last executing test programs: 11.786495782s ago: executing program 4 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) 9.494469687s ago: executing program 3 (id=125): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf", 0x7, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(essiv(ccm_base(ctr-camellia-aesni,poly1305-arm),blake2b'}, 0x19) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 9.281004149s ago: executing program 4 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (fail_nth: 1) 8.128504188s ago: executing program 1 (id=129): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfe", 0x27}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7", 0x89}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="258c0200008000001c0012676500000c00028005002c003c0000001400030062726964676530000000f8ffffff0000000000000000000000d4c080741444fd7c9185fae9cc1cd693f0495f58739d61c0bc22fe6f080ca38663d0a6d3280ba5a072ff788c93d0ccd0e5d68dae80534e228b4ce24b6b583272298259092b79109e1809360b415c9356dcc9e7a27de65450959c50129e272e29e03ec83388188ea9937ef65ba2f5cede5c96d55229c20768fd7a6c492771bec0a196"], 0x50}, 0x1, 0x0, 0x0, 0x4008841}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xffffffffffffff8e, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 8.114565581s ago: executing program 4 (id=130): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) 7.153936181s ago: executing program 2 (id=131): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x75, 0x5, {0xffffffffffffffff}, {0xee01}, 0x6, 0x5}) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000200)={0x114, 0x20, 0x1, 0x0, 0x25dfd3fc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}, {&(0x7f0000000340)={0x10d4, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="05d55e094d78e392eca4fd71d51674feceb91abd2b3458", @generic="f27b19470c305ce0092c52f908aa891ac48e03af728c7697f044bd34b246dd8e0b648ac67b0a5e59ceb7b232713d1581d5d2648a1edc0798e2d020daf5dacc7dd58766674443d2ac2678ca51735f7f6bf1412e23199fd9dc8fcb4b44aefafd00f3883a9f5a255fceaaecd5eb75ca7ceb821100a39f4a15501ec69b39875bdccfc29b730ea1b3b76f5cf36d484e7ad529f122b7b3d59dab933e504286e07f87a0bfd307dad198fa094a2cc835a58bce90488444c27bf84fc0864e7d274b26e500faf4812d894f882a7ce1b61c7e78d9458d523a1991037f938c29fd476864e2fbfcbfce1a1a46bd6a9957de90f331be609611763d29c3cdf87ca41c662aa612921c2c0007c614956380beacd2207f01abf39d12cb75a12aff4af0ccc231275550245a300072a028774e33035fb5904f39dad71b9aeafd0a0303e17f584e528ae1d64ba0773a4ef71759737ae36fc469698a40d2e347e11dc85e81c9f9690b3ae607104acb2e82cb6d685687aa06dcaf026bffe92f14982b89d240d287102b4cf911cb0711b73a6073f7c67c1651729876d58fbd930c632fc163953f956cfca37e381281dd6c1e758a180b25fefcf9ba335d848cb1908678710e9af1953c0e3f624421e0fa160ad19cea95c23a74a99f5dd60c70af5df123bcdc51d43d24cd8cca3751ad6346b1a51a3979f80a3fca97f0f850b979c53f8c2487bcc47384c7fa1b73edae0434c07de43a86fc3afb278d6e7c2c7674b21380e9ee59a043a3db53e11c7f3c134c2204edec614ff91daedc2c539a20691f4d275e2790500a4ab8166e886b6d21b2efd3690d515a62eb3bf68752ab621475090812d484a8d283ce7e5ce4a387df14a4c126f4b17bd2a4f225ff750bbfbd57a519bcb1258b39f1e36bbb66f5c6653a73f1fa40847244c426ad21cb755625edbfd2424417a072f01df06efd3cf702d7df0f563a2ee6b3f4eb6894bf66359b7d45fb04566350d3f8f9faadbc9723e7d6f055225de485675fb8fac17444c47f452b5af06286cf4995517861f9491a1263146080af499a22b7f9f67decee058200f245e46a7bffd889c76a57c3ff2b8a11c049d75150f16aff5357439fb7b029fc84800433b7ad4760e1278762fe5affc33b3dfccba4761fbb7c20e0335798ce16ccb59117e9a8b85effa9d8ec22b53aafddb8c1b60521443c0919ac80ffa996e57fe74f0e2ab88509fecd13b353b228280b6c89d08156c851847972faf76ffc813ea30b16c173adf9f9424a59a50b315d801d68efb58440c9401c46928290b0634577f4dbc0ddc1964e07836c6bed9074e5d72bb6befa10375a867aaecf203ee3f4a76ed703284fbf2fd170a40932641d49b3635bdd0e56b0a7fb66ada6c7387f02792762306b9692acb20c8c7c567cbaa59e52b6de9c20bc2ec74ef0b6dd277592d6c415efde061f5b772e906ecc71a1757d5df09079fcd243fbc7db4fb1bc118a31587243e62e793eb69b647fb2c634ce206b99f5f222f1ff3ffe94d3adb7f1e7f71a4d9fe29aec47475731e1badf80bbe6ef0a0ff3e882f6efa129a69b7b7a3c013f7d7a78a60b37248c9a2f04dd57626422d60a64b3ac976c494029c7643ba8f45ae270c4faa3a46596f1370abc1f852b8f6d66bb905bd52696e57a0e2b7f85de44f93fc0cff8e0afa5b2ffa343a036ae84463622c9fc8dd65a2ece8062997df7acb05e907edfb5b76b1e36ae34e2a51b9c1f52d5cc41e42e477b63c7890936056588e616ff391c63625b730b01ab70fcbaacd5742fbc3fcd7e82e2a2433c8ce7e26957518d3ead9cc48be7b9b50685e910f2fba2d3f188ef3695c6094ab79c7ad3c1406472f5ccf1b75fff3787ac66ac8e3cf8ab45e773002ae029fff7f18fbf82f1693f877369603847aee510cb5267a763e8c29a93e2c533463663bbd1c69f516a09e87cb0ec4db3a15531ad3bc414538f6fe477f9637ac4444a580062d76698d98352c495d41fce479a298ba079a5c0ff588f8077c48599ed89062088d5174379161e199004ae12b89ab5be08374695491a83fcd8128c30a45b9689c38886bcaefebb2cc7caa089ade0f7a96d0506c72d0727e2035928b1638e322f7386b1325d92ffcfc5842f88ec8795240a269ff41a0d26e0405662f5e4ec246f462365d77a8a960b7ec4c339e96f73162813b89da0646888e7c5284b94ab259ca9aef3c0131a4b6103c3f99340c72a26936a00d5b0cf96141af1329e5e2737b689268e0fbea78e3df1997f8ca636a6b99d90e175618e8afcb53bb750ee25d55ba3a1167d9642efe2f50b1155a212a805314e248fe1e405bac0abb42903521142376c1c8697769d5db6afffdf44f7108dcf8243008ecca643c4d4d2b3a2f5511a739894f35fe1f37bc7be1bb67ba86987db6ec421536cfea01080a6d8b954152ffb0a76c30fc1c08f34fd9e275fa839edeb27aa5cc713b268c33314e0b3754533526260e938f201cb8769ef19e96d4a52b59f161e9818235ba5ec1a1402fbb214aae86a9833dadc1fc1f0fb14f5882fc4a6f5a7ab0e9d539398551ef1086ad10c9420c068fc31e2473e9f30468142e00842c54a1313e9e78d46310b75f70851335d98d089bcc7cfd0317d548e126a29e32685e03be533d74b7dbf17026f487ae24684724acdb31bc8a952ff4337a8dadbe18cb209793815e16be442a71cab5c5fa2ab22e6cf4556fb87b16314293adabea9e4fb587e42bc84d1b6dae00944ee021c8e05346acd5319ac250c1a6187061d6cda3ff7db227b865e8cf262eddf633a4e7bbf2e2b3be9af8d5e33472dea0150f30f5d0633f439baf2aec1e371b7a99bc552bf84e019d7473ce2025c7add00e6acf7225f42c772788f0c03dda3f08dd227cde28f34b732b45f53fed3aeb8b9ba4cf07eb3b2b7d7b5314d20a06f8c11f24c2cb256a9c9c91b5d39decbd2ff133f129be7ee6f2313e6a1665193d5b472538ff3f8a7a613b8ad1175baf7fc8d2c5b5afc8cea96e2a810269373397b36d970068b5d5ac67b3e560f40f90171e25fa3f6fe2213af363b038dd19d93ee5d44848ad54dc523c49a18a46478836f46d2f0caa281d3b5665a70edba50c13c61f064e438f3ba000d80ae1e51438116affd8b92fe0466c3f4ca09546475fb4036e3aabe8358d53aca05709270e2947595e49489720aa01231f6a95a4287369a3f2d38bd1095f47cd052ef6af28e05da8145791d09534e50865c9c1c0e95a451ccf7747e40ea824035433a37aac37e860c776941ebee35fc33584234062cb728c4e7b5c4c2b48e7573460bb3d0757f49a97afd1af68979695b318c4e711a9241183265a1728520e070ee9b4f917f3a011f0628f3a61291c0c96e5d992c8abdf2afa2d744c495c0c57302690022a768c2abfa7f66ae366cf71a0ed7ab2d32016b43eff4c3b6671e44917e79a3be181ed6ce66874ad4e860af0b51e14ab0d9708bc07a2f889a2b3d9b85368bed4148622b654416eac473d9edd759fd6d3553b3ca919244100549d219dfbd735b54a7ada31b12c536708cd10e50ab7055d418fe40d1f58640ab58dae5692c7e5bbd57b07074fdd61cb9681436395523a544d2974ac9846108233dbe1ba49f09c12929f62c58e9644fbe38c5a5bbbca2c7290db15de947c5e500191a71e6e2e5a0674e5aa22915dbc422c9e782af2e39ba74b3e637f3454050da7a699341a36e6f50ce956f41fedf5cc4d2c7e853e97da8536e222a8ff22df5d5364748f27eceb197ff3875ac6aeec8c27848789d2934b721c317f5d39d47ac1804e035c0356c108af904017f82028faba5d64258781fe0f452edd24922f67b427c8e7467b8635604a7d6fdb81cd52b1585c22043965c1e607ac49904d64ba1471f3a542c2e683e6637c4962a3488433318f80955e24a45f9e7960be89f9c9a8436b095a96950d5cd57874512c2c029c17f0e4040d91938ab7e931260d8e20e10736822b6e77374e9c5e947475516600d8a01b2e6adf46d3725692d0f02a8e8a7937390aa2b4f13a9be8247427ed038f0a12c4b68903d28289ee899cf62d3eb5a1746b8d49e982b497a8e687c6d6349a428cbefefddc07c04f4206167b67d20464612fd2b8d21286bd1f52fa2f83318e40b327ba035b2d4de4f27fd5d612fb17c50eebbbfa9dc042ca10cc070d1b83d35926e3c674d83de2a1c3a1d34e4247514cb854731f4c8b05f2f530dd971159c8dd33c58e2c5518fe0c29a869f8f6099c0d64a3522ac977fc5c93c6f94843cfad8b316546303d9967168a307851ef73faa525d8a87cf86095e17be647270ea7182e5e5bbe78ab300af3de348c0414a5b54ff1a9477cbc75b810ea9f95677c2a682e961407bb454a9c89c907ada8c651ba9e0a4e06f5a094815e4c98440d439197478a2c33c1b80232ba8fe543dc8bf7c91ca879677e6ebfa7fd90e5c97a57e8c546f4e7f0df844dcfee1c457ecde75868762446f8ff89eeaa6fb21784acc053b590cebcebace544b351d2fde7667dd3432fe7d195e86d61a2238f151123826517a64d39de9f96351b812d80005b02292b89f25afe0d5bcd4acbf8c7c1b1340e847dcb3d931ae9c1b1f8259e2000667ebd2d51b2fd6b177e98f193747f08e572312084ee85e5664b842ddbf100ddb3055feb8e9d78acf14638f7569228a87aea2e48194b602a6af7a5b4cea078768eb2ced11594d734be1b8a8853b9b64956d60e0161f5d2ad4e928d646a7adcfa2180ac5bc3e8d6ee4f3bae08c32baaf62cf9934a1e9f9c3ba9f0230abf0b224dc6fbd4f250d4c2c8df04e7bb3ee1116fdf181fba00bc76f911f977913eb6f3579b48fffbd910566806d2da2e7290cac023f831088152a1d8466d50f0f29307bf2b4accfcc9d96fa09e1fe09b864715d46a0ced55f49e5a99baefeb80bd2c0b3e5248069c11ca83c8225adcc467b556d68fac6bb848f158da052c1c9cc21f4329834872f59dadf6752d708ed14b1fcdb341f4bf70550bc6588865538b71694a91f3fd47400c40e913b5b90594f9d30e2c51966e76df451250dad3f80c9939d06affcc36d6ac8c5aaca570ea9ae59c3789c0479002a693b13c5dac27b430bdb2ac52f2e362b4b420ac153aff213b53c320c9cf1bedc11a291487a64228394b7d8a6a27aeb912b70c849c3fe1aee1062220f4ef2a235e1f5d6e08e9f8c5efbae53615846801534829237eda0a6220d42e6f820377961fd0dbabb2a35c933620399121ee863b469848426cd7bbad9946905b40c28247290d9b17b2d0da7080ca13a1dc331985cf5c1cc95952ed7c6686966327179efb7402aa0805f238e919e6734e2ef8229fff31f0d2b8af8bcea456bc037d48d941b2894adbb9d0d251cf32864b9685249741eaf423ba2a88d2a0829cdcf71b938489eae07f58c14a3324fa3e10458d2060d1cd426e1e25aff0d45aeb14797449f2143fa7446e5769103915acadf88d64e1c5a40ed8aae6adcb28afc6982e941378513aa996e7a958cb223c31762619ba9a8b49b72a6ab0ada8ca61f3f864887fb80472d1777c31e4a05f698ca0d3c3b03fc835440b8993625c8f96044c1c1395ca0735f567b5fc3e64ed0dde4ff02e5f3b8ee6cf2ad750bc2fbed116668ac52894cad2c3f2429fe27aa8bb94675725b4e32bebd67a1c9a8c09519229f2c9ebed1a4236553eb2d0e42c3359de21ac2713681bca7ab0ead010bb79e4a6a7365ff0b3e2a10a374019a08e51bc05e74e3a35a31b1229e8fbaa7c58a8e516e04873db19359c84af13a5ab45febbc0ef250da7b55f0da302ca2595a1e88", @typed={0xc, 0x11, 0x0, 0x0, @u64=0x8fe0}, @nested={0x8e, 0x151, 0x0, 0x1, [@generic="43ff6d8ee92b7fdb9fd8c0c873dfe721f347331ba8565d42fc94a4e6f4fed3e52ae2068931c948089ef9d9a920e52cd36d29acce3c49b6f1c346f2f76f866dcda3c86e35ce863c666c3896191b7a147930a3242673eff864a8e27d21aa2b52d69c8a02e981f0c1c2055a7fb46d11988f57b3c5b708e297e3b4bd7675022243ec380dadc8946715912f28"]}, @typed={0x8, 0x62, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x15e, 0x0, 0x0, @uid=r3}]}, 0x10d4}, {&(0x7f0000001440)={0x23c, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x9a, 0x4d, 0x0, 0x0, @binary="6b8cc1af1c7363e2c60fae66eb5975ef7e6b6327f63b75f3fa4e1bfb6b1c6c11291c15038d628fa6e1aa9b9a7209a10634cdc30be203cf5625731fbb8b7ae539191cdbf46680e9d735bebb39dde518705ffe924ebda5d558c1ac2520c88557c7042c0ca60fb5277e78537ceb9b40b704fa5fa2654a1d996976a1cd256077eb243576f34c008fde182be2d5ee39216c48e3d0d7bb04d0"}, @generic="372b651e011c882e4530cebf47657d31fc037321012dea1b98e845f4c1a08224d8e00573227e21a009dbe51561a101d2606f1767fe559596e8c6eb3ad4a9720467745cf7c9f4cbf40cf007c4be", @generic="8bef63d457b9ac6cb1f2a2c14f632b9f08", @generic="8843f03004fb69323e5a58a4d79a7a45b12ceb3593c0ce9593e8ad3d21921fff7dcfda68ae34ec084dc2990d35c6d0ccfde62a085367dde496bbdbc83ccb64c08ef0da9ed7f6596578cfe8985e37a0063a9163c1c32d1f64d8e00b0788af705b70cc8c7b7a3c807531817598ffafa64a0e3848b5fc6df823121d3971ea6f25e1e600e8d32f932538634f4aed0b8c4a594ee1453096b781a15e1dd94475a6ee10115105a6424036d74aaa9e84c84ca596c12543fc1d3d9577a2c586285d4fd90fab04176b0b5aab4b4e4155ef35706f5d26e8362983a1bf99d2d81704f5a45c4f74ac1d2afdfd581b", @generic="6744bd7b193b3678c3672cc50deb74a9e89d5e20b3da734fafbeedc5d651c6c600e27fc6c9a3c0a1798ccdafddf5ec91c994930d1695d2a156d39bd6baa0f58679da8242f12c46"]}, 0x23c}, {&(0x7f0000001680)={0xec, 0x24, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}, @typed={0xcb, 0x97, 0x0, 0x0, @binary="d4f382b7ef307bc44d7ce1b46cc0d066243bd5178b13d9ceaeb7ac7a8c7559afa90ccad6feea4bab820ad667f1c5647529d6abb1808fb6601a56b7298d174e0ea4a0c24b1899f7836fcb66091f13a9c3cecb53b145bc0dcb1fb022681453d46f4d6a6288a5c321ec1b67b5662195a4d41a3437b961b9ea7ba8c7502561ec3f1f4c6822fa670f6c9fcbb67f93aadc7c36c365bdf436ec0d7369a6a6ec107f22e1c48fe89804e18677d3ea9ee1e8f3e848c461ab5571e3117ef7bff138abfb0c6c2a69891dbed5aa"}, @typed={0x8, 0x15b, 0x0, 0x0, @fd=r1}]}, 0xec}, {&(0x7f0000001780)={0xdc, 0x34, 0x200, 0x70bd26, 0x25dfdbff, "", [@nested={0x14, 0x4a, 0x0, 0x1, [@typed={0x4, 0x48}, @nested={0x4, 0xf1}, @typed={0x8, 0xdc, 0x0, 0x0, @pid=r2}]}, @nested={0x44, 0x138, 0x0, 0x1, [@nested={0x4, 0x163}, @typed={0x1e, 0x1c, 0x0, 0x0, @binary="9b201affcc8dcb79f907ca15b06922e20c84c8c1a968ce2a0490"}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x5, 0x11c, 0x0, 0x0, @str='\x00'}]}, @generic="fe9125f2aa62313f59163d4f7fcb39419ea279bf83fb89ad8fd2fa9203f5c6202b27f8309b42434f30c7ccc2200f514619d17feee44c140bb6e995fcb59694fa6fb98a54668775da3813aa7a3eac6a50b5425ebba276c2b47f014bee220a8a45f6b3f6f07b7362eca60fc390a99ec33ef9ff"]}, 0xdc}], 0x5, 0x0, 0x0, 0x20008001}, 0x0) 7.036432851s ago: executing program 4 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2b, 0x3505}]}, 0x50}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000100)=0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x20, 0x0) ioctl$COMEDI_RANGEINFO(r6, 0x80106408, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x50bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x40}}, 0x20000800) 6.387279522s ago: executing program 2 (id=133): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x10001, {{0xa, 0x4e24, 0x3ff, @remote, 0xb}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @remote, 0x800}}, {{0xa, 0x4e20, 0x8, @mcast1, 0xf}}, {{0xa, 0x4e24, 0x732, @remote, 0x8001}}, {{0xa, 0x4e20, 0x7, @private2, 0x4}}]}, 0x290) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000400)={0x28, 0x2, 0x0, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1000000}) 6.01181185s ago: executing program 3 (id=134): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffc008050000010b007e000a43b820a8e8c9881db660"], 0x88) 5.96147567s ago: executing program 2 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f00000002c0)='ocfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0xfffffffffffffdf9) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r7, &(0x7f0000004540)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x8c02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000080000004300000007"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x3, r8}, 0x38) 5.898383328s ago: executing program 1 (id=136): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000083f000/0x4000)=nil, 0x4000, 0xa, 0x10, 0xffffffffffffffff, 0x9a973000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250100000000000000094106000000001800"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x400000000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000003cc0)={0x28, 0x2, 0x0, {0x6, 0x140000000, 0x1}}, 0x28) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f021}) 5.757338552s ago: executing program 4 (id=137): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f000075b000/0x1000)=nil, 0x1000, 0x0, 0x100011, 0xffffffffffffffff, 0x48ea5000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) membarrier(0x4, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x7fff, 0x48a001) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) 5.298424817s ago: executing program 1 (id=140): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/226, 0xe2}], 0x1, 0x9, 0x22) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x11c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2361}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40c140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020f0280000000000000000000000000e0719b9d8987e53873f0c6fb603007d9e739ec66f56ecd0000"], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'rti802\x00', [0x3, 0xdc, 0x80000003, 0x8, 0x2f, 0x2006, 0xf1, 0x5, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x0, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x5, 0x7fffffff, 0x4, 0x7ffd]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$inet(0x2, 0x2, 0x1) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="08001497733f5d3e99a73a6322f8af4942a80fdf116de6dd9cf433e22ffe6cebb541cc50ba9bb87b01edc0f144a2579eae526abcb1d117d171aad755", 0x3c}], 0x1}}], 0x1, 0x2004000) recvfrom(r5, 0x0, 0x0, 0x100, &(0x7f0000000280)=@un=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x80) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$midi(&(0x7f00000003c0), 0x3, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000400)={0xffffffff, r7, 0x1}) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) 5.153394001s ago: executing program 3 (id=141): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x0, "c25cacd8771e5486e44edb756b1c5d6bdae54790c1178269f1040e91f77011a9ddefde923acb1657adabaa378aa6cf1a217c708f44092ac0be1e878cfb2e61a1ad2eb33bd8670da0e565e3211a93c594901ab7bac217e99d3f4ed101e3b5463d3d8709b94e3875bbef5382ec6d831ecca59be07d1601b8ee7487f8bf675227f4f861e4c582ee09f0ba55662194e19516f736d3c437cfebce34e1a2379cd364c8a8c3cee03dffdc6c6a3a404e567dda7dd283a1e83b8cbfef18cda8cb3d7d8f72e1a018c697bbd1bc0939a94f3b1da8c311fd381ace06a3ccde21c3f20a5a85bc6dc4ea59405ffc3d89fe0ffde0049cf3c78781e500"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000340)=@get={0x1, 0x0, 0xfffffffffffffff9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000740)=""/243, 0xf3}], 0x7, 0x9, 0x9) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r5 = socket(0x15, 0x3, 0x0) connect$unix(r5, &(0x7f00000003c0)=@abs={0xa}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) getsockname$packet(r1, 0x0, &(0x7f0000000940)) r6 = syz_io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0xe90c, 0x800, 0x3, 0x31b, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 4.151720676s ago: executing program 0 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x12, 0x600, 0x1b8, 0x202, 0x288, 0x2e8, 0x2e8, 0x288, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xff, 0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='0 1000 2000000000 0\n\x00', 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00004000000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="018000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000050000000400"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="0d5a7f1108000000000020000000", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 4.045040797s ago: executing program 1 (id=143): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x4, 0xa782}, 0xc) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, &(0x7f0000000100)=0x101, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) timer_create(0x2, 0x0, 0x0) r6 = socket(0x28, 0x5, 0x0) sendto$packet(r6, 0x0, 0x0, 0x4040881, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x40}, &(0x7f0000000180)=0x8) r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMERASE(r7, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) 3.697299679s ago: executing program 0 (id=144): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000019180)={0x9, 0x7, 0xc, 0x1ff, 0x3, "0400ebffffffffffffc73cebffff000800", 0x8, 0x100000}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="5fc83dd3b7a25254be360df7b8e1", 0x0, 0x6333, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) statx(r3, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000700)) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$SHM_UNLOCK(r5, 0xc) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) 3.021579406s ago: executing program 2 (id=145): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x1400, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 2.609017343s ago: executing program 4 (id=146): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x8, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0xf, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000240)={0x0, 0x7ffffffe, 0x38, 0x3}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd7, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x7fe0000], 0x80a0000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x1000008e, 0x3, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84d}, 0x3, 0xed}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="c4e1a9d83d00000000c4c1cf2a79fdb9a80a0000b807000000ba000000000f30c4e11d73d9069ae0235f8d6d000f20c035020000000f22c00f79199a77000000a9002e65f30fbd934230000066bad10466b8060066ef"}], 0x1, 0x60, 0x0, 0x40) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.423824633s ago: executing program 1 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x9, 0x8, 0x0, 0x1, "86d595277a"}]}, 0x28}, 0x1, 0x300000000000000, 0x0, 0x4}, 0x0) 2.369838103s ago: executing program 2 (id=148): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x182000, 0x18b) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x1, 0x2) memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffff000, 0x1, 0x800, 0x2, 0x8000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.367861759s ago: executing program 0 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x3ff, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_tcp(0x2, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x6}, 0x4e20, 0x4, 0x4e23, 0x4000, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x300, 0x5, 0xeb, 0xffff, 0x3, 0x5, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffc}, {0xfffffffb, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42880) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) 2.169146148s ago: executing program 3 (id=150): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000083f000/0x4000)=nil, 0x4000, 0xa, 0x10, 0xffffffffffffffff, 0x9a973000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250100000000000000094106000000001800"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x400000000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000003cc0)={0x28, 0x2, 0x0, {0x6, 0x140000000, 0x1}}, 0x28) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f021}) 1.353273846s ago: executing program 0 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) (fail_nth: 1) 1.336053322s ago: executing program 2 (id=152): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fanotify_init(0x40, 0x80000) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x5, 0x1, @thr={&(0x7f0000000080)="63e6f143274488f35b45323accdd0b9cf2", &(0x7f0000000140)="dd3c98999413b47ed63aad50f87444401cbc140abe5afd9e8837be9de744ac8d538c4936765e861a299cc118b00a83dd9248774d4b35deb4b1b9a365b02892e189965433386f97d8b2d989b95a08a58fe63e7681880b398f10950ab601499226a2e5f36a7802d15990f7b0ff67bb78e758e2a1adb6e3635b5bbedd17"}}) 1.244543719s ago: executing program 3 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa8, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.146314134s ago: executing program 1 (id=154): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x3e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r5 = syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r3, 0x300, 0x0, 0x1, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x20000000) r6 = syz_open_dev$video(&(0x7f0000000280), 0x20000009, 0x101801) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000000)={0x2, 0x3, 0x5, {0x1, 0x8, 0x800006, 0x20007}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000100), 0x12) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r9 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0x4) ioctl$int_in(r8, 0x5421, &(0x7f0000000140)=0x6) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x80800) 293.859749ms ago: executing program 0 (id=155): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xa888, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) 151.368209ms ago: executing program 0 (id=156): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x10bb41) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x80c01) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) syz_clone3(0x0, 0x0) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xf6, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x516, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0xcd, 0xf7, {0x7, 0x25, 0x1, 0xc, 0xf, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x96, 0x74, 0x3, {0x7, 0x25, 0x1, 0x8, 0x9, 0x37}}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000540)=@string={0x2}}, {0x61, &(0x7f0000000600)=@string={0x61, 0x3, "3be397cf2cd76e00e4236f76ce50a221305a3f5bf557e79a3d81cc13ae494ef3e88b5048705caa6dde3e90782cbce8b20092c594b02eb51178d11e21928c3b60002cf532d0aca750b12db22840be38bb4c037f7f1a4a68aa5aef5407a50725"}}, {0x0, 0x0}, {0x0, 0x0}]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 0s ago: executing program 3 (id=157): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140003000000003000000000000190780a010100ac1414aa0400907800000000450000000000000000110000ac1414aa7f000001"], 0x3e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0024000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xe) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r7, @ANYBLOB="000827bd7000fcdbdf251100000008000500ff0300000800050009000000080004000000000008000600300f00002400018008000600776c6300060002003b000000080009000e000000060002003b00000008000500090000000800060007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4002090}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x3, @mcast1, 0x6}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008d40)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x880) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xff, 0xffffffff], [0x0, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'nr0\x00', {0xff}, {}, 0x33, 0x98, 0x6, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x2, 0x1, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'wlan0\x00', 'veth1_to_team\x00', {}, {}, 0x2f, 0x2, 0x0, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xff}) kernel console output (not intermixed with test programs): [ 54.360555][ T30] audit: type=1400 audit(1785610313.465:108): avc: denied { write } for pid=5461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.419466][ T30] audit: type=1400 audit(1785610313.525:109): avc: denied { write } for pid=5473 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.724503][ T30] audit: type=1400 audit(1785610313.835:110): avc: denied { transition } for pid=5481 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.763673][ T30] audit: type=1400 audit(1785610313.835:111): avc: denied { noatsecure } for pid=5481 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.783529][ T30] audit: type=1400 audit(1785610313.835:112): avc: denied { write } for pid=5481 comm="sh" path="pipe:[4566]" dev="pipefs" ino=4566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 56.451415][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 56.451432][ T30] audit: type=1400 audit(1785610315.555:125): avc: denied { write } for pid=5557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.517198][ T30] audit: type=1400 audit(1785610315.625:126): avc: denied { write } for pid=5568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.802115][ T30] audit: type=1400 audit(1785610315.905:127): avc: denied { write } for pid=5571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.870933][ T30] audit: type=1400 audit(1785610315.975:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 65.392597][ T30] audit: type=1400 audit(1785610324.495:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.416133][ T30] audit: type=1400 audit(1785610324.525:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.418942][ T5594] cgroup: Unknown subsys name 'net' [ 65.445281][ T30] audit: type=1400 audit(1785610324.555:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.595487][ T5594] cgroup: Unknown subsys name 'cpuset' [ 65.603127][ T5594] cgroup: Unknown subsys name 'rlimit' [ 65.693463][ T30] audit: type=1400 audit(1785610324.805:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.717103][ T30] audit: type=1400 audit(1785610324.805:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.742469][ T30] audit: type=1400 audit(1785610324.805:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.763154][ T30] audit: type=1400 audit(1785610324.805:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.790478][ T30] audit: type=1400 audit(1785610324.805:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.816188][ T30] audit: type=1400 audit(1785610324.805:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.816621][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.848568][ T30] audit: type=1400 audit(1785610324.955:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.925190][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.932141][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.789898][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.451263][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 70.451277][ T30] audit: type=1400 audit(1785610329.555:144): avc: denied { create } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.495067][ T30] audit: type=1400 audit(1785610329.555:145): avc: denied { read write } for pid=5606 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.519311][ T30] audit: type=1400 audit(1785610329.555:146): avc: denied { open } for pid=5606 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.545256][ T30] audit: type=1400 audit(1785610329.555:143): avc: denied { create } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.565387][ T30] audit: type=1400 audit(1785610329.595:147): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="socket:[4679]" dev="sockfs" ino=4679 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.577940][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.597563][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.598109][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.608027][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.620618][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.625419][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.629332][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.636000][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.642572][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.650199][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.663413][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.671099][ T30] audit: type=1400 audit(1785610329.765:148): avc: denied { read } for pid=5606 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.671477][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.702180][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.702886][ T30] audit: type=1400 audit(1785610329.765:149): avc: denied { open } for pid=5606 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.710613][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.741634][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.748795][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.759687][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.767791][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.780659][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.780772][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.796034][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.796701][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.810414][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.823383][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.830887][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.860431][ T30] audit: type=1400 audit(1785610329.765:150): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.891461][ T30] audit: type=1400 audit(1785610329.805:151): avc: denied { module_request } for pid=5606 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.940197][ T30] audit: type=1400 audit(1785610329.855:152): avc: denied { sys_module } for pid=5606 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.884723][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.893109][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.900303][ T5606] bridge_slave_0: entered allmulticast mode [ 71.908305][ T5606] bridge_slave_0: entered promiscuous mode [ 71.934635][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.942009][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.949558][ T5606] bridge_slave_1: entered allmulticast mode [ 71.957243][ T5606] bridge_slave_1: entered promiscuous mode [ 72.060761][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.090474][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.152262][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.159482][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.166824][ T5608] bridge_slave_0: entered allmulticast mode [ 72.173689][ T5608] bridge_slave_0: entered promiscuous mode [ 72.182239][ T5606] team0: Port device team_slave_0 added [ 72.201908][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.209113][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.217096][ T5608] bridge_slave_1: entered allmulticast mode [ 72.223836][ T5608] bridge_slave_1: entered promiscuous mode [ 72.231552][ T5606] team0: Port device team_slave_1 added [ 72.304080][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.311343][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.318551][ T5613] bridge_slave_0: entered allmulticast mode [ 72.325491][ T5613] bridge_slave_0: entered promiscuous mode [ 72.332289][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.339416][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.346789][ T5607] bridge_slave_0: entered allmulticast mode [ 72.353586][ T5607] bridge_slave_0: entered promiscuous mode [ 72.367606][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.377591][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.384672][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.410729][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.422341][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.429538][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.437664][ T5613] bridge_slave_1: entered allmulticast mode [ 72.444400][ T5613] bridge_slave_1: entered promiscuous mode [ 72.451004][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.458128][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.465357][ T5607] bridge_slave_1: entered allmulticast mode [ 72.472015][ T5607] bridge_slave_1: entered promiscuous mode [ 72.486659][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.496451][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.503458][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.529358][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.553407][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.560582][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.568017][ T5609] bridge_slave_0: entered allmulticast mode [ 72.574726][ T5609] bridge_slave_0: entered promiscuous mode [ 72.605700][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.612954][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.620099][ T5609] bridge_slave_1: entered allmulticast mode [ 72.627045][ T5609] bridge_slave_1: entered promiscuous mode [ 72.642010][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.653918][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.680380][ T5608] team0: Port device team_slave_0 added [ 72.687921][ T5608] team0: Port device team_slave_1 added [ 72.695052][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.705685][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.716761][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.726647][ T49] Bluetooth: hci0: command tx timeout [ 72.729203][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.803052][ T49] Bluetooth: hci1: command tx timeout [ 72.816147][ T5606] hsr_slave_0: entered promiscuous mode [ 72.822255][ T5606] hsr_slave_1: entered promiscuous mode [ 72.829435][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.836423][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.862477][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.874804][ T5613] team0: Port device team_slave_0 added [ 72.881789][ T5607] team0: Port device team_slave_0 added [ 72.883649][ T49] Bluetooth: hci2: command tx timeout [ 72.887772][ T5620] Bluetooth: hci4: command tx timeout [ 72.893343][ T49] Bluetooth: hci3: command tx timeout [ 72.906486][ T5607] team0: Port device team_slave_1 added [ 72.913297][ T5609] team0: Port device team_slave_0 added [ 72.920884][ T5609] team0: Port device team_slave_1 added [ 72.927243][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.934260][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.960200][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.972393][ T5613] team0: Port device team_slave_1 added [ 73.025333][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.032295][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.058407][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.081926][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.088979][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.115035][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.127246][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.134256][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.160441][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.183190][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.190202][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.216303][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.233201][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.240157][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.266176][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.298516][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.305523][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.331529][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.361853][ T5608] hsr_slave_0: entered promiscuous mode [ 73.368215][ T5608] hsr_slave_1: entered promiscuous mode [ 73.374773][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 73.380548][ T5608] Cannot create hsr debugfs directory [ 73.462186][ T5607] hsr_slave_0: entered promiscuous mode [ 73.468594][ T5607] hsr_slave_1: entered promiscuous mode [ 73.474694][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 73.480415][ T5607] Cannot create hsr debugfs directory [ 73.489546][ T5609] hsr_slave_0: entered promiscuous mode [ 73.496383][ T5609] hsr_slave_1: entered promiscuous mode [ 73.502250][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 73.508184][ T5609] Cannot create hsr debugfs directory [ 73.559654][ T5613] hsr_slave_0: entered promiscuous mode [ 73.565750][ T5613] hsr_slave_1: entered promiscuous mode [ 73.571628][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 73.577630][ T5613] Cannot create hsr debugfs directory [ 73.847077][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.858297][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.880342][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.889946][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.906099][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.916447][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.935572][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.945699][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.991262][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.002570][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.015667][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.027282][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.047687][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.057166][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.065409][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.074970][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.144263][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.152818][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.160830][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.169845][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.181504][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.191013][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.199570][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.209102][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.269608][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.307467][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.323554][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.332569][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.341064][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.349664][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.357706][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.366061][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.379991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.387464][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.396596][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.406900][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.440298][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.447411][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.495995][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.505975][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.513988][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.522375][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.531481][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.540632][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.549753][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.558299][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.586777][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.635641][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.656681][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.667612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.674717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.697232][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.704341][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.790506][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.806356][ T49] Bluetooth: hci0: command tx timeout [ 74.829953][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.837174][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.863228][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.870378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.890274][ T49] Bluetooth: hci1: command tx timeout [ 74.904263][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.960713][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.963195][ T49] Bluetooth: hci3: command tx timeout [ 74.968456][ T5617] Bluetooth: hci2: command tx timeout [ 74.979755][ T5620] Bluetooth: hci4: command tx timeout [ 74.998289][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.023606][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.060460][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.067649][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.096300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.103447][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.131161][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.138334][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.151484][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.158654][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.366889][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.505285][ T5606] veth0_vlan: entered promiscuous mode [ 75.536268][ T5606] veth1_vlan: entered promiscuous mode [ 75.620436][ T5606] veth0_macvtap: entered promiscuous mode [ 75.652817][ T5606] veth1_macvtap: entered promiscuous mode [ 75.675389][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.741790][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.807656][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.881908][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.948526][ T5608] veth0_vlan: entered promiscuous mode [ 75.992673][ T5608] veth1_vlan: entered promiscuous mode [ 76.061809][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.087425][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.103180][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.107140][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.145913][ T5607] veth0_vlan: entered promiscuous mode [ 76.157366][ T5608] veth0_macvtap: entered promiscuous mode [ 76.168219][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.196094][ T5608] veth1_macvtap: entered promiscuous mode [ 76.211437][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.212753][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.228038][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.249947][ T5607] veth1_vlan: entered promiscuous mode [ 76.260692][ T30] audit: type=1400 audit(1785610335.365:153): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.GUrAAD/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.300230][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.306440][ T30] audit: type=1400 audit(1785610335.365:154): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.338159][ T30] audit: type=1400 audit(1785610335.395:155): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.GUrAAD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.341633][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.364979][ T30] audit: type=1400 audit(1785610335.405:156): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.393049][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.408496][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.436071][ T30] audit: type=1400 audit(1785610335.405:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.GUrAAD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.445978][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.482449][ T30] audit: type=1400 audit(1785610335.405:158): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.GUrAAD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.506171][ T5607] veth0_macvtap: entered promiscuous mode [ 76.514362][ T30] audit: type=1400 audit(1785610335.405:159): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.525267][ T5607] veth1_macvtap: entered promiscuous mode [ 76.541051][ T30] audit: type=1400 audit(1785610335.445:160): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.567199][ T30] audit: type=1400 audit(1785610335.445:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.594962][ T30] audit: type=1400 audit(1785610335.475:162): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.623706][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.665523][ T5609] veth0_vlan: entered promiscuous mode [ 76.723940][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.739298][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.761517][ T5609] veth1_vlan: entered promiscuous mode [ 76.796629][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.805593][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.820441][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.834598][ T195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.857507][ T5613] veth0_vlan: entered promiscuous mode [ 76.884117][ T5620] Bluetooth: hci0: command tx timeout [ 76.902060][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.904026][ T5613] veth1_vlan: entered promiscuous mode [ 76.917443][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.924934][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.933955][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960370][ T5609] veth0_macvtap: entered promiscuous mode [ 76.966126][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.966149][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.981854][ T5620] Bluetooth: hci1: command tx timeout [ 76.993315][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.023754][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.034792][ T5609] veth1_macvtap: entered promiscuous mode [ 77.044103][ T5617] Bluetooth: hci4: command tx timeout [ 77.045977][ T49] Bluetooth: hci2: command tx timeout [ 77.049579][ T5620] Bluetooth: hci3: command tx timeout [ 77.096190][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.114728][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.115159][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.138126][ T5613] veth0_macvtap: entered promiscuous mode [ 77.154903][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.164915][ T5613] veth1_macvtap: entered promiscuous mode [ 77.169394][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 77.186960][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.198631][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.204992][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.213924][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.227915][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 77.237358][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.260651][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.272237][ T10] usb 4-1: config 0 descriptor?? [ 77.291282][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.392919][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.433896][ T1020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.507052][ T195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.519481][ T195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.541629][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.553468][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 77.566925][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.569183][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 116, changing to 10 [ 77.586701][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.600128][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.610463][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1153, setting to 1024 [ 77.626826][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 77.636397][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.644951][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.658940][ T24] usb 3-1: config 0 descriptor?? [ 77.672058][ T5804] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.706899][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.714678][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.716209][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.729161][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.739560][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.740883][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 77.757779][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.766112][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 77.784163][ T195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.798041][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 77.812676][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 77.836411][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 77.860876][ T10] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 77.913217][ T1020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.928138][ T10] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 77.970295][ T10] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 78.035546][ T10] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -5 [ 78.153262][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 78.185403][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 78.234869][ T24] usb 3-1: USB disconnect, device number 2 [ 78.386740][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.441168][ T5827] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 78.973834][ T5620] Bluetooth: hci0: command tx timeout [ 79.043731][ T5620] Bluetooth: hci1: command tx timeout [ 79.123246][ T5620] Bluetooth: hci2: command tx timeout [ 79.134031][ T5620] Bluetooth: hci3: command tx timeout [ 79.134257][ T49] Bluetooth: hci4: command tx timeout [ 79.147175][ T5831] Zero length message leads to an empty skb [ 79.210331][ T5835] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 79.284140][ T5838] netlink: 'syz.4.11': attribute type 11 has an invalid length. [ 79.296141][ T5839] netlink: 'syz.0.12': attribute type 2 has an invalid length. [ 79.325856][ T5838] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11'. [ 79.327196][ T5840] netlink: zone id is out of range [ 79.340886][ T5840] netlink: zone id is out of range [ 79.347450][ T5840] netlink: zone id is out of range [ 79.352747][ T5840] netlink: zone id is out of range [ 79.369767][ T5840] netlink: zone id is out of range [ 79.375917][ T5840] netlink: zone id is out of range [ 79.382785][ T5840] netlink: del zone limit has 4 unknown bytes [ 79.543856][ T5735] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.705482][ T5735] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.721533][ T5735] usb 1-1: not running at top speed; connect to a high speed hub [ 79.743661][ T5735] usb 1-1: config 8 has an invalid interface number: 43 but max is 1 [ 79.757162][ T5735] usb 1-1: config 8 has an invalid interface number: 35 but max is 1 [ 79.772673][ T5735] usb 1-1: config 8 has no interface number 0 [ 79.784178][ T5735] usb 1-1: config 8 has no interface number 1 [ 79.795625][ T5735] usb 1-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 79.820862][ T5735] usb 1-1: config 8 interface 43 has no altsetting 0 [ 79.833150][ T5735] usb 1-1: config 8 interface 35 has no altsetting 0 [ 79.867158][ T5735] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 79.919176][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.944477][ T5735] usb 1-1: Product: syz [ 79.957168][ T5735] usb 1-1: Manufacturer: syz [ 79.965855][ T5735] usb 1-1: SerialNumber: syz [ 80.207160][ T5735] ums-alauda 1-1:8.43: USB Mass Storage device detected [ 80.240768][ T5735] scsi host1: usb-storage 1-1:8.43 [ 80.264982][ T5735] hub 1-1:8.35: Invalid hub with more than one config or interface [ 80.282911][ T5735] hub 1-1:8.35: probe with driver hub failed with error -22 [ 80.303294][ T5735] ums-alauda 1-1:8.35: USB Mass Storage device detected [ 80.773772][ T955] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 80.912930][ T955] usb 2-1: device descriptor read/64, error -71 [ 81.152954][ T955] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 81.294105][ T955] usb 2-1: device descriptor read/64, error -71 [ 81.302995][ T53] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 81.327087][ T53] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 81.437489][ T955] usb usb2-port1: attempt power cycle [ 81.792918][ T955] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 81.824330][ T955] usb 2-1: device descriptor read/8, error -71 [ 82.062926][ T955] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 82.086815][ T955] usb 2-1: device descriptor read/8, error -71 [ 82.212707][ T955] usb usb2-port1: unable to enumerate USB device [ 82.561509][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 82.561544][ T30] audit: type=1400 audit(1785610341.665:233): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.591104][ T5713] usb 4-1: USB disconnect, device number 2 [ 82.621685][ T30] audit: type=1400 audit(1785610341.725:234): avc: denied { setopt } for pid=5860 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.668191][ T30] audit: type=1400 audit(1785610341.725:235): avc: denied { bind } for pid=5860 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.699984][ T5735] usb 1-1: USB disconnect, device number 2 [ 82.715232][ T30] audit: type=1400 audit(1785610341.725:236): avc: denied { name_bind } for pid=5860 comm="syz.2.17" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.723687][ T60] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 82.742397][ T30] audit: type=1400 audit(1785610341.725:237): avc: denied { node_bind } for pid=5860 comm="syz.2.17" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 82.745900][ T5864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.766750][ T30] audit: type=1400 audit(1785610341.725:238): avc: denied { write } for pid=5860 comm="syz.2.17" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.798417][ T53] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 82.829093][ T53] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 82.836304][ T57] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 82.847783][ T30] audit: type=1400 audit(1785610341.725:239): avc: denied { connect } for pid=5860 comm="syz.2.17" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.881380][ T57] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 82.924611][ T60] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 82.934878][ T57] sd 1:0:0:1: [sdc] Sense not available. [ 82.950315][ T57] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 82.968236][ T57] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 83.011366][ T57] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 83.013956][ T30] audit: type=1400 audit(1785610341.725:240): avc: denied { name_connect } for pid=5860 comm="syz.2.17" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.024948][ T57] sd 1:0:0:1: [sdc] Asking for cache data failed [ 83.071926][ T30] audit: type=1400 audit(1785610341.945:241): avc: denied { lock } for pid=5860 comm="syz.2.17" path="socket:[8938]" dev="sockfs" ino=8938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.342645][ T5870] 0x000000000007-0x000000020000 : "" [ 83.573253][ T5870] ftl_cs: FTL header corrupt! [ 83.605011][ T30] audit: type=1400 audit(1785610342.445:242): avc: denied { write } for pid=5863 comm="syz.3.18" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 83.687747][ T57] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 84.097681][ T57] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 84.242578][ T5889] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 84.403551][ T5889] netlink: 'syz.0.21': attribute type 8 has an invalid length. [ 84.604474][ T5889] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 84.720220][ T5889] netlink: 180 bytes leftover after parsing attributes in process `syz.0.21'. [ 84.752915][ T5889] NCSI netlink: No device for ifindex 7388455 [ 84.893392][ T5809] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 85.045282][ T5809] usb 2-1: device descriptor read/64, error -71 [ 85.055805][ T5908] netlink: 14 bytes leftover after parsing attributes in process `syz.4.26'. [ 85.107852][ T5819] udevd[5819]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 85.220672][ T5879] udevd[5879]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 85.231772][ T5906] udevd[5906]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 85.262775][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 85.277123][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 85.323905][ T5809] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 85.395979][ T5622] udevd[5622]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 85.417072][ T5735] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.482921][ T5809] usb 2-1: device descriptor read/64, error -71 [ 85.585004][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 85.595463][ T5809] usb usb2-port1: attempt power cycle [ 85.611617][ T5735] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 85.627429][ T5735] usb 4-1: config 0 has an invalid interface number: 149 but max is -1 [ 85.655699][ T5735] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 85.665338][ T5735] usb 4-1: config 0 has no interface number 0 [ 85.671662][ T5735] usb 4-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 85.698673][ T5735] usb 4-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.701172][ T5909] ima: policy update failed [ 85.732231][ T5735] usb 4-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 85.768637][ T5735] usb 4-1: config 0 interface 149 has no altsetting 0 [ 85.785725][ T5735] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 85.796041][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.804506][ T5735] usb 4-1: Product: syz [ 85.808839][ T5735] usb 4-1: Manufacturer: syz [ 85.813797][ T5735] usb 4-1: SerialNumber: syz [ 85.822158][ T5735] usb 4-1: config 0 descriptor?? [ 85.831033][ T5735] hub 4-1:0.149: bad descriptor, ignoring hub [ 85.837444][ T5735] hub 4-1:0.149: probe with driver hub failed with error -5 [ 85.963275][ T5809] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 85.983705][ T5809] usb 2-1: device descriptor read/8, error -71 [ 86.195644][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.214137][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.236325][ T5809] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 86.261509][ T5809] usb 2-1: device descriptor read/8, error -71 [ 86.318653][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 86.337674][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 86.352643][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 86.363726][ T5809] usb usb2-port1: unable to enumerate USB device [ 86.408671][ T805] cfg80211: failed to load regulatory.db [ 86.423521][ T5950] kAFS: unable to lookup cell '' [ 86.616590][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.35'. [ 86.770254][ T5956] binder: 5955:5956 ioctl c0306201 200000000080 returned -14 [ 87.112896][ T5720] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.152929][ T955] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 87.295870][ T5720] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 87.312224][ T5720] usb 1-1: config 0 has no interface number 0 [ 87.327527][ T5720] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 87.358690][ T5720] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.371050][ T955] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 87.390793][ T955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.401102][ T5720] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.417447][ T955] usb 3-1: config 0 has no interface number 0 [ 87.428260][ T5720] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 87.445993][ T955] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.459468][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 87.477498][ T955] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.490381][ T5720] usb 1-1: Product: syz [ 87.496883][ T5720] usb 1-1: SerialNumber: syz [ 87.509479][ T955] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 87.525112][ T5720] usb 1-1: config 0 descriptor?? [ 87.530991][ T955] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 87.541693][ T955] usb 3-1: config 0 interface 244 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 87.545704][ T5720] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 87.566273][ T955] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 87.575762][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.593091][ T955] usb 3-1: config 0 descriptor?? [ 87.602363][ T5720] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 87.750909][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.759432][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.767095][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.774322][ T5720] usb 1-1: USB disconnect, device number 3 [ 87.780232][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.780248][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 87.805877][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 87.805894][ T30] audit: type=1400 audit(1785610346.855:326): avc: denied { read } for pid=5955 comm="syz.0.38" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.890547][ T5720] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 87.985068][ T30] audit: type=1400 audit(1785610347.085:327): avc: denied { ioctl } for pid=5955 comm="syz.0.38" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.035752][ T30] audit: type=1400 audit(1785610347.125:328): avc: denied { ioctl } for pid=5955 comm="syz.0.38" path=2F6465762F696E7075742F6576656E7434202864656C6574656429 dev="devtmpfs" ino=2816 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.089540][ T955] usb 3-1: string descriptor 0 read error: -71 [ 88.101515][ T955] cypress_m8 3-1:0.244: DeLorme Earthmate USB converter detected [ 88.110747][ T955] earthmate ttyUSB0: required endpoint is missing [ 88.120948][ T955] usb 3-1: USB disconnect, device number 3 [ 88.192540][ T955] cypress_m8 3-1:0.244: device disconnected [ 88.299094][ T30] audit: type=1400 audit(1785610347.405:329): avc: denied { read } for pid=5975 comm="syz.4.44" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.345951][ T30] audit: type=1400 audit(1785610347.405:330): avc: denied { open } for pid=5975 comm="syz.4.44" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.453662][ T5720] usb 4-1: USB disconnect, device number 3 [ 88.603320][ T5983] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 88.823114][ T5720] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.853134][ T30] audit: type=1400 audit(1785610347.905:331): avc: denied { ioctl } for pid=5975 comm="syz.4.44" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.055437][ T30] audit: type=1400 audit(1785610348.165:332): avc: denied { write } for pid=5986 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.102766][ T30] audit: type=1400 audit(1785610348.195:333): avc: denied { read } for pid=5986 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.237993][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.258595][ T5720] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.279300][ T5720] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 89.288670][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.296815][ T30] audit: type=1400 audit(1785610348.405:334): avc: denied { create } for pid=5989 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.320032][ T5720] usb 4-1: Product: syz [ 89.338029][ T5720] usb 4-1: Manufacturer: syz [ 89.356460][ T5720] usb 4-1: SerialNumber: syz [ 89.378720][ T5720] usb 4-1: config 0 descriptor?? [ 89.383925][ T30] audit: type=1400 audit(1785610348.405:335): avc: denied { name_bind } for pid=5989 comm="syz.4.48" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.423174][ T5720] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 89.488482][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.501880][ T5993] netlink: 120 bytes leftover after parsing attributes in process `syz.4.48'. [ 89.548226][ T5720] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 89.579600][ T5720] usb 4-1: media controller created [ 89.624075][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.647545][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.650367][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.700545][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.722713][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.752310][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.784264][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.827593][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.835045][ T5720] DVB: Unable to find symbol tda10046_attach() [ 89.854906][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.872223][ T5720] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 89.892560][ T5720] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 89.904892][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.934236][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.944716][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.49'. [ 89.961053][ T5997] netlink: 'syz.4.49': attribute type 12 has an invalid length. [ 89.968993][ T5997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.49'. [ 90.282952][ T805] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.302984][ T5713] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.437351][ T805] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.446590][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.455534][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 90.460739][ T805] usb 1-1: Product: syz [ 90.465081][ T805] usb 1-1: Manufacturer: syz [ 90.469673][ T805] usb 1-1: SerialNumber: syz [ 90.475829][ T5713] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 90.486207][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.492977][ T5807] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 90.511752][ T5713] usb 5-1: config 0 descriptor?? [ 90.524917][ T5713] as10x_usb: device has been detected [ 90.530992][ T5713] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 90.545759][ T5713] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 90.581677][ T5720] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 90.624533][ T5720] usb 4-1: USB disconnect, device number 4 [ 90.662709][ T5713] as10x_usb: error during firmware upload part1 [ 90.676310][ T5807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.679049][ T5713] Registered device nBox DVB-T Dongle [ 90.704045][ T5807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.724081][ T805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 90.727237][ T5807] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 90.746028][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.756035][ T5807] usb 3-1: SerialNumber: syz [ 91.789146][ T805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 91.801430][ T5807] usb 3-1: 0:2 : does not exist [ 91.806510][ T805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 91.821643][ T805] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 91.835277][ T29] usb 5-1: USB disconnect, device number 2 [ 92.164414][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 92.854126][ T29] Unregistered device nBox DVB-T Dongle [ 92.861021][ T29] as10x_usb: device has been disconnected [ 93.018452][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 93.018467][ T30] audit: type=1400 audit(1785610352.125:351): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.070445][ T5807] usb 1-1: USB disconnect, device number 4 [ 93.088600][ T6024] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.138429][ T30] audit: type=1400 audit(1785610352.125:352): avc: denied { open } for pid=5606 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.194346][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 93.212916][ T30] audit: type=1400 audit(1785610352.125:353): avc: denied { ioctl } for pid=5606 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.247447][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.267560][ T30] audit: type=1400 audit(1785610352.295:354): avc: denied { create } for pid=6025 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.306532][ T30] audit: type=1400 audit(1785610352.295:355): avc: denied { connect } for pid=6025 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.386297][ T6030] netlink: 'syz.1.54': attribute type 10 has an invalid length. [ 93.394705][ T29] usb 5-1: device descriptor read/64, error -71 [ 93.401136][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.54'. [ 93.684547][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 93.693577][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 93.703021][ T6034] netlink: 'syz.1.58': attribute type 5 has an invalid length. [ 93.710620][ T6034] netlink: 'syz.1.58': attribute type 12 has an invalid length. [ 94.071511][ T805] usb 3-1: USB disconnect, device number 4 [ 94.171522][ T30] audit: type=1400 audit(1785610353.275:356): avc: denied { ioctl } for pid=6035 comm="" path="socket:[10695]" dev="sockfs" ino=10695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.201791][ T6039] FAULT_INJECTION: forcing a failure. [ 94.201791][ T6039] name failslab, interval 1, probability 0, space 0, times 1 [ 94.224515][ T6039] CPU: 1 UID: 0 PID: 6039 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT(full) [ 94.224539][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.224549][ T6039] Call Trace: [ 94.224555][ T6039] [ 94.224561][ T6039] dump_stack_lvl+0x100/0x190 [ 94.224588][ T6039] should_fail_ex.cold+0x5/0xa [ 94.224611][ T6039] should_failslab+0xc2/0x120 [ 94.224634][ T6039] __kmalloc_noprof+0xfc/0x820 [ 94.224654][ T6039] ? rcu_is_watching+0x12/0xc0 [ 94.224680][ T6039] ? tomoyo_realpath_from_path+0xb6/0x690 [ 94.224704][ T6039] tomoyo_realpath_from_path+0xb6/0x690 [ 94.224726][ T6039] tomoyo_path_number_perm+0x23c/0x580 [ 94.224749][ T6039] ? tomoyo_path_number_perm+0x22e/0x580 [ 94.224773][ T6039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.224785][ T30] audit: type=1400 audit(1785610353.275:357): avc: denied { append } for pid=6038 comm="syz.0.62" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.224819][ T6039] ? find_held_lock+0x2b/0x80 [ 94.224832][ T6039] ? __fget_files+0x215/0x3d0 [ 94.224846][ T6039] ? hook_file_ioctl_common+0x140/0x440 [ 94.224866][ T6039] ? __fget_files+0x215/0x3d0 [ 94.224885][ T6039] ? __fget_files+0x21f/0x3d0 [ 94.224904][ T6039] security_file_ioctl+0xd3/0x230 [ 94.224927][ T6039] __x64_sys_ioctl+0xb7/0x210 [ 94.224951][ T6039] do_syscall_64+0x115/0x870 [ 94.224969][ T6039] ? clear_bhb_loop+0x40/0x90 [ 94.224989][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.225004][ T6039] RIP: 0033:0x7f4dab59e019 [ 94.225018][ T6039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.225032][ T6039] RSP: 002b:00007f4dac3a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.225047][ T6039] RAX: ffffffffffffffda RBX: 00007f4dab825fa0 RCX: 00007f4dab59e019 [ 94.225057][ T6039] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 94.225065][ T6039] RBP: 00007f4dac3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 94.225074][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.225083][ T6039] R13: 00007f4dab826038 R14: 00007f4dab825fa0 R15: 00007ffd80353168 [ 94.225104][ T6039] [ 94.225138][ T6039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.234169][ T30] audit: type=1400 audit(1785610353.275:358): avc: denied { setopt } for pid=6035 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.583755][ T60] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.593057][ T30] audit: type=1400 audit(1785610353.695:359): avc: denied { read } for pid=6035 comm="syz.4.59" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.616289][ T30] audit: type=1400 audit(1785610353.695:360): avc: denied { open } for pid=6035 comm="syz.4.59" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.678612][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.717369][ T6047] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 94.904849][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 95.039485][ T6039] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 95.066551][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 95.089742][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 95.102777][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 95.123077][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 95.140156][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 95.159120][ T24] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 95.172578][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.184324][ T24] usb 1-1: Product: syz [ 95.189538][ T24] usb 1-1: Manufacturer: syz [ 95.218049][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.235606][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.260531][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.270212][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.278553][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.294036][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.346556][ T24] usb 1-1: USB2VGA dongle found at address 5 [ 95.385727][ T24] usb 1-1: Allocated 8 output buffers [ 95.412279][ T24] usb 1-1: Failed to early initialize device [ 95.582389][ T6040] usb 1-1: Failed to initialize device [ 95.606384][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 95.663802][ T24] usb 1-1: USB disconnect, device number 5 [ 95.926310][ T6061] netlink: 400 bytes leftover after parsing attributes in process `syz.3.67'. [ 96.011062][ T5809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.021829][ T6062] netlink: 'syz.3.67': attribute type 8 has an invalid length. [ 96.029784][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 96.173027][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 96.185785][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.209252][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.243951][ T5809] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.253909][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.282754][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.298093][ T6070] xt_hashlimit: size too large, truncated to 1048576 [ 96.307721][ T5809] usb 3-1: config 0 descriptor?? [ 96.334823][ T6070] xt_hashlimit: max too large, truncated to 1048576 [ 96.341668][ T6070] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 96.785361][ T5735] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 96.942946][ T5735] usb 2-1: device descriptor read/64, error -71 [ 97.385739][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 97.391802][ T5809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.401746][ T5809] usb 3-1: USB disconnect, device number 5 [ 97.462955][ T5735] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 97.592927][ T5735] usb 2-1: device descriptor read/64, error -71 [ 97.717683][ T5735] usb usb2-port1: attempt power cycle [ 97.953727][ T6104] syz.2.82 (6104): drop_caches: 4 [ 98.072965][ T5735] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 98.093589][ T5735] usb 2-1: device descriptor read/8, error -71 [ 98.112915][ T5809] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 98.142958][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.264367][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.277926][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.289461][ T5809] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 98.294151][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 98.298684][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.308993][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 98.316752][ T5809] usb 5-1: Product: syz [ 98.326778][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.330799][ T5809] usb 5-1: Manufacturer: syz [ 98.341588][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 98.346632][ T5735] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 98.355873][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 98.363467][ T5809] usb 5-1: SerialNumber: syz [ 98.373656][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 98.384446][ T5809] usb 5-1: config 0 descriptor?? [ 98.390801][ T29] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 98.401777][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.402812][ T5809] hub 5-1:0.0: bad descriptor, ignoring hub [ 98.410709][ T29] usb 4-1: Product: syz [ 98.419335][ T5735] usb 2-1: device descriptor read/8, error -71 [ 98.420538][ T29] usb 4-1: Manufacturer: syz [ 98.431323][ T5809] hub 5-1:0.0: probe with driver hub failed with error -5 [ 98.442965][ T6102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.443867][ T5809] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 98.450575][ T6102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.466656][ T6102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.475205][ T6102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.482684][ T6102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.490202][ T6102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.500792][ T29] usb 4-1: USB2VGA dongle found at address 5 [ 98.516269][ T29] usb 4-1: Allocated 8 output buffers [ 98.525947][ T29] usb 4-1: Failed to early initialize device [ 98.534619][ T5735] usb usb2-port1: unable to enumerate USB device [ 98.603249][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.612691][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.617491][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.622992][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.709570][ T6102] usb 4-1: Failed to initialize device [ 98.718091][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 98.732591][ T5809] usb 4-1: USB disconnect, device number 5 [ 99.266169][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 99.266186][ T30] audit: type=1400 audit(1785610358.375:378): avc: denied { read } for pid=6116 comm="syz.2.86" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 99.300156][ T6119] FAULT_INJECTION: forcing a failure. [ 99.300156][ T6119] name failslab, interval 1, probability 0, space 0, times 0 [ 99.316674][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(full) [ 99.316697][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.316705][ T6119] Call Trace: [ 99.316711][ T6119] [ 99.316718][ T6119] dump_stack_lvl+0x100/0x190 [ 99.316745][ T6119] should_fail_ex.cold+0x5/0xa [ 99.316763][ T6119] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 99.316793][ T6119] should_failslab+0xc2/0x120 [ 99.316816][ T6119] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.316838][ T6119] ? skb_clone+0x190/0x400 [ 99.316865][ T6119] skb_clone+0x190/0x400 [ 99.316888][ T6119] netlink_deliver_tap+0xaed/0xcc0 [ 99.316922][ T6119] netlink_unicast+0x62b/0x850 [ 99.316944][ T6119] ? __pfx_netlink_unicast+0x10/0x10 [ 99.316960][ T6119] ? __build_skb_around+0x278/0x390 [ 99.316984][ T6119] netlink_sendmsg+0x8b0/0xda0 [ 99.317005][ T6119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.317032][ T6119] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.317062][ T6119] ____sys_sendmsg+0xa4d/0xbe0 [ 99.317088][ T6119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.317108][ T6119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.317146][ T6119] ___sys_sendmsg+0x190/0x1e0 [ 99.317165][ T6119] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.317181][ T6119] ? __lock_acquire+0x49f/0x1a40 [ 99.317202][ T6119] ? get_pid_task+0x106/0x250 [ 99.317246][ T6119] __sys_sendmsg+0x160/0x210 [ 99.317269][ T6119] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.317305][ T6119] do_syscall_64+0x115/0x870 [ 99.317325][ T6119] ? clear_bhb_loop+0x40/0x90 [ 99.317348][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.317366][ T6119] RIP: 0033:0x7f1841d9e019 [ 99.317381][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.317396][ T6119] RSP: 002b:00007f1842c1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.317413][ T6119] RAX: ffffffffffffffda RBX: 00007f1842025fa0 RCX: 00007f1841d9e019 [ 99.317424][ T6119] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 99.317433][ T6119] RBP: 00007f1842c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.317442][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.317450][ T6119] R13: 00007f1842026038 R14: 00007f1842025fa0 R15: 00007ffdd82a9e28 [ 99.317472][ T6119] [ 99.317492][ T6119] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.85'. [ 99.349824][ T30] audit: type=1400 audit(1785610358.375:379): avc: denied { open } for pid=6116 comm="syz.2.86" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 99.364120][ T6119] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.85'. [ 99.387438][ T30] audit: type=1400 audit(1785610358.405:380): avc: denied { create } for pid=6117 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.440530][ T5735] usb 5-1: USB disconnect, device number 5 [ 99.466591][ T30] audit: type=1400 audit(1785610358.455:381): avc: denied { write } for pid=6120 comm="syz.3.87" name="functions" dev="configfs" ino=9512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.653511][ T30] audit: type=1400 audit(1785610358.455:382): avc: denied { write } for pid=6120 comm="syz.3.87" name="target" dev="configfs" ino=1484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.688591][ T30] audit: type=1400 audit(1785610358.485:383): avc: denied { write } for pid=6120 comm="syz.3.87" name="usb_gadget" dev="configfs" ino=11004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.731025][ T30] audit: type=1400 audit(1785610358.485:384): avc: denied { write } for pid=6120 comm="syz.3.87" name="naa.1234567890abcdef" dev="configfs" ino=11007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.755646][ T30] audit: type=1400 audit(1785610358.485:385): avc: denied { write } for pid=6120 comm="syz.3.87" name="core" dev="configfs" ino=1485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.807922][ T30] audit: type=1400 audit(1785610358.485:386): avc: denied { write } for pid=6120 comm="syz.3.87" name="rd_mcp_0" dev="configfs" ino=11017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.831070][ T30] audit: type=1400 audit(1785610358.515:387): avc: denied { write } for pid=6120 comm="syz.3.87" name="lun" dev="configfs" ino=11011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.152927][ T5735] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.343148][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 100.355945][ T5735] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.395764][ T5735] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.435934][ T5735] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.459006][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.473703][ T5735] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 100.499036][ T6153] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 100.499957][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.521810][ T5735] usb 5-1: config 0 descriptor?? [ 100.732127][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.769374][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.990676][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.015350][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.041303][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.066939][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.086825][ T6165] netlink: 'syz.3.100': attribute type 12 has an invalid length. [ 101.097742][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.108103][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.115634][ T6165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.100'. [ 101.125722][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.140095][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.174437][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.195860][ T5735] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 101.220673][ T5735] appleir 0003:05AC:8240.0002: report_id 11546 is invalid [ 101.328433][ T5735] appleir 0003:05AC:8240.0002: item 0 2 1 8 parsing failed [ 101.351493][ T5735] appleir 0003:05AC:8240.0002: parse failed [ 101.382504][ T5735] appleir 0003:05AC:8240.0002: probe with driver appleir failed with error -22 [ 101.484192][ T5713] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.675950][ T5735] usb 5-1: USB disconnect, device number 6 [ 101.828842][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 101.854411][ T5713] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 101.902283][ T5713] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.940348][ T5713] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.970163][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.995163][ T5713] usbtmc 1-1:16.0: bulk endpoints not found [ 102.192937][ T5735] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.726347][ T6166] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 102.815963][ T6185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.99'. [ 103.253381][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.524422][ T6166] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 103.775815][ T6190] input: syz0 as /devices/virtual/input/input7 [ 103.804184][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.843084][ T29] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 103.873877][ T5735] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 103.901180][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.909447][ T5735] usb 5-1: Product: syz [ 103.913735][ T5735] usb 5-1: Manufacturer: syz [ 103.918455][ T5735] usb 5-1: SerialNumber: syz [ 103.979981][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.017929][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 104.028187][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 104.055653][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 104.066284][ T6185] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 104.088469][ T29] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 104.098844][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.125798][ T29] usb 2-1: Product: syz [ 104.136653][ T6185] bond0 (unregistering): Released all slaves [ 104.137207][ T29] usb 2-1: Manufacturer: syz [ 104.185586][ T29] usb 2-1: SerialNumber: syz [ 104.250300][ T29] usb 2-1: config 0 descriptor?? [ 104.320566][ T6204] netlink: 'syz.3.111': attribute type 12 has an invalid length. [ 104.330975][ T6204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.111'. [ 104.392496][ T6191] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.400149][ T6191] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 104.412429][ T29] usb 2-1: ucan: probing device on interface #0 [ 104.420467][ T805] usb 1-1: USB disconnect, device number 6 [ 104.454062][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.575347][ T5735] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:4c:67:5b:0c:98 [ 104.616347][ T5735] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 104.620442][ T29] usb 2-1: ucan: could not read protocol version, ret=-32 [ 104.640199][ T29] usb 2-1: ucan: probe failed; try to update the device firmware [ 104.695106][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 104.695122][ T30] audit: type=1400 audit(1785610363.805:417): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.723443][ T29] usb 2-1: USB disconnect, device number 14 [ 104.743146][ T30] audit: type=1400 audit(1785610363.805:418): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.793952][ T30] audit: type=1400 audit(1785610363.805:419): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.826361][ T30] audit: type=1400 audit(1785610363.805:420): avc: denied { read } for pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=2486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.850813][ T30] audit: type=1400 audit(1785610363.805:421): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.876189][ T30] audit: type=1400 audit(1785610363.805:422): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.914958][ T30] audit: type=1400 audit(1785610363.935:423): avc: denied { read } for pid=6211 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.946069][ T30] audit: type=1400 audit(1785610363.935:424): avc: denied { read open } for pid=6211 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.991110][ T30] audit: type=1400 audit(1785610363.935:425): avc: denied { getattr } for pid=6211 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.141425][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.219215][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.278492][ T30] audit: type=1400 audit(1785610364.385:426): avc: denied { write } for pid=6210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.321130][ T29] usb 5-1: USB disconnect, device number 7 [ 105.372899][ T5735] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.558891][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 105.582728][ T5735] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.720786][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.540909][ T5735] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 106.585439][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.917082][ T5735] usb 1-1: config 0 descriptor?? [ 107.792069][ T5735] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 107.846034][ T6226] ima: policy update failed [ 108.266514][ T29] usb 1-1: USB disconnect, device number 7 [ 108.563380][ T6277] futex_wake_op: syz.0.124 tries to shift op by 144; fix this program [ 109.143253][ T6290] FAULT_INJECTION: forcing a failure. [ 109.143253][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.762551][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT(full) [ 109.762576][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.762585][ T6290] Call Trace: [ 109.762591][ T6290] [ 109.762597][ T6290] dump_stack_lvl+0x100/0x190 [ 109.762620][ T6290] should_fail_ex.cold+0x5/0xa [ 109.762634][ T6290] _copy_from_user+0x2e/0xd0 [ 109.762649][ T6290] copy_msghdr_from_user+0x9f/0x4c0 [ 109.762661][ T6290] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 109.762677][ T6290] ___sys_sendmsg+0x106/0x1e0 [ 109.762688][ T6290] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.762698][ T6290] ? __lock_acquire+0x49f/0x1a40 [ 109.762711][ T6290] ? get_pid_task+0x106/0x250 [ 109.762735][ T6290] __sys_sendmsg+0x160/0x210 [ 109.762749][ T6290] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.762769][ T6290] do_syscall_64+0x115/0x870 [ 109.762783][ T6290] ? clear_bhb_loop+0x40/0x90 [ 109.762795][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.762806][ T6290] RIP: 0033:0x7f1841d9e019 [ 109.762820][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.762834][ T6290] RSP: 002b:00007f1842c1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.762851][ T6290] RAX: ffffffffffffffda RBX: 00007f1842025fa0 RCX: 00007f1841d9e019 [ 109.762861][ T6290] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 109.762870][ T6290] RBP: 00007f1842c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.762879][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.762888][ T6290] R13: 00007f1842026038 R14: 00007f1842025fa0 R15: 00007ffdd82a9e28 [ 109.762905][ T6290] [ 109.968468][ T6294] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 109.976234][ T6294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.125'. [ 111.251273][ T6306] netlink: 220 bytes leftover after parsing attributes in process `syz.2.131'. [ 111.263467][ T6294] dummy0: entered promiscuous mode [ 111.905816][ T6302] netlink: 'syz.1.129': attribute type 12 has an invalid length. [ 111.998146][ T6310] program syz.4.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.072989][ T6302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.129'. [ 112.519859][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 112.519877][ T30] audit: type=1400 audit(1785610371.625:452): avc: denied { bind } for pid=6315 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.607429][ T30] audit: type=1400 audit(1785610371.625:453): avc: denied { listen } for pid=6315 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.674334][ T30] audit: type=1400 audit(1785610371.635:454): avc: denied { append } for pid=6313 comm="syz.2.135" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.784698][ T30] audit: type=1400 audit(1785610371.805:455): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.058266][ T30] audit: type=1400 audit(1785610372.165:456): avc: denied { read } for pid=6329 comm="syz.0.139" path="socket:[12383]" dev="sockfs" ino=12383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.234711][ T6333] comedi comedi0: rti802: I/O base address not correctly aligned [ 113.305666][ T30] audit: type=1400 audit(1785610372.415:457): avc: denied { connect } for pid=6332 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.393689][ T30] audit: type=1400 audit(1785610372.445:458): avc: denied { write } for pid=6332 comm="syz.1.140" laddr=172.20.20.10 lport=52030 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.561869][ T30] audit: type=1400 audit(1785610372.465:459): avc: denied { read } for pid=6332 comm="syz.1.140" laddr=172.20.20.10 lport=52030 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.349028][ T6348] SET target dimension over the limit! [ 114.377145][ T30] audit: type=1400 audit(1785610373.485:460): avc: denied { write } for pid=6328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.801692][ T30] audit: type=1400 audit(1785610373.905:461): avc: denied { write } for pid=6356 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.888042][ T6337] ima: policy update failed [ 117.082017][ T6387] FAULT_INJECTION: forcing a failure. [ 117.082017][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 117.139616][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.0.151 Not tainted syzkaller #0 PREEMPT(full) [ 117.139652][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.139662][ T6387] Call Trace: [ 117.139669][ T6387] [ 117.139676][ T6387] dump_stack_lvl+0x100/0x190 [ 117.139710][ T6387] should_fail_ex.cold+0x5/0xa [ 117.139733][ T6387] should_failslab+0xc2/0x120 [ 117.139759][ T6387] __kmalloc_noprof+0xfc/0x820 [ 117.139780][ T6387] ? rcu_is_watching+0x12/0xc0 [ 117.139807][ T6387] ? tomoyo_realpath_from_path+0xb6/0x690 [ 117.139831][ T6387] tomoyo_realpath_from_path+0xb6/0x690 [ 117.139854][ T6387] tomoyo_path_number_perm+0x23c/0x580 [ 117.139879][ T6387] ? tomoyo_path_number_perm+0x22e/0x580 [ 117.139906][ T6387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.139955][ T6387] ? find_held_lock+0x2b/0x80 [ 117.139972][ T6387] ? __fget_files+0x215/0x3d0 [ 117.139989][ T6387] ? hook_file_ioctl_common+0x140/0x440 [ 117.140009][ T6387] ? __fget_files+0x215/0x3d0 [ 117.140031][ T6387] ? __fget_files+0x21f/0x3d0 [ 117.140052][ T6387] security_file_ioctl+0xd3/0x230 [ 117.140082][ T6387] __x64_sys_ioctl+0xb7/0x210 [ 117.140110][ T6387] do_syscall_64+0x115/0x870 [ 117.140131][ T6387] ? clear_bhb_loop+0x40/0x90 [ 117.140153][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.140171][ T6387] RIP: 0033:0x7fd93279e019 [ 117.140186][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.140202][ T6387] RSP: 002b:00007fd9335dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.140221][ T6387] RAX: ffffffffffffffda RBX: 00007fd932a25fa0 RCX: 00007fd93279e019 [ 117.140232][ T6387] RDX: 0000200000000040 RSI: 00000000400454e2 RDI: 0000000000000003 [ 117.140242][ T6387] RBP: 00007fd9335dd090 R08: 0000000000000000 R09: 0000000000000000 [ 117.140252][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.140262][ T6387] R13: 00007fd932a26038 R14: 00007fd932a25fa0 R15: 00007ffc98896fa8 [ 117.140284][ T6387] [ 117.140291][ T6387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.483055][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.623068][ T29] usb 3-1: device descriptor read/64, error -71 [ 117.983749][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.128227][ T29] usb 3-1: device descriptor read/64, error -71 [ 118.166660][ T6365] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 118.262206][ T29] usb usb3-port1: attempt power cycle [ 118.276153][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 118.276164][ T30] audit: type=1400 audit(1785610377.385:468): avc: denied { write } for pid=6406 comm="syz.0.156" name="rd_mcp_0" dev="configfs" ino=11017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.320355][ T6408] [ 118.322711][ T6408] ====================================================== [ 118.329719][ T6408] WARNING: possible circular locking dependency detected [ 118.336730][ T6408] syzkaller #0 Not tainted [ 118.341120][ T6408] ------------------------------------------------------ [ 118.348111][ T6408] syz.0.156/6408 is trying to acquire lock: [ 118.353976][ T6408] ffffffff8fd88028 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 118.363360][ T6408] [ 118.363360][ T6408] but task is already holding lock: [ 118.370698][ T6408] ffff88807869a740 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 118.380343][ T6408] [ 118.380343][ T6408] which lock already depends on the new lock. [ 118.380343][ T6408] [ 118.390721][ T6408] [ 118.390721][ T6408] the existing dependency chain (in reverse order) is: [ 118.399710][ T6408] [ 118.399710][ T6408] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 118.408380][ T6408] lock_acquire+0x1b9/0x370 [ 118.413390][ T6408] down_write+0x8b/0x1f0 [ 118.418138][ T6408] configfs_depend_item_unlocked+0xf3/0x6a0 [ 118.424534][ T6408] usbg_make_tpg+0x261/0x620 [ 118.429638][ T6408] target_fabric_make_tpg+0xab/0x8c0 [ 118.435451][ T6408] configfs_mkdir+0x51e/0xb70 [ 118.440651][ T6408] vfs_mkdir+0x361/0x850 [ 118.445402][ T6408] filename_mkdirat+0x48b/0x5e0 [ 118.450756][ T6408] __x64_sys_mkdir+0x6b/0x90 [ 118.455845][ T6408] do_syscall_64+0x115/0x870 [ 118.460962][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.467355][ T6408] [ 118.467355][ T6408] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 118.474981][ T6408] lock_acquire+0x1b9/0x370 [ 118.479990][ T6408] __mutex_lock+0x1a4/0x1bd0 [ 118.485084][ T6408] usbg_make_tpg+0x1a4/0x620 [ 118.490177][ T6408] target_fabric_make_tpg+0xab/0x8c0 [ 118.495978][ T6408] configfs_mkdir+0x51e/0xb70 [ 118.501162][ T6408] vfs_mkdir+0x361/0x850 [ 118.505913][ T6408] filename_mkdirat+0x48b/0x5e0 [ 118.511272][ T6408] __x64_sys_mkdir+0x6b/0x90 [ 118.516368][ T6408] do_syscall_64+0x115/0x870 [ 118.521463][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.527856][ T6408] [ 118.527856][ T6408] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 118.535741][ T6408] lock_acquire+0x1b9/0x370 [ 118.540747][ T6408] __mutex_lock+0x1a4/0x1bd0 [ 118.545839][ T6408] usbg_make_tpg+0x10b/0x620 [ 118.550932][ T6408] target_fabric_make_tpg+0xab/0x8c0 [ 118.556738][ T6408] configfs_mkdir+0x51e/0xb70 [ 118.561919][ T6408] vfs_mkdir+0x361/0x850 [ 118.566678][ T6408] filename_mkdirat+0x48b/0x5e0 [ 118.572028][ T6408] __x64_sys_mkdir+0x6b/0x90 [ 118.577118][ T6408] do_syscall_64+0x115/0x870 [ 118.582209][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.588613][ T6408] [ 118.588613][ T6408] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 118.596406][ T6408] check_prev_add+0xeb/0xe60 [ 118.601497][ T6408] __lock_acquire+0x136c/0x1a40 [ 118.606846][ T6408] lock_acquire+0x1b9/0x370 [ 118.611850][ T6408] __mutex_lock+0x1a4/0x1bd0 [ 118.616943][ T6408] configfs_rmdir+0x5ae/0x950 [ 118.622130][ T6408] vfs_rmdir+0x328/0x8a0 [ 118.626877][ T6408] filename_rmdir+0x31a/0x5c0 [ 118.632065][ T6408] __x64_sys_rmdir+0x46/0x70 [ 118.637155][ T6408] do_syscall_64+0x115/0x870 [ 118.642246][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.648640][ T6408] [ 118.648640][ T6408] other info that might help us debug this: [ 118.648640][ T6408] [ 118.658842][ T6408] Chain exists of: [ 118.658842][ T6408] &subsys->su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 118.658842][ T6408] [ 118.673071][ T6408] Possible unsafe locking scenario: [ 118.673071][ T6408] [ 118.680495][ T6408] CPU0 CPU1 [ 118.685844][ T6408] ---- ---- [ 118.691201][ T6408] lock(&sb->s_type->i_mutex_key#25); [ 118.696654][ T6408] lock(&opts->dep_lock); [ 118.703571][ T6408] lock(&sb->s_type->i_mutex_key#25); [ 118.711530][ T6408] lock(&subsys->su_mutex); [ 118.716100][ T6408] [ 118.716100][ T6408] *** DEADLOCK *** [ 118.716100][ T6408] [ 118.724219][ T6408] 3 locks held by syz.0.156/6408: [ 118.729217][ T6408] #0: ffff88801d312450 (sb_writers#15){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 118.738609][ T6408] #1: ffff8880785efa40 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 118.749304][ T6408] #2: ffff88807869a740 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 118.759377][ T6408] [ 118.759377][ T6408] stack backtrace: [ 118.765244][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 118.765261][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.765268][ T6408] Call Trace: [ 118.765273][ T6408] [ 118.765278][ T6408] dump_stack_lvl+0x100/0x190 [ 118.765295][ T6408] print_circular_bug.cold+0x178/0x1c7 [ 118.765318][ T6408] check_noncircular+0x146/0x160 [ 118.765334][ T6408] ? kasan_save_stack+0x30/0x50 [ 118.765351][ T6408] check_prev_add+0xeb/0xe60 [ 118.765365][ T6408] ? vfs_rmdir+0x328/0x8a0 [ 118.765383][ T6408] ? __x64_sys_rmdir+0x46/0x70 [ 118.765398][ T6408] __lock_acquire+0x136c/0x1a40 [ 118.765416][ T6408] lock_acquire+0x1b9/0x370 [ 118.765431][ T6408] ? configfs_rmdir+0x5ae/0x950 [ 118.765449][ T6408] ? __pfx___might_resched+0x10/0x10 [ 118.765465][ T6408] ? __lock_acquire+0x49f/0x1a40 [ 118.765481][ T6408] __mutex_lock+0x1a4/0x1bd0 [ 118.765498][ T6408] ? configfs_rmdir+0x5ae/0x950 [ 118.765515][ T6408] ? configfs_rmdir+0x5ae/0x950 [ 118.765533][ T6408] ? reacquire_held_locks+0xce/0x1e0 [ 118.765553][ T6408] ? __pfx___mutex_lock+0x10/0x10 [ 118.765569][ T6408] ? do_raw_spin_lock+0x128/0x260 [ 118.765587][ T6408] ? find_held_lock+0x2b/0x80 [ 118.765599][ T6408] ? fast_dput+0x2fe/0x6d0 [ 118.765618][ T6408] ? _raw_spin_unlock+0x28/0x50 [ 118.765631][ T6408] ? fast_dput+0x168/0x6d0 [ 118.765649][ T6408] ? configfs_rmdir+0x5ae/0x950 [ 118.765665][ T6408] configfs_rmdir+0x5ae/0x950 [ 118.765684][ T6408] ? __pfx_configfs_rmdir+0x10/0x10 [ 118.765701][ T6408] ? __pfx_down_write+0x10/0x10 [ 118.765720][ T6408] vfs_rmdir+0x328/0x8a0 [ 118.765738][ T6408] filename_rmdir+0x31a/0x5c0 [ 118.765753][ T6408] ? __pfx_filename_rmdir+0x10/0x10 [ 118.765770][ T6408] ? do_getname+0x191/0x390 [ 118.765787][ T6408] __x64_sys_rmdir+0x46/0x70 [ 118.765802][ T6408] do_syscall_64+0x115/0x870 [ 118.765818][ T6408] ? clear_bhb_loop+0x40/0x90 [ 118.765833][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.765847][ T6408] RIP: 0033:0x7fd93279e019 [ 118.765859][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.765872][ T6408] RSP: 002b:00007fd9335dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 118.765885][ T6408] RAX: ffffffffffffffda RBX: 00007fd932a25fa0 RCX: 00007fd93279e019 [ 118.765894][ T6408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 118.765902][ T6408] RBP: 00007fd93283500c R08: 0000000000000000 R09: 0000000000000000 [ 118.765910][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.765918][ T6408] R13: 00007fd932a26038 R14: 00007fd932a25fa0 R15: 00007ffc98896fa8 [ 118.765930][ T6408] [ 119.033855][ T30] audit: type=1400 audit(1785610377.415:469): avc: denied { remove_name } for pid=6406 comm="syz.0.156" name="dev0" dev="configfs" ino=11018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.056736][ T30] audit: type=1400 audit(1785610377.425:470): avc: denied { rmdir } for pid=6406 comm="syz.0.156" name="dev0" dev="configfs" ino=11018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.141916][ T30] audit: type=1400 audit(1785610378.245:471): avc: denied { create } for pid=6399 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 119.196599][ T30] audit: type=1400 audit(1785610378.275:472): avc: denied { setopt } for pid=6399 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 119.251483][ T30] audit: type=1400 audit(1785610378.285:473): avc: denied { listen } for pid=6399 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.329596][ T30] audit: type=1400 audit(1785610378.285:474): avc: denied { accept } for pid=6399 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.372907][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.393329][ T29] usb 3-1: device descriptor read/8, error -71 [ 119.422957][ T5809] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 119.485816][ T30] audit: type=1400 audit(1785610378.595:475): avc: denied { write } for pid=6411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.583620][ T30] audit: type=1400 audit(1785610378.695:476): avc: denied { write } for pid=6425 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.612303][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.623018][ T5809] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 119.635745][ T5809] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 150, changing to 4 [ 119.647111][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.675246][ T5809] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 119.702688][ T5809] usb 1-1: language id specifier not provided by device, defaulting to English [ 119.704233][ T29] usb 3-1: device descriptor read/8, error -71 [ 119.717079][ T5809] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 119.743395][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.770276][ T5809] usb 1-1: Manufacturer: 쾗휬n⏤癯僎↢娰嬿埵髧脽Ꮜ䦮诨䡐屰涪㻞碐밬단鈀铅⺰ᆵ텸℞貒总Ⰰ㋵곐傧ⶱ⢲빀문͌罿䨚ꩨݔޥ [ 119.848814][ T29] usb usb3-port1: unable to enumerate USB device [ 119.960874][ T30] audit: type=1400 audit(1785610379.065:477): avc: denied { write } for pid=6427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.080087][ T5809] usb 1-1: low speed audio streaming not supported [ 120.097339][ T5809] usb 1-1: low speed audio streaming not supported [ 120.176610][ T5809] usb 1-1: USB disconnect, device number 8 [ 127.363631][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.370078][ T1313] ieee802154 phy1 wpan1: encryption failed: -22