last executing test programs: 22.693851894s ago: executing program 3 (id=158): r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fallocate(r1, 0x28, 0xfff, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) gettid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000180), 0x8000, 0x400001) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_gettime(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x24000010) 22.114371402s ago: executing program 3 (id=160): r0 = socket(0x23, 0x80000, 0xd9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x4, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baf80cb85fb9c78eef66bafc0cec66baf80cb8a42e4b81ef66bafc0cb802000000ef66bad10466edc461717dffb98c040000b8d7000000ba000000000f30b94a0300000f32662666400fd6a6dc380000400f32460f01cfc403b54442b4d2", 0x5f}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x60000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x3, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x2, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000452000/0x18000)=nil, 0x0, 0x0, 0x11, &(0x7f0000000280), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000100)=0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 17.078639626s ago: executing program 1 (id=167): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) r5 = syz_open_dev$rtc(0x0, 0x8, 0xc0100) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r6) ioctl$RTC_PLL_GET(r5, 0x80207011, &(0x7f00000000c0)) 14.809334261s ago: executing program 0 (id=172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0xc0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) 14.716493174s ago: executing program 2 (id=173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) r2 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$pagemap(r3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 13.857969674s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0x800, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f}}, 0x20) inotify_init1(0x800) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 12.288342231s ago: executing program 3 (id=177): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 12.181514923s ago: executing program 2 (id=178): r0 = socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2, @rand_addr, 0xed9f}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) creat(0x0, 0xa) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.112557604s ago: executing program 3 (id=179): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r5, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r6, &(0x7f0000000200), 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.879486048s ago: executing program 0 (id=180): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000140)={0x9, 0xfa53, 0x1c2778b5, 0x2d09}) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, 0x0, 0x10000) 9.873007373s ago: executing program 2 (id=181): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) geteuid() r0 = getpgrp(0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000002c0)={r0, 0x0, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) waitid(0x2, r3, 0x0, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) 8.173015026s ago: executing program 0 (id=182): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, 0x0) init_module(0x0, 0x2ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x15, 0x7, 0x7ffc0002}]}) r3 = epoll_create1(0x80000) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x4, 0x24, &(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/locks\x00', 0x0, 0x0) 8.096062712s ago: executing program 2 (id=183): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x208}}], 0x1, 0x0, 0x0) 8.093727199s ago: executing program 4 (id=184): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000090) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x40, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ptrace$getregset(0x4204, 0x0, 0x3, 0x0) r3 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x8) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0xab07, 0x1) getdents64(r6, 0x0, 0x0) 6.806399801s ago: executing program 4 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x2}, 0x1c) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000031c0)}}], 0x1, 0x102, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = socket$key(0xf, 0x3, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r3, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x182) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.501396179s ago: executing program 4 (id=186): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 6.001294281s ago: executing program 4 (id=187): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.393803249s ago: executing program 2 (id=188): r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x8001, 0x7, 0xeac, 0xe74, 0x2, 0xe82a, 0x6}, 0x1c) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff0007058102400000070582024000000705830240000007058402400000070585024000000705860240000007058702400000070501024000000705020240000007050302400000070504024000000705050240"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010027bd700402d4df250d000000", @ANYRES32=r3, @ANYBLOB="904e0600c16a010024001280110001006272696467655f736c617665000000000c0005800500040001000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x1020, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30010001", @ANYRES16=r8, @ANYBLOB="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"], 0x130}}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafc0c1100fe8000000000000000000000000000bb0000000000000000000000000000000080000e22000c907801020000"], 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r9 = fanotify_init(0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x2d33, 0x7}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r9, 0x101, 0x8000031, r10, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 4.040987522s ago: executing program 4 (id=189): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000200)=""/160, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 3.613485367s ago: executing program 0 (id=190): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) r1 = gettid() migrate_pages(r1, 0x3, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast2}, 0xc) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000"], 0x110) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 3.566336777s ago: executing program 1 (id=191): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, 0x0, 0x10000) 3.540763059s ago: executing program 1 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.48897028s ago: executing program 0 (id=193): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x8, 0x3, {{0xc, 0x4, 0x1, 0x14, 0x30, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x1e8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x47, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.444945297s ago: executing program 1 (id=194): mkdir(&(0x7f0000000000)='./sys\x00', 0xbf) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write(r0, &(0x7f0000001100)='0000:00:06.0', 0xc) 2.231197414s ago: executing program 4 (id=195): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x105043, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) close(r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r4 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r5, &(0x7f0000000800)="3102", 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)={0x20000000}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.161315006s ago: executing program 3 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x20004000) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4603100706000000000000000002003e00ff0100000e02000000000000f4e6546ea79e72cf8b000000000000000600"], 0x78) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 1.143061161s ago: executing program 0 (id=197): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 703.40872ms ago: executing program 1 (id=198): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getrlimit(0x3, &(0x7f00000000c0)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSMAXCID(r3, 0x80047458, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xa}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000008, 0x7, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 116.768541ms ago: executing program 2 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) clock_adjtime(0xffffffd1, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff7, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x40000000000009, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffd, 0x81, 0x8000000000000000, 0x6, 0x100000000, 0x5, 0x200000006, 0x4, 0x3, 0xa}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') write$sysctl(0xffffffffffffffff, &(0x7f0000000140)='7\x00', 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x4, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000280)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035529030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d323430564d333232313632365a180f3231323430333d303232313632365a303a3138303626035504030c3f43657274696669636174fd98036d9c5b036520766572696669636174696f6e20454344fa253856656c662d74657374696e67206b65793059301306072a8648ce41020106082a8648ce3d0301070342000407e5a5f133b57442836b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a9ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603451d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06084402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a9642195f991454236fcf4f674f356aee2925f24fc810149d79698f649fe846", 0x1d8, 0xffffffffffffffff) 0s ago: executing program 3 (id=200): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8, 0x9, 0x40000000010, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fff, 0x1, 0x0, 0xfffffffd, 0x7, 0x1000000000, 0x0, 0x2000000003, 0x0, 0x82a, 0x8000000, 0x81, 0x7, 0x0, 0x0, 0x5}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @random="6154565d36f0"}, 0x14) kernel console output (not intermixed with test programs): [ 55.625276][ T29] audit: type=1400 audit(1787078024.223:106): avc: denied { transition } for pid=5439 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.648018][ T29] audit: type=1400 audit(1787078024.223:107): avc: denied { noatsecure } for pid=5439 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.668032][ T29] audit: type=1400 audit(1787078024.223:108): avc: denied { write } for pid=5439 comm="sh" path="pipe:[4655]" dev="pipefs" ino=4655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 55.690483][ T29] audit: type=1400 audit(1787078024.223:109): avc: denied { rlimitinh } for pid=5439 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.709529][ T29] audit: type=1400 audit(1787078024.223:110): avc: denied { siginh } for pid=5439 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.168528][ T29] audit: type=1400 audit(1787078027.763:111): avc: denied { write } for pid=5450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.222171][ T29] audit: type=1400 audit(1787078027.813:112): avc: denied { write } for pid=5461 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.827921][ T29] audit: type=1400 audit(1787078028.423:113): avc: denied { write } for pid=5464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.894533][ T29] audit: type=1400 audit(1787078028.493:114): avc: denied { write } for pid=5475 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.096963][ T29] audit: type=1400 audit(1787078028.693:115): avc: denied { write } for pid=5478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.149530][ T29] audit: type=1400 audit(1787078028.743:116): avc: denied { write } for pid=5489 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.348953][ T29] audit: type=1400 audit(1787078028.943:117): avc: denied { write } for pid=5492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.408683][ T29] audit: type=1400 audit(1787078029.003:118): avc: denied { write } for pid=5503 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.609436][ T29] audit: type=1400 audit(1787078029.203:119): avc: denied { write } for pid=5506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.673781][ T29] audit: type=1400 audit(1787078029.273:120): avc: denied { write } for pid=5517 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.869019][ T29] audit: type=1400 audit(1787078029.463:121): avc: denied { write } for pid=5520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.928710][ T29] audit: type=1400 audit(1787078029.523:122): avc: denied { write } for pid=5531 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 66.066515][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 66.066531][ T29] audit: type=1400 audit(1787078034.663:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.096537][ T29] audit: type=1400 audit(1787078034.693:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.101004][ T5585] cgroup: Unknown subsys name 'net' [ 66.126424][ T29] audit: type=1400 audit(1787078034.723:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.295993][ T5585] cgroup: Unknown subsys name 'cpuset' [ 66.304136][ T5585] cgroup: Unknown subsys name 'rlimit' [ 66.444611][ T29] audit: type=1400 audit(1787078035.043:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.468069][ T29] audit: type=1400 audit(1787078035.043:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.489940][ T29] audit: type=1400 audit(1787078035.043:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.515494][ T29] audit: type=1400 audit(1787078035.043:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.622829][ T5587] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.631995][ T29] audit: type=1400 audit(1787078035.223:136): avc: denied { relabelto } for pid=5587 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 66.658151][ T29] audit: type=1400 audit(1787078035.223:137): avc: denied { write } for pid=5587 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.691029][ T29] audit: type=1400 audit(1787078035.283:138): avc: denied { read } for pid=5585 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.624755][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.256297][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.266389][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.291567][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 71.291582][ T29] audit: type=1400 audit(1787078039.883:141): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.360125][ T29] audit: type=1400 audit(1787078039.883:142): avc: denied { read write } for pid=5595 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.370805][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.389439][ T29] audit: type=1400 audit(1787078039.913:143): avc: denied { open } for pid=5595 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.400335][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.425412][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.425870][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.434389][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.444014][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.451440][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.456392][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.462078][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.476328][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.478063][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.484316][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.493514][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.497812][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.512247][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.513926][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.519558][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.527995][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.536881][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.542532][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.550231][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.557056][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.562540][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.577566][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.588496][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.610130][ T29] audit: type=1400 audit(1787078039.933:144): avc: denied { ioctl } for pid=5595 comm="syz-executor" path="socket:[2024]" dev="sockfs" ino=2024 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.637364][ T29] audit: type=1400 audit(1787078040.203:145): avc: denied { read } for pid=5595 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.663427][ T29] audit: type=1400 audit(1787078040.203:146): avc: denied { open } for pid=5595 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.716958][ T29] audit: type=1400 audit(1787078040.213:147): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.807509][ T29] audit: type=1400 audit(1787078040.263:148): avc: denied { module_request } for pid=5597 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.909137][ T29] audit: type=1400 audit(1787078040.343:149): avc: denied { sys_module } for pid=5595 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.033853][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.041516][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.048843][ T5595] bridge_slave_0: entered allmulticast mode [ 73.056664][ T5595] bridge_slave_0: entered promiscuous mode [ 73.105911][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.113876][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.121078][ T5595] bridge_slave_1: entered allmulticast mode [ 73.129682][ T5595] bridge_slave_1: entered promiscuous mode [ 73.156538][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.165017][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.172202][ T5596] bridge_slave_0: entered allmulticast mode [ 73.179052][ T5596] bridge_slave_0: entered promiscuous mode [ 73.236193][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.243435][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.250567][ T5596] bridge_slave_1: entered allmulticast mode [ 73.257670][ T5596] bridge_slave_1: entered promiscuous mode [ 73.307958][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.328909][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.336496][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.343900][ T5599] bridge_slave_0: entered allmulticast mode [ 73.350720][ T5599] bridge_slave_0: entered promiscuous mode [ 73.360013][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.371507][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.392737][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.399913][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.407272][ T5599] bridge_slave_1: entered allmulticast mode [ 73.414131][ T5599] bridge_slave_1: entered promiscuous mode [ 73.422468][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.504750][ T5595] team0: Port device team_slave_0 added [ 73.510465][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.517821][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.525132][ T5597] bridge_slave_0: entered allmulticast mode [ 73.531862][ T5597] bridge_slave_0: entered promiscuous mode [ 73.545433][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.556338][ T5596] team0: Port device team_slave_0 added [ 73.564372][ T5595] team0: Port device team_slave_1 added [ 73.570491][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.577745][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.585130][ T5597] bridge_slave_1: entered allmulticast mode [ 73.591936][ T5597] bridge_slave_1: entered promiscuous mode [ 73.607546][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.618349][ T5596] team0: Port device team_slave_1 added [ 73.653543][ T5606] Bluetooth: hci0: command tx timeout [ 73.653544][ T50] Bluetooth: hci3: command tx timeout [ 73.653761][ T5613] Bluetooth: hci2: command tx timeout [ 73.659626][ T4916] Bluetooth: hci1: command tx timeout [ 73.665656][ T5606] Bluetooth: hci4: command tx timeout [ 73.709191][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.716220][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.742547][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.756331][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.765670][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.773033][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.780328][ T5598] bridge_slave_0: entered allmulticast mode [ 73.787311][ T5598] bridge_slave_0: entered promiscuous mode [ 73.803314][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.810363][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.836595][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.851847][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.859087][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.885100][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.898743][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.908417][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.915658][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.922963][ T5598] bridge_slave_1: entered allmulticast mode [ 73.929840][ T5598] bridge_slave_1: entered promiscuous mode [ 73.938660][ T5599] team0: Port device team_slave_0 added [ 73.944989][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.951942][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.981149][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.015520][ T5599] team0: Port device team_slave_1 added [ 74.064485][ T5597] team0: Port device team_slave_0 added [ 74.072280][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.106859][ T5597] team0: Port device team_slave_1 added [ 74.114622][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.124296][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.131259][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.157379][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.180237][ T5596] hsr_slave_0: entered promiscuous mode [ 74.186807][ T5596] hsr_slave_1: entered promiscuous mode [ 74.210074][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.217150][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.243423][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.258272][ T5595] hsr_slave_0: entered promiscuous mode [ 74.264453][ T5595] hsr_slave_1: entered promiscuous mode [ 74.270457][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 74.276857][ T5595] Cannot create hsr debugfs directory [ 74.321027][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.328320][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.354470][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.367994][ T5598] team0: Port device team_slave_0 added [ 74.376243][ T5598] team0: Port device team_slave_1 added [ 74.396910][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.403934][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.430145][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.508245][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.515456][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.541816][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.575014][ T5599] hsr_slave_0: entered promiscuous mode [ 74.581196][ T5599] hsr_slave_1: entered promiscuous mode [ 74.587481][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 74.593465][ T5599] Cannot create hsr debugfs directory [ 74.599625][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.606720][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.632644][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.703698][ T5597] hsr_slave_0: entered promiscuous mode [ 74.709846][ T5597] hsr_slave_1: entered promiscuous mode [ 74.716199][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 74.721912][ T5597] Cannot create hsr debugfs directory [ 74.803570][ T5598] hsr_slave_0: entered promiscuous mode [ 74.809644][ T5598] hsr_slave_1: entered promiscuous mode [ 74.815717][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 74.821430][ T5598] Cannot create hsr debugfs directory [ 75.117455][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.128933][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.136846][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.145651][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.153465][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.163175][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.176801][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.186659][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.251348][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.261183][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.269954][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.279418][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.290774][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.300395][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.309068][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.319032][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.401087][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.412516][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.421980][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.430871][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.439539][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.451124][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.459765][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.469176][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.560299][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.570846][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.579020][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.588302][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.596803][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.605794][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.620496][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.629733][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.639237][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.713985][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.733508][ T5613] Bluetooth: hci4: command tx timeout [ 75.733620][ T50] Bluetooth: hci2: command tx timeout [ 75.738935][ T5613] Bluetooth: hci0: command tx timeout [ 75.744551][ T4916] Bluetooth: hci3: command tx timeout [ 75.756761][ T5606] Bluetooth: hci1: command tx timeout [ 75.769459][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.777137][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.790993][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.798125][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.821607][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.828862][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.837745][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.854957][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.864789][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.889104][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.900303][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.908830][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.918268][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.965277][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.003135][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.010285][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.036986][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.044118][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.109681][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.162571][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.227883][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.240231][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.277029][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.284269][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.297265][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.304451][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.326316][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.333494][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.351259][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.358676][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.385931][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.499182][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.535195][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.542366][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.589516][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.596741][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.841693][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.010007][ T5596] veth0_vlan: entered promiscuous mode [ 77.060317][ T5596] veth1_vlan: entered promiscuous mode [ 77.082275][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.239079][ T5596] veth0_macvtap: entered promiscuous mode [ 77.276118][ T5596] veth1_macvtap: entered promiscuous mode [ 77.332420][ T5595] veth0_vlan: entered promiscuous mode [ 77.375741][ T5595] veth1_vlan: entered promiscuous mode [ 77.419516][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.468296][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.553932][ T3337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.583426][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.616651][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.636323][ T5595] veth0_macvtap: entered promiscuous mode [ 77.661313][ T5595] veth1_macvtap: entered promiscuous mode [ 77.682834][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.709507][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.723169][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.748977][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.775978][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.794681][ T3283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.805253][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.814672][ T5606] Bluetooth: hci3: command tx timeout [ 77.815688][ T3283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.820092][ T5606] Bluetooth: hci4: command tx timeout [ 77.820113][ T5606] Bluetooth: hci0: command tx timeout [ 77.820130][ T5606] Bluetooth: hci1: command tx timeout [ 77.820280][ T5613] Bluetooth: hci2: command tx timeout [ 77.926866][ T3337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.961720][ T3283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.970715][ T3283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.008117][ T29] audit: type=1400 audit(1787078046.603:150): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.nlp8jQ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.026093][ T5599] veth0_vlan: entered promiscuous mode [ 78.064585][ T29] audit: type=1400 audit(1787078046.633:151): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.066743][ T5597] veth0_vlan: entered promiscuous mode [ 78.089865][ T29] audit: type=1400 audit(1787078046.633:152): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.nlp8jQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.118317][ T29] audit: type=1400 audit(1787078046.643:153): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.147522][ T5599] veth1_vlan: entered promiscuous mode [ 78.157913][ T29] audit: type=1400 audit(1787078046.643:154): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.nlp8jQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.195256][ T29] audit: type=1400 audit(1787078046.643:155): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.nlp8jQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.198618][ T1040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.227750][ T29] audit: type=1400 audit(1787078046.663:156): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.253777][ T29] audit: type=1400 audit(1787078046.733:157): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.279342][ T29] audit: type=1400 audit(1787078046.743:158): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=7127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.280999][ T5598] veth0_vlan: entered promiscuous mode [ 78.311782][ T29] audit: type=1400 audit(1787078046.743:159): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.337413][ T5596] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.341752][ T5597] veth1_vlan: entered promiscuous mode [ 78.373572][ T3283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.408603][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.413651][ T5598] veth1_vlan: entered promiscuous mode [ 78.418003][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.474113][ T5599] veth0_macvtap: entered promiscuous mode [ 78.541273][ T5599] veth1_macvtap: entered promiscuous mode [ 78.578524][ T5597] veth0_macvtap: entered promiscuous mode [ 78.605252][ T1040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.614989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.625815][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.638928][ T5598] veth0_macvtap: entered promiscuous mode [ 78.655951][ T5597] veth1_macvtap: entered promiscuous mode [ 78.726657][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.739626][ T5598] veth1_macvtap: entered promiscuous mode [ 78.750950][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.244564][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.452740][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.611468][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.971139][ T50] Bluetooth: hci2: command tx timeout [ 79.977788][ T50] Bluetooth: hci1: command tx timeout [ 79.983379][ T5613] Bluetooth: hci0: command tx timeout [ 79.989390][ T5606] Bluetooth: hci4: command tx timeout [ 79.989462][ T4916] Bluetooth: hci3: command tx timeout [ 80.097765][ T5810] process 'syz.0.6' launched './file2' with NULL argv: empty string added [ 80.174954][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 80.184953][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 80.532908][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.577266][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.743038][ T3283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.755499][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.842774][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.997828][ T147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407825][ T3337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.417153][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.431470][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.525643][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.555133][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.600267][ T5819] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 82.605067][ T1040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.708737][ T3283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.716977][ T3283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.729165][ T5819] @0Ù: renamed from bond_slave_1 (while UP) [ 82.764091][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.776299][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.788865][ T5819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 82.789196][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.829108][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.831673][ T5819] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 82.846283][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.865839][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.883972][ T1040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905280][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.945065][ T3283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.992293][ T3283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.013951][ T3283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.219102][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 83.219118][ T29] audit: type=1400 audit(1787078051.813:198): avc: denied { write } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.288856][ T29] audit: type=1400 audit(1787078051.823:199): avc: denied { map_read map_write } for pid=5823 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.314503][ T4916] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 83.864038][ T29] audit: type=1400 audit(1787078052.453:200): avc: denied { read write } for pid=5822 comm="syz.2.3" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.963293][ T29] audit: type=1400 audit(1787078052.463:201): avc: denied { open } for pid=5822 comm="syz.2.3" path="/dev/video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.259167][ T5835] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.626188][ T29] audit: type=1400 audit(1787078052.543:202): avc: denied { create } for pid=5830 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.646564][ T29] audit: type=1400 audit(1787078052.733:203): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.675299][ T29] audit: type=1400 audit(1787078052.733:204): avc: denied { prog_run } for pid=5831 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.735762][ T29] audit: type=1400 audit(1787078052.733:205): avc: denied { ioctl } for pid=5822 comm="syz.2.3" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.944672][ T29] audit: type=1400 audit(1787078052.743:206): avc: denied { create } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.079038][ T5844] netlink: 'syz.4.11': attribute type 2 has an invalid length. [ 85.087985][ T5844] netlink: 'syz.4.11': attribute type 1 has an invalid length. [ 85.123470][ T29] audit: type=1400 audit(1787078052.813:207): avc: denied { connect } for pid=5830 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.958180][ T46] cfg80211: failed to load regulatory.db [ 88.174365][ T5858] can0: slcan on ttyS3. [ 88.245712][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 88.245746][ T29] audit: type=1400 audit(1787078056.723:223): avc: denied { create } for pid=5855 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.795659][ T5855] can0 (unregistered): slcan off ttyS3. [ 89.320966][ T5867] Bluetooth: MGMT ver 1.23 [ 89.332443][ T29] audit: type=1400 audit(1787078057.913:224): avc: denied { bind } for pid=5866 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.386888][ T29] audit: type=1400 audit(1787078057.913:225): avc: denied { write } for pid=5866 comm="syz.1.16" path="socket:[7955]" dev="sockfs" ino=7955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.550053][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.558526][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.599741][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.609703][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.742954][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.756047][ T29] audit: type=1400 audit(1787078058.353:226): avc: denied { create } for pid=5869 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.825530][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.876638][ T5872] Invalid ELF header type: 3 != 1 [ 89.916832][ T3337] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.022296][ T29] audit: type=1400 audit(1787078058.353:227): avc: denied { read write } for pid=5871 comm="syz.4.17" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.106966][ T5881] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 90.286655][ T29] audit: type=1400 audit(1787078058.373:228): avc: denied { open } for pid=5871 comm="syz.4.17" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.620989][ T29] audit: type=1400 audit(1787078058.393:229): avc: denied { write } for pid=5869 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.935393][ T29] audit: type=1400 audit(1787078058.473:230): avc: denied { read } for pid=5879 comm="syz.1.18" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.063035][ T3337] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.152933][ T29] audit: type=1400 audit(1787078058.473:231): avc: denied { open } for pid=5879 comm="syz.1.18" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.353466][ T29] audit: type=1400 audit(1787078058.473:232): avc: denied { module_load } for pid=5871 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.855551][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 92.638716][ T5901] Zero length message leads to an empty skb [ 93.177435][ T5905] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.186345][ T5905] use the actual size instead. [ 93.516095][ T5892] bridge0: port 3(vlan2) entered blocking state [ 93.539605][ T5892] bridge0: port 3(vlan2) entered disabled state [ 93.578287][ T5892] vlan2: entered allmulticast mode [ 93.605364][ T5892] geneve0: entered allmulticast mode [ 93.686630][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 93.686642][ T29] audit: type=1400 audit(1787078062.283:294): avc: denied { write } for pid=5908 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.743146][ T5892] vlan2: entered promiscuous mode [ 93.751715][ T5892] geneve0: entered promiscuous mode [ 94.073006][ T29] audit: type=1400 audit(1787078062.583:295): avc: denied { allowed } for pid=5911 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.591390][ T29] audit: type=1400 audit(1787078063.163:296): avc: denied { map } for pid=5916 comm="syz.3.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.080129][ T29] audit: type=1400 audit(1787078063.163:297): avc: denied { read write } for pid=5916 comm="syz.3.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.105179][ T29] audit: type=1400 audit(1787078063.313:298): avc: denied { mmap_zero } for pid=5916 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 95.241796][ T29] audit: type=1400 audit(1787078063.833:299): avc: denied { create } for pid=5923 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.295884][ T5926] jffs2: notice: (5926) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.401616][ T29] audit: type=1400 audit(1787078063.993:300): avc: denied { read } for pid=5928 comm="syz.4.28" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.468836][ T29] audit: type=1400 audit(1787078063.993:301): avc: denied { open } for pid=5928 comm="syz.4.28" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.743050][ T29] audit: type=1400 audit(1787078064.053:302): avc: denied { setopt } for pid=5931 comm="syz.3.29" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.968550][ T29] audit: type=1400 audit(1787078064.113:303): avc: denied { create } for pid=5928 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.923832][ T5932] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 97.148533][ T5932] SELinux: failed to load policy [ 97.438756][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 97.878817][ T5938] netlink: 'syz.1.27': attribute type 21 has an invalid length. [ 97.923223][ T5938] netlink: 128 bytes leftover after parsing attributes in process `syz.1.27'. [ 98.001793][ T5938] netlink: 'syz.1.27': attribute type 4 has an invalid length. [ 98.041023][ T5954] ip_tables: iptables: counters copy to user failed while replacing table [ 98.058411][ T5938] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 98.179053][ T5938] netlink: 3 bytes leftover after parsing attributes in process `syz.1.27'. [ 98.578631][ T5934] netlink: 48 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.628638][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 99.628656][ T29] audit: type=1400 audit(1787078068.223:324): avc: denied { write } for pid=5965 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.331433][ T29] audit: type=1400 audit(1787078068.533:325): avc: denied { write } for pid=5971 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.378991][ T29] audit: type=1400 audit(1787078068.533:326): avc: denied { read } for pid=5971 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.399634][ T29] audit: type=1400 audit(1787078068.563:327): avc: denied { mount } for pid=5971 comm="syz.4.36" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.422255][ T29] audit: type=1400 audit(1787078068.563:328): avc: denied { search } for pid=5971 comm="syz.4.36" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.601970][ T29] audit: type=1400 audit(1787078068.563:329): avc: denied { append } for pid=5971 comm="syz.4.36" name="uprobe_events" dev="tracefs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 100.729623][ T29] audit: type=1400 audit(1787078068.563:330): avc: denied { open } for pid=5971 comm="syz.4.36" path="/6/tracing/uprobe_events" dev="tracefs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.279838][ T29] audit: type=1400 audit(1787078069.183:331): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 101.300387][ T29] audit: type=1400 audit(1787078069.403:332): avc: denied { write } for pid=5977 comm="syz.4.37" name="route" dev="proc" ino=4026533362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.376055][ T29] audit: type=1400 audit(1787078069.423:333): avc: denied { name_bind } for pid=5977 comm="syz.4.37" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 102.023814][ T5986] syz.3.39 (5986) used greatest stack depth: 19928 bytes left [ 102.503668][ T4184] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.715871][ T4184] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 102.729309][ T4184] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.740373][ T4184] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 102.752377][ T4184] usb 2-1: config 1 interface 0 has no altsetting 0 [ 102.762461][ T4184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.771326][ T4184] usb 2-1: Product: syz [ 102.775932][ T4184] usb 2-1: Manufacturer: syz [ 102.780778][ T4184] usb 2-1: SerialNumber: syz [ 102.915996][ T5982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.005196][ T5982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.277360][ T6004] evm: overlay not supported [ 105.064530][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 105.064586][ T29] audit: type=1400 audit(1787078073.653:356): avc: denied { write } for pid=6011 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.573750][ T29] audit: type=1400 audit(1787078074.143:357): avc: denied { write } for pid=6015 comm="syz.2.46" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.587407][ T6017] ======================================================= [ 105.587407][ T6017] WARNING: The mand mount option has been deprecated and [ 105.587407][ T6017] and is ignored by this kernel. Remove the mand [ 105.587407][ T6017] option from the mount to silence this warning. [ 105.587407][ T6017] ======================================================= [ 106.534588][ T29] audit: type=1400 audit(1787078074.303:358): avc: denied { setopt } for pid=6015 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.553980][ T29] audit: type=1400 audit(1787078074.323:359): avc: denied { mount } for pid=6015 comm="syz.2.46" name="/" dev="configfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 106.620544][ T29] audit: type=1400 audit(1787078075.213:360): avc: denied { ioctl } for pid=6023 comm="syz.0.48" path="socket:[9294]" dev="sockfs" ino=9294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.667735][ T6025] netlink: 'syz.1.49': attribute type 2 has an invalid length. [ 106.803883][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 106.828423][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 106.841918][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 106.860969][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 107.162212][ T6031] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 107.390633][ T4184] rtl8150 2-1:1.0: couldn't reset the device [ 107.399407][ T4184] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 107.416119][ T29] audit: type=1400 audit(1787078075.253:361): avc: denied { create } for pid=6027 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.512310][ T29] audit: type=1400 audit(1787078075.263:362): avc: denied { listen } for pid=6024 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.595390][ T4184] usb 2-1: USB disconnect, device number 2 [ 107.639897][ T29] audit: type=1400 audit(1787078075.353:363): avc: denied { write } for pid=6019 comm="syz.4.47" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.939847][ T29] audit: type=1400 audit(1787078075.943:364): avc: denied { create } for pid=6024 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.188350][ T29] audit: type=1400 audit(1787078075.943:365): avc: denied { connect } for pid=6024 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.461759][ T6045] netlink: 76 bytes leftover after parsing attributes in process `syz.3.53'. [ 109.657589][ T6046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.086639][ T6063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 112.093401][ T6063] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.102806][ T6063] vhci_hcd vhci_hcd.0: Device attached [ 112.690169][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 112.690192][ T29] audit: type=1400 audit(1787078081.233:376): avc: denied { create } for pid=6067 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.191725][ T5697] usb 38-1: SetAddress Request (2) to port 0 [ 113.267701][ T5697] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 114.103219][ T29] audit: type=1400 audit(1787078082.153:377): avc: denied { write } for pid=6067 comm="syz.1.56" path="socket:[10447]" dev="sockfs" ino=10447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.285617][ T6064] vhci_hcd: connection closed [ 114.455961][ T3283] vhci_hcd vhci_hcd.2: stop threads [ 114.484255][ T29] audit: type=1400 audit(1787078082.223:378): avc: denied { bind } for pid=6071 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.503599][ T29] audit: type=1400 audit(1787078082.233:379): avc: denied { connect } for pid=6071 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.666360][ T3283] vhci_hcd vhci_hcd.2: release socket [ 114.679376][ T3283] vhci_hcd vhci_hcd.2: disconnect device [ 116.428655][ T29] audit: type=1400 audit(1787078085.023:380): avc: denied { listen } for pid=6072 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.731849][ T29] audit: type=1400 audit(1787078085.323:381): avc: denied { write } for pid=6090 comm="syz.1.61" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.799076][ T6094] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5595] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6094] [ 116.819547][ T29] audit: type=1400 audit(1787078085.353:382): avc: denied { write } for pid=6072 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.505066][ T29] audit: type=1400 audit(1787078085.353:383): avc: denied { ioctl } for pid=6090 comm="syz.1.61" path="socket:[9418]" dev="sockfs" ino=9418 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.798261][ T6114] overlayfs: overlapping lowerdir path [ 120.231524][ T5697] usb 38-1: device descriptor read/8, error -110 [ 120.387771][ T29] audit: type=1400 audit(1787078088.983:384): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.668195][ T5697] usb usb38-port1: attempt power cycle [ 120.726656][ T29] audit: type=1400 audit(1787078089.313:385): avc: denied { mounton } for pid=6116 comm="syz.0.66" path="/18/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.291208][ T29] audit: type=1400 audit(1787078089.413:386): avc: denied { allowed } for pid=6119 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 121.890547][ T5697] usb usb38-port1: unable to enumerate USB device [ 122.478758][ T5606] block nbd1: Receive control failed (result -32) [ 122.854685][ T6123] SELinux: failed to load policy [ 123.572188][ T6134] block nbd1: shutting down sockets [ 123.589850][ T6147] Invalid ELF header type: 3 != 1 [ 124.520797][ T29] audit: type=1400 audit(1787078093.093:387): avc: denied { ioctl } for pid=6156 comm="syz.2.73" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.652872][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 125.301508][ T29] audit: type=1400 audit(1787078093.883:388): avc: denied { bind } for pid=6159 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.499167][ T29] audit: type=1400 audit(1787078093.973:389): avc: denied { name_bind } for pid=6159 comm="syz.0.74" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 125.726386][ T29] audit: type=1400 audit(1787078093.973:390): avc: denied { node_bind } for pid=6159 comm="syz.0.74" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 127.134476][ T29] audit: type=1400 audit(1787078093.993:391): avc: denied { connect } for pid=6159 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.374535][ T29] audit: type=1400 audit(1787078095.963:392): avc: denied { search } for pid=6182 comm="syz.1.77" name="/" dev="configfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.452166][ T6183] file system registered [ 127.485605][ T29] audit: type=1400 audit(1787078095.963:393): avc: denied { search } for pid=6182 comm="syz.1.77" name="usb_gadget" dev="configfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.534455][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 127.553711][ T29] audit: type=1400 audit(1787078095.973:394): avc: denied { write search } for pid=6182 comm="syz.1.77" name="usb_gadget" dev="configfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.577050][ T6183] netlink: 'syz.1.77': attribute type 5 has an invalid length. [ 127.602532][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 127.626712][ T29] audit: type=1400 audit(1787078095.993:395): avc: denied { add_name } for pid=6182 comm="syz.1.77" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.656265][ T6183] geneve2: entered promiscuous mode [ 127.666635][ T6183] geneve2: entered allmulticast mode [ 127.686320][ T29] audit: type=1400 audit(1787078095.993:396): avc: denied { create } for pid=6182 comm="syz.1.77" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 127.713149][ T1141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 127.754935][ T29] audit: type=1400 audit(1787078096.043:397): avc: denied { search } for pid=6182 comm="syz.1.77" name="/" dev="configfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.814184][ T1141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 127.858135][ T1141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 127.890913][ T29] audit: type=1400 audit(1787078096.043:398): avc: denied { search } for pid=6182 comm="syz.1.77" name="usb_gadget" dev="configfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.950457][ T5595] ffs_data_put(): freeing [ 127.955654][ T1141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 130.754339][ T29] audit: type=1400 audit(1787078096.043:399): avc: denied { search } for pid=6182 comm="syz.1.77" name="g1" dev="configfs" ino=10679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.927644][ T29] audit: type=1400 audit(1787078096.043:400): avc: denied { search } for pid=6182 comm="syz.1.77" name="functions" dev="configfs" ino=10680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.990005][ T29] audit: type=1400 audit(1787078096.043:401): avc: denied { write search } for pid=6182 comm="syz.1.77" name="functions" dev="configfs" ino=10680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.585183][ T6205] kernel profiling enabled (shift: 7) [ 132.198072][ T29] audit: type=1400 audit(1787078096.103:402): avc: denied { write } for pid=6182 comm="syz.1.77" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.223977][ T29] audit: type=1400 audit(1787078096.123:403): avc: denied { mount } for pid=6182 comm="syz.1.77" name="/" dev="functionfs" ino=10686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 132.246862][ T29] audit: type=1400 audit(1787078096.453:404): avc: denied { create } for pid=6186 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.266267][ T29] audit: type=1400 audit(1787078096.473:405): avc: denied { ioctl } for pid=6186 comm="syz.3.78" path="socket:[10699]" dev="sockfs" ino=10699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.292855][ T29] audit: type=1400 audit(1787078096.483:406): avc: denied { bind } for pid=6186 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.484577][ T6211] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 132.614096][ T29] audit: type=1400 audit(1787078096.483:407): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 132.651843][ T29] audit: type=1400 audit(1787078096.513:408): avc: denied { connect } for pid=6186 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.760219][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766728][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.523077][ T6203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.854614][ T6221] pim6reg: entered allmulticast mode [ 135.019622][ T6216] pim6reg: left allmulticast mode [ 137.618287][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 137.618307][ T29] audit: type=1400 audit(1787078105.253:420): avc: denied { create } for pid=6237 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 137.743777][ T29] audit: type=1400 audit(1787078105.313:421): avc: denied { sys_admin } for pid=6237 comm="syz.2.88" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 137.911055][ T6233] netlink: 168 bytes leftover after parsing attributes in process `syz.4.86'. [ 137.942685][ T29] audit: type=1400 audit(1787078106.533:422): avc: denied { watch } for pid=6243 comm="syz.2.89" path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dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.911595][ T6261] trusted_key: encrypted_key: key user:syz not found [ 140.142824][ T6272] kvm: apic: phys broadcast and lowest prio [ 140.219219][ T6265] capability: warning: `syz.3.91' uses 32-bit capabilities (legacy support in use) [ 140.563979][ T6278] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 140.939886][ T29] audit: type=1400 audit(1787078109.153:423): avc: denied { append } for pid=6274 comm="syz.2.96" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 140.993451][ T29] audit: type=1400 audit(1787078109.163:424): avc: denied { ioctl } for pid=6274 comm="syz.2.96" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.047301][ T29] audit: type=1400 audit(1787078109.173:425): avc: denied { map } for pid=6274 comm="syz.2.96" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.202114][ T29] audit: type=1400 audit(1787078109.173:426): avc: denied { write execute } for pid=6274 comm="syz.2.96" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.327016][ T29] audit: type=1400 audit(1787078109.913:427): avc: denied { read } for pid=6282 comm="syz.2.98" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.388884][ T29] audit: type=1400 audit(1787078109.913:428): avc: denied { open } for pid=6282 comm="syz.2.98" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.469571][ T29] audit: type=1400 audit(1787078109.943:429): avc: denied { ioctl } for pid=6282 comm="syz.2.98" path="socket:[9856]" dev="sockfs" ino=9856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.522170][ T6283] loop2: detected capacity change from 0 to 2640 [ 141.565511][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 141.587429][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 141.608150][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 141.631926][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 141.666517][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.782400][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.803852][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 142.803869][ T29] audit: type=1400 audit(1787078111.403:432): avc: denied { create } for pid=6301 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.804407][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.867786][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.885641][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.913960][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.996013][ T29] audit: type=1400 audit(1787078111.493:433): avc: denied { connect } for pid=6301 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.350789][ T6311] capability: warning: `syz.3.102' uses deprecated v2 capabilities in a way that may be insecure [ 143.384139][ T29] audit: type=1400 audit(1787078111.983:434): avc: denied { append } for pid=6309 comm="syz.3.102" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.315513][ T5606] Bluetooth: hci3: failed to read key size for handle 200 [ 144.332400][ T29] audit: type=1400 audit(1787078112.823:435): avc: denied { write } for pid=6313 comm="syz.3.103" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 145.036760][ T29] audit: type=1400 audit(1787078113.633:436): avc: denied { setattr } for pid=6318 comm="syz.3.104" name="NETLINK" dev="sockfs" ino=10920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.245180][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.104'. [ 145.332361][ T29] audit: type=1400 audit(1787078113.923:437): avc: denied { mount } for pid=6318 comm="syz.3.104" name="/" dev="ramfs" ino=9963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 145.437108][ T29] audit: type=1400 audit(1787078113.993:438): avc: denied { mounton } for pid=6318 comm="syz.3.104" path="/file0" dev="ramfs" ino=9964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 145.537288][ T6328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=6328 comm=syz.2.106 [ 145.647405][ T6323] fuse: Bad value for 'group_id' [ 145.688343][ T6323] fuse: Bad value for 'group_id' [ 146.928862][ T29] audit: type=1326 audit(1787078115.523:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 146.969104][ T5615] buffer_io_error: 5 callbacks suppressed [ 146.969116][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 147.287551][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 147.391962][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 147.528291][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 147.675517][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 148.025450][ T6339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.322637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.448602][ T29] audit: type=1326 audit(1787078115.523:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 149.588435][ T6346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.753123][ T29] audit: type=1326 audit(1787078115.523:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 149.785957][ T29] audit: type=1326 audit(1787078115.523:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 150.349934][ T6350] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 150.351295][ T6351] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 150.490453][ T6346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.560279][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.577983][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.592375][ T29] audit: type=1326 audit(1787078115.523:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 150.624263][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.181168][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.198905][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 151.233863][ T29] audit: type=1326 audit(1787078115.523:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 151.324587][ T29] audit: type=1326 audit(1787078115.523:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 151.407303][ T6346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.445868][ T6346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.451994][ T29] audit: type=1326 audit(1787078115.523:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 151.486817][ T6346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.523907][ T6346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.580362][ T6346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.599956][ T6346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.622117][ T29] audit: type=1326 audit(1787078115.583:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb0eb19e0d9 code=0x7ffc0000 [ 151.671232][ T6366] null_blk: nullb1: using native zone append [ 151.678503][ T29] audit: type=1400 audit(1787078115.673:448): avc: denied { setopt } for pid=6334 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.714539][ T29] audit: type=1400 audit(1787078115.673:449): avc: denied { write } for pid=6334 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.734746][ T6346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.745171][ T6346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.758537][ T6346] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.793188][ T6346] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.810805][ T6346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.823010][ T5606] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.834490][ T6346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.866406][ T6346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 152.315858][ T5712] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.549960][ T5712] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 152.669963][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.853566][ T5712] usb 5-1: config 0 descriptor?? [ 153.543467][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.554521][ T6366] null_blk: disk nullb1 created [ 153.656308][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.706198][ T6386] batman_adv: batadv0: Adding interface: macvtap1 [ 153.739854][ T6386] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.765768][ T5712] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 153.773645][ T5712] [drm:udl_init] *ERROR* Selecting channel failed [ 153.823111][ T5606] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.823299][ T4916] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.904494][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.914329][ T6386] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 153.927807][ T5712] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 153.969680][ T5712] [drm] Initialized udl on minor 1 [ 153.987733][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 154.050511][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 154.077456][ T5712] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.089451][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 154.200412][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 154.209369][ T5712] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 154.221250][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 154.242438][ T5704] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.265635][ T5704] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 154.295281][ T5712] usb 5-1: USB disconnect, device number 2 [ 154.472590][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 154.492411][ T29] audit: type=1400 audit(1787078123.063:472): avc: denied { write } for pid=6398 comm="syz.1.120" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.745720][ T29] audit: type=1400 audit(1787078123.293:473): avc: denied { mount } for pid=6406 comm="syz.0.121" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.194707][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.226450][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.233125][ T29] audit: type=1400 audit(1787078123.303:474): avc: denied { read } for pid=6406 comm="syz.0.121" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.234967][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.326506][ T6411] bond0: entered promiscuous mode [ 155.384678][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.408369][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.437731][ T5712] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 155.529173][ T6411] bond_slave_0: entered promiscuous mode [ 155.715638][ T6415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6415 comm=syz.2.122 [ 155.746480][ T5606] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.752710][ T4916] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.761654][ T6411] bond_slave_1: entered promiscuous mode [ 155.806865][ T6411] batadv0: entered promiscuous mode [ 155.841570][ T29] audit: type=1400 audit(1787078124.433:475): avc: denied { sqpoll } for pid=6410 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.879500][ T6411] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.882753][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 155.899378][ T4916] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.909528][ T5606] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.921730][ T5712] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.933997][ T5712] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 155.942139][ T5712] usb 1-1: config 0 has no interface number 0 [ 155.950436][ T5712] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.968280][ T5712] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 155.993409][ T5712] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.997483][ T5606] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.004475][ T5712] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.136119][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.154770][ T5712] usb 1-1: config 0 descriptor?? [ 156.374732][ T29] audit: type=1400 audit(1787078124.933:476): avc: denied { read write } for pid=6418 comm="syz.4.124" name="sg0" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.739784][ T5712] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 156.825295][ T29] audit: type=1400 audit(1787078124.933:477): avc: denied { open } for pid=6418 comm="syz.4.124" path="/dev/sg0" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.157685][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 157.201345][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 157.583723][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 158.096026][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.096093][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.102130][ T5606] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.108461][ T4916] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.645852][ T46] usb 1-1: USB disconnect, device number 2 [ 159.654555][ T29] audit: type=1400 audit(1787078128.123:478): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 159.924776][ T6438] netlink: 148 bytes leftover after parsing attributes in process `syz.1.131'. [ 159.987889][ T46] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 160.091240][ T29] audit: type=1400 audit(1787078128.683:479): avc: denied { bind } for pid=6435 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.489648][ T29] audit: type=1400 audit(1787078128.683:480): avc: denied { write } for pid=6435 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.529644][ T5615] buffer_io_error: 5 callbacks suppressed [ 162.529662][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 162.570524][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 162.596284][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 162.673185][ T6438] netlink: 148 bytes leftover after parsing attributes in process `syz.1.131'. [ 162.781355][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 163.153104][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 164.012575][ T29] audit: type=1400 audit(1787078129.073:481): avc: denied { create } for pid=6437 comm="syz.1.131" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.264212][ T29] audit: type=1400 audit(1787078129.123:482): avc: denied { create } for pid=6442 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.301062][ T29] audit: type=1400 audit(1787078129.753:483): avc: denied { execute } for pid=6437 comm="syz.1.131" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 164.462226][ T29] audit: type=1400 audit(1787078129.993:484): avc: denied { write } for pid=6437 comm="syz.1.131" name="file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.579945][ T29] audit: type=1400 audit(1787078129.993:485): avc: denied { open } for pid=6437 comm="syz.1.131" path="/24/file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.650720][ T29] audit: type=1400 audit(1787078130.003:486): avc: denied { ioctl } for pid=6437 comm="syz.1.131" path="/24/file0" dev="tmpfs" ino=148 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.697265][ T29] audit: type=1400 audit(1787078131.693:487): avc: denied { getopt } for pid=6455 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.855565][ T29] audit: type=1400 audit(1787078133.453:488): avc: denied { unlink } for pid=5595 comm="syz-executor" name="file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.938213][ T29] audit: type=1400 audit(1787078133.513:489): avc: denied { name_connect } for pid=6465 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 165.061686][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 165.081162][ T29] audit: type=1400 audit(1787078133.563:490): avc: denied { listen } for pid=6465 comm="syz.4.136" lport=60605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.275073][ T29] audit: type=1400 audit(1787078133.563:491): avc: denied { accept } for pid=6465 comm="syz.4.136" lport=60605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.303192][ T29] audit: type=1400 audit(1787078133.563:492): avc: denied { setopt } for pid=6465 comm="syz.4.136" lport=60605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 165.772726][ T5712] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 165.788210][ T29] audit: type=1400 audit(1787078133.643:493): avc: denied { setopt } for pid=6464 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.851991][ T29] audit: type=1400 audit(1787078133.653:494): avc: denied { ioctl } for pid=6473 comm="syz.1.137" path="socket:[11349]" dev="sockfs" ino=11349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.919169][ T29] audit: type=1400 audit(1787078133.953:495): avc: denied { bind } for pid=6475 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.068078][ T5712] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 166.077276][ T29] audit: type=1400 audit(1787078133.953:496): avc: denied { setopt } for pid=6475 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.100309][ T5712] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 166.109875][ T5712] usb 2-1: config 0 has no interface number 0 [ 166.123447][ T5712] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 166.162371][ T5712] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.187643][ T5712] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.229969][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 166.248323][ T5712] usb 2-1: Product: syz [ 166.259369][ T5712] usb 2-1: SerialNumber: syz [ 166.274207][ T5712] usb 2-1: config 0 descriptor?? [ 166.322584][ T5712] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 166.353946][ T5712] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 166.354307][ T4184] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.574112][ T4184] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 166.598612][ T4184] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.611617][ T4184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.715978][ T4184] as10x_usb: device has been detected [ 166.736618][ T4184] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 166.877192][ T4184] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 167.132774][ T6486] input: syz0 as /devices/virtual/input/input6 [ 167.406381][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.415238][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.417628][ T5726] usb 2-1: USB disconnect, device number 3 [ 167.422219][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.461739][ T4184] as10x_usb: error during firmware upload part1 [ 167.567999][ T4184] Registered device Abilis Systems DVB-Titan [ 167.652771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.082970][ T4184] usb 1-1: USB disconnect, device number 3 [ 168.408018][ T5726] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 168.468115][ T4184] Unregistered device Abilis Systems DVB-Titan [ 168.475457][ T4184] as10x_usb: device has been disconnected [ 168.641311][ T6494] mmap: syz.1.141 (6494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.414317][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 169.424016][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 169.447808][ T5697] libceph: connect (1)[c::]:6789 error -101 [ 169.473333][ T5697] libceph: mon0 (1)[c::]:6789 connect error [ 169.592801][ T6499] ceph: No mds server is up or the cluster is laggy [ 169.593949][ T6502] ceph: No mds server is up or the cluster is laggy [ 169.729868][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.763137][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 170.863814][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 170.863833][ T29] audit: type=1400 audit(1787078138.873:504): avc: denied { read write } for pid=6507 comm="syz.2.143" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.564554][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.723381][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.810203][ T29] audit: type=1400 audit(1787078138.873:505): avc: denied { open } for pid=6507 comm="syz.2.143" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.834440][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.772721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.061488][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.144'. [ 173.269326][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 173.602562][ T29] audit: type=1400 audit(1787078142.183:506): avc: denied { watch } for pid=6527 comm="syz.0.149" path="/32/control" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.026453][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 174.054359][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 174.076437][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 174.111853][ T6541] random: crng reseeded on system resumption [ 174.145896][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 174.157604][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 174.238638][ T6537] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 174.252356][ T29] audit: type=1400 audit(1787078142.833:507): avc: denied { setopt } for pid=6536 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.734659][ T29] audit: type=1400 audit(1787078143.253:508): avc: denied { ioctl } for pid=6545 comm="syz.0.151" path="socket:[12395]" dev="sockfs" ino=12395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.950579][ T29] audit: type=1400 audit(1787078143.543:509): avc: denied { read } for pid=6545 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.101478][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.151'. [ 175.759692][ T29] audit: type=1400 audit(1787078144.173:510): avc: denied { read write } for pid=6552 comm="syz.3.152" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.911945][ T29] audit: type=1400 audit(1787078144.173:511): avc: denied { ioctl open } for pid=6552 comm="syz.3.152" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.016020][ T6555] slcan: can't register candev [ 176.173266][ T29] audit: type=1400 audit(1787078144.773:512): avc: denied { write } for pid=6568 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.193481][ T6569] futex_wake_op: syz.3.156 tries to shift op by 144; fix this program [ 176.228170][ T6566] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.154'. [ 176.695771][ T6575] netlink: 188 bytes leftover after parsing attributes in process `syz.1.154'. [ 177.593983][ T6565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.320934][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 178.330433][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 178.341853][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 178.360829][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 178.397800][ T6565] block device autoloading is deprecated and will be removed. [ 178.429949][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.870790][ T6595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.962014][ T6603] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 180.986869][ T6604] netlink: 'syz.3.160': attribute type 21 has an invalid length. [ 180.997864][ T6603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 181.023419][ T6604] netlink: 128 bytes leftover after parsing attributes in process `syz.3.160'. [ 181.392835][ T5719] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 181.580522][ T6604] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 181.614241][ T6604] netlink: 'syz.3.160': attribute type 3 has an invalid length. [ 181.638262][ T29] audit: type=1400 audit(1787078150.233:513): avc: denied { append } for pid=6612 comm="syz.2.159" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.653632][ T6613] 9p: Bad value for 'rfdno' [ 181.668898][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 181.682127][ T6604] netlink: 3 bytes leftover after parsing attributes in process `syz.3.160'. [ 181.691880][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 181.709521][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 181.733870][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 181.747366][ T5719] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.778329][ T5719] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.802639][ T5719] usb 2-1: config 0 has no interface number 0 [ 181.819253][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 181.820562][ T5719] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.898904][ T5719] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 181.934067][ T5719] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.971735][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 181.973882][ T5719] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.037590][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.085721][ T5719] usb 2-1: config 0 descriptor?? [ 182.115917][ T5719] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.212717][ T5726] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 182.658613][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 182.814945][ T5726] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 182.825828][ T5726] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 182.834320][ T5726] usb 3-1: config 0 has no interface number 0 [ 182.840819][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.858291][ T5726] usb 3-1: config 0 descriptor?? [ 182.985651][ T5726] viperboard 3-1:0.143: version 0.00 found at bus 003 address 002 [ 183.185479][ T29] audit: type=1400 audit(1787078151.773:514): avc: denied { create } for pid=6612 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 183.424537][ T29] audit: type=1400 audit(1787078151.803:515): avc: denied { setopt } for pid=6612 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 183.607561][ T29] audit: type=1400 audit(1787078151.863:516): avc: denied { bind } for pid=6612 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 183.991296][ T5719] usb 2-1: USB disconnect, device number 4 [ 184.042851][ T5719] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 184.075081][ T5726] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 184.162952][ T5726] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 184.294221][ T5612] Buffer I/O error on dev loop2, logical block 0, async page read [ 184.357271][ T5612] Buffer I/O error on dev loop2, logical block 0, async page read [ 184.753036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 185.436048][ T5726] usb 3-1: USB disconnect, device number 2 [ 185.594926][ T5612] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.105876][ T5612] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.139510][ T5612] Buffer I/O error on dev loop2, logical block 0, async page read [ 186.661913][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.314165][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.322550][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.338093][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.357335][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 187.377165][ T29] audit: type=1400 audit(1787078155.973:517): avc: denied { ioctl } for pid=6650 comm="syz.2.173" path="/dev/video8" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.635660][ T6660] syz.4.175 (6660): attempted to duplicate a private mapping with mremap. This is not supported. [ 188.132714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.873089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 190.194532][ T29] audit: type=1400 audit(1787078158.733:518): avc: denied { mount } for pid=6667 comm="syz.2.178" name="/" dev="autofs" ino=11749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 191.769224][ T5615] buffer_io_error: 5 callbacks suppressed [ 191.769241][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.785114][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.794053][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.803007][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 191.811436][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 193.716950][ T29] audit: type=1326 audit(1787078161.903:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.193291][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.199662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.218024][ T29] audit: type=1326 audit(1787078161.903:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.282407][ T6694] netlink: 'syz.0.182': attribute type 29 has an invalid length. [ 194.332757][ T29] audit: type=1326 audit(1787078161.913:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.432878][ T29] audit: type=1326 audit(1787078161.913:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.519208][ T29] audit: type=1326 audit(1787078161.913:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.595117][ T29] audit: type=1326 audit(1787078161.913:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.700570][ T29] audit: type=1326 audit(1787078161.913:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.784756][ T29] audit: type=1326 audit(1787078161.923:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.842697][ T29] audit: type=1326 audit(1787078161.923:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 194.901297][ T29] audit: type=1326 audit(1787078161.923:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f784af9e0d9 code=0x7ffc0000 [ 195.448151][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 195.630151][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 195.739251][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 195.825920][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.500911][ T5615] Buffer I/O error on dev loop2, logical block 0, async page read [ 198.762688][ T5719] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 198.887837][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.974659][ T5719] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 199.331972][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 199.331992][ T29] audit: type=1400 audit(1787078167.923:1218): avc: denied { bind } for pid=6735 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.656181][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.796737][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 199.808153][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.820279][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 199.830359][ T46] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 199.842761][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 199.844213][ T29] audit: type=1400 audit(1787078168.443:1219): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.852809][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 199.883103][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 199.893240][ T46] usb 1-1: Dual-Role OTG device on HNP port [ 199.900523][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.913447][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 199.929406][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 199.945922][ T46] gspca_main: spca501-2.14.0 probing 0000:0000 [ 199.957440][ T46] gspca_spca501: reg write: error -32 [ 199.962962][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 199.982839][ T46] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 199.989777][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 199.999740][ T46] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 200.029416][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 200.067643][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.079569][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 200.080067][ T29] audit: type=1400 audit(1787078168.673:1220): avc: denied { write } for pid=6748 comm="syz.0.197" name="usb_gadget" dev="configfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.099002][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 200.176957][ T6749] netlink: 'syz.0.197': attribute type 11 has an invalid length. [ 200.336994][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.354657][ T5719] usb 3-1: Product: syz [ 200.396694][ T5719] usb 3-1: Manufacturer: syz [ 200.398766][ T29] audit: type=1400 audit(1787078168.693:1221): avc: denied { block_suspend } for pid=6745 comm="syz.4.195" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.424463][ T5719] usb 3-1: SerialNumber: syz [ 200.921653][ T29] audit: type=1400 audit(1787078169.093:1222): avc: denied { mount } for pid=6750 comm="syz.3.196" name="/" dev="rpc_pipefs" ino=12714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 200.971122][ T5719] usb 3-1: can't set config #1, error -71 [ 201.043288][ T5719] usb 3-1: USB disconnect, device number 3 [ 201.423380][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 201.467562][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 201.913122][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 201.931568][ T29] audit: type=1400 audit(1787078170.523:1223): avc: denied { ioctl } for pid=6760 comm="syz.1.198" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.959515][ T9] [ 201.961871][ T9] ============================================ [ 201.968009][ T9] WARNING: possible recursive locking detected [ 201.974168][ T9] syzkaller #0 Tainted: G L [ 201.980126][ T9] -------------------------------------------- [ 201.986253][ T9] kworker/0:0/9 is trying to acquire lock: [ 201.992043][ T9] ffff888033bd5928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 202.001781][ T9] [ 202.001781][ T9] but task is already holding lock: [ 202.009117][ T9] ffff88807a4d7128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 202.018850][ T9] [ 202.018850][ T9] other info that might help us debug this: [ 202.026887][ T9] Possible unsafe locking scenario: [ 202.026887][ T9] [ 202.034312][ T9] CPU0 [ 202.037577][ T9] ---- [ 202.040832][ T9] lock(&grp->list_lock); [ 202.045229][ T9] lock(&grp->list_lock); [ 202.049628][ T9] [ 202.049628][ T9] *** DEADLOCK *** [ 202.049628][ T9] [ 202.057748][ T9] May be due to missing lock nesting notation [ 202.057748][ T9] [ 202.066044][ T9] 3 locks held by kworker/0:0/9: [ 202.070961][ T9] #0: ffff88801c04f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 202.081396][ T9] #1: ffffc900000e7d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 202.093302][ T9] #2: ffff88807a4d7128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 202.103469][ T9] [ 202.103469][ T9] stack backtrace: [ 202.109357][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.109383][ T9] Tainted: [L]=SOFTLOCKUP [ 202.109389][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 202.109406][ T9] Workqueue: events snd_rawmidi_input_event_work [ 202.109432][ T9] Call Trace: [ 202.109440][ T9] [ 202.109447][ T9] dump_stack_lvl+0x100/0x190 [ 202.109471][ T9] print_deadlock_bug.cold+0xbd/0xca [ 202.109498][ T9] __lock_acquire+0x1256/0x1a40 [ 202.109524][ T9] lock_acquire+0x1b9/0x370 [ 202.109544][ T9] ? snd_seq_deliver_event+0x230/0x860 [ 202.109566][ T9] ? do_raw_read_unlock+0x3f/0x70 [ 202.109592][ T9] _raw_read_lock+0x5f/0x70 [ 202.109614][ T9] ? snd_seq_deliver_event+0x230/0x860 [ 202.109634][ T9] snd_seq_deliver_event+0x230/0x860 [ 202.109654][ T9] ? do_raw_spin_lock+0x128/0x260 [ 202.109680][ T9] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 202.109700][ T9] ? mark_held_locks+0x40/0x70 [ 202.109721][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 202.109745][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.109767][ T9] ? client_use_ptr+0x107/0x4b0 [ 202.109786][ T9] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 202.109810][ T9] queue_broadcast_event.isra.0+0x143/0x1b0 [ 202.109834][ T9] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 202.109860][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.109882][ T9] ? snd_seq_timer_start+0x1f0/0x2a0 [ 202.109900][ T9] snd_seq_control_queue+0x709/0xb70 [ 202.109924][ T9] ? __pfx_event_input_timer+0x10/0x10 [ 202.109942][ T9] __snd_seq_deliver_single_event+0x127/0x1c0 [ 202.109965][ T9] snd_seq_deliver_single_event+0x31f/0x8c0 [ 202.109987][ T9] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 202.110009][ T9] ? __lock_acquire+0x49f/0x1a40 [ 202.110033][ T9] snd_seq_deliver_event+0x44b/0x860 [ 202.110052][ T9] ? do_raw_spin_lock+0x128/0x260 [ 202.110077][ T9] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 202.110097][ T9] ? mark_held_locks+0x40/0x70 [ 202.110117][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.110139][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 202.110163][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.110185][ T9] ? client_use_ptr+0x107/0x4b0 [ 202.110203][ T9] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 202.110226][ T9] send_timer_event.isra.0+0x130/0x190 [ 202.110251][ T9] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 202.110272][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 202.110296][ T9] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 202.110323][ T9] snd_seq_oss_timer_start+0x1db/0x320 [ 202.110344][ T9] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 202.110365][ T9] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 202.110393][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.110415][ T9] ? find_slot+0x166/0x1b0 [ 202.110438][ T9] snd_seq_oss_midi_input+0x467/0xa30 [ 202.110463][ T9] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 202.110491][ T9] ? find_held_lock+0x2b/0x80 [ 202.110506][ T9] ? snd_seq_port_use_ptr+0x128/0x190 [ 202.110526][ T9] snd_seq_oss_event_input+0x194/0x250 [ 202.110547][ T9] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 202.110570][ T9] __snd_seq_deliver_single_event+0x127/0x1c0 [ 202.110593][ T9] snd_seq_deliver_single_event+0x31f/0x8c0 [ 202.110614][ T9] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 202.110636][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.110657][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 202.110680][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.110703][ T9] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 202.110722][ T9] snd_seq_deliver_event+0x2c1/0x860 [ 202.110745][ T9] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 202.110765][ T9] ? mark_held_locks+0x40/0x70 [ 202.110786][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 202.110809][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.110831][ T9] ? client_use_ptr+0x107/0x4b0 [ 202.110850][ T9] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 202.110873][ T9] snd_midi_input_event+0x32f/0x470 [ 202.110892][ T9] ? __pfx_snd_midi_input_event+0x10/0x10 [ 202.110913][ T9] ? __pfx_snd_midi_input_event+0x10/0x10 [ 202.110930][ T9] snd_rawmidi_input_event_work+0x61/0x80 [ 202.110951][ T9] process_one_work+0xa23/0x1940 [ 202.110975][ T9] ? __pfx_process_one_work+0x10/0x10 [ 202.110997][ T9] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 202.111020][ T9] worker_thread+0x5ef/0xe50 [ 202.111043][ T9] ? kthread+0x13a/0x450 [ 202.111059][ T9] ? __pfx_worker_thread+0x10/0x10 [ 202.111077][ T9] kthread+0x370/0x450 [ 202.111093][ T9] ? __pfx_kthread+0x10/0x10 [ 202.111111][ T9] ret_from_fork+0x72b/0xd50 [ 202.111135][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 202.111159][ T9] ? __switch_to+0x800/0x10f0 [ 202.111177][ T9] ? __pfx_kthread+0x10/0x10 [ 202.111195][ T9] ret_from_fork_asm+0x1a/0x30 [ 202.111225][ T9] [ 202.589084][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.597252][ T6002] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.669042][ T6757] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 202.685602][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.698989][ T6759] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 202.699879][ T29] audit: type=1400 audit(1787078171.293:1224): avc: denied { write } for pid=6753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.706092][ T6759] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 202.814137][ T6752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.826629][ T6752] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 202.852221][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.867484][ T6752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.884786][ T46] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 202.901743][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.912070][ T6752] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 202.920299][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.940397][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.949008][ T29] audit: type=1400 audit(1787078171.423:1225): avc: denied { write } for pid=6781 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.977781][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.996763][ T6752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.018510][ T46] as10x_usb: device has been detected [ 203.025133][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 203.035150][ T6752] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 203.048739][ T46] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 203.059628][ T6029] Buffer I/O error on dev loop2, logical block 0, async page read [ 203.068021][ T6752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.077817][ T6752] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 203.090572][ T46] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 203.110663][ T6752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.119658][ T46] as10x_usb: error during firmware upload part1 [ 203.119707][ T6752] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 203.133472][ T46] Registered device Abilis Systems DVB-Titan [ 203.177905][ T29] audit: type=1400 audit(1787078171.773:1226): avc: denied { write } for pid=6783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.265084][ T29] audit: type=1400 audit(1787078171.863:1227): avc: denied { write } for pid=6794 comm="rm" name="hook-state" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.088752][ T5726] usb 4-1: USB disconnect, device number 2 [ 204.223180][ T5726] Unregistered device Abilis Systems DVB-Titan [ 204.228182][ T5726] as10x_usb: device has been disconnected