/0x60 [ 226.320411][ C1] start_secondary+0x220/0x2b0 [ 226.325206][ C1] ? __pfx_start_secondary+0x10/0x10 [ 226.330514][ C1] common_startup_64+0x13e/0x148 [ 226.335561][ C1]