last executing test programs: 7m57.084285318s ago: executing program 32 (id=313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000700)=""/102392, 0x18ff8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019700), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019840)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000019900)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000019940)={0x0, 0x6, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000004c0)=0x10) 7m16.990575134s ago: executing program 5 (id=367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019700), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019840)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000019900)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000019940)={0x0, 0x6, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000004c0)=0x10) 7m9.063140906s ago: executing program 5 (id=375): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r3, 0x401, 0xffffffff, 0x3) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x3c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') pread64(r5, &(0x7f0000000700)=""/203, 0xcb, 0x3) r6 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 7m2.833237431s ago: executing program 5 (id=380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r3, 0x401, 0xffffffff, 0x3) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x3c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') pread64(r5, &(0x7f0000000700)=""/203, 0xcb, 0x3) r6 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) 6m59.242221832s ago: executing program 5 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000088}, 0x0) r0 = gettid() tgkill(r0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000019d00)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000019d40)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000019dc0)='l', 0x1, 0x20000010, &(0x7f0000019e00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000019e40)=ANY=[@ANYRES32=0x0], 0x9) syz_open_dev$video(&(0x7f0000019e80), 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000b80)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x40, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 6m56.864602035s ago: executing program 5 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019700), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019840)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000019900)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000019940)={0x0, 0x6, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000004c0)=0x10) 6m54.253998508s ago: executing program 5 (id=389): msgget$private(0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000340)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000ac0)={0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080001000100000080"], 0x50) 6m38.616658016s ago: executing program 33 (id=389): msgget$private(0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000340)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000ac0)={0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080001000100000080"], 0x50) 5m41.522590549s ago: executing program 0 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000088}, 0x0) r0 = gettid() tgkill(r0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000d00)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000019d00)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000019d40)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000019d80), 0x1) sendto$inet6(r3, &(0x7f0000019dc0)='l', 0x1, 0x20000010, &(0x7f0000019e00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000019e40)=ANY=[@ANYRES32=0x0], 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000b80)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x40, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 5m40.025341097s ago: executing program 0 (id=470): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000001540)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c04000700", 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001580), 0x8041, 0x0) write$dsp(r1, &(0x7f00000015c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000016c0)=0x2dff) syz_open_dev$video4linux(0x0, 0x4d83, 0x101200) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/igmp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m35.180240036s ago: executing program 0 (id=475): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019700), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019840)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000019900)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000019940)={0x0, 0x6, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000004c0)=0x10) 5m33.739097084s ago: executing program 0 (id=476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r3, 0x401, 0xffffffff, 0x3) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x3c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000700)=""/203, 0xcb, 0x3) r5 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000008c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) 5m28.120490868s ago: executing program 0 (id=482): r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x40000000007) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') openat$comedi(0xffffffffffffff9c, 0x0, 0x40041, 0x0) get_robust_list(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280"], 0x24}}, 0x0) bind$inet6(r1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7) 5m27.078792029s ago: executing program 0 (id=483): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 5m11.929982311s ago: executing program 34 (id=483): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 4m45.607618982s ago: executing program 2 (id=525): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 4m45.579267333s ago: executing program 4 (id=526): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000000880)='./my_configfs/target/core/rd_mcp_0\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 4m44.134904223s ago: executing program 4 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000088}, 0x0) r0 = gettid() tgkill(r0, 0x0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000019d00)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000019d40)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000019d80), 0x1) sendto$inet6(r4, &(0x7f0000019dc0)='l', 0x1, 0x20000010, &(0x7f0000019e00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$video(&(0x7f0000019e80), 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000b80)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x40, &(0x7f0000000000)) 4m41.522758223s ago: executing program 4 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r3, 0x401, 0xffffffff, 0x3) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x3c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') pread64(r4, &(0x7f0000000700)=""/203, 0xcb, 0x3) r5 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000008c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) 4m37.960349138s ago: executing program 2 (id=532): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) rmdir(&(0x7f0000000880)='./my_configfs/target/core/rd_mcp_0\x00') syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 4m34.51506888s ago: executing program 2 (id=534): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 4m34.366298901s ago: executing program 4 (id=536): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r3, 0x401, 0xffffffff, 0x3) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x3c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') pread64(r4, &(0x7f0000000700)=""/203, 0xcb, 0x3) r5 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000008c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) 4m32.001338531s ago: executing program 2 (id=539): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r3, 0x401, 0xffffffff, 0x3) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x3c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') r5 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000008c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) 4m28.852435166s ago: executing program 4 (id=542): r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x40000000007) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') openat$comedi(0xffffffffffffff9c, 0x0, 0x40041, 0x0) get_robust_list(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280"], 0x24}}, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7) 4m28.237963432s ago: executing program 2 (id=545): r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x40000000007) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') openat$comedi(0xffffffffffffff9c, 0x0, 0x40041, 0x0) get_robust_list(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280"], 0x24}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7) 4m27.244837435s ago: executing program 4 (id=546): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) rmdir(&(0x7f0000000880)='./my_configfs/target/core/rd_mcp_0\x00') syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 4m26.063150697s ago: executing program 2 (id=547): msgget$private(0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000340)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000ac0)={0x2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x9ced7000) 4m10.853328572s ago: executing program 35 (id=546): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) rmdir(&(0x7f0000000880)='./my_configfs/target/core/rd_mcp_0\x00') syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 4m10.348848925s ago: executing program 36 (id=547): msgget$private(0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000340)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000ac0)={0x2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x9ced7000) 2m22.231435522s ago: executing program 1 (id=681): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000000880)='./my_configfs/target/core/rd_mcp_0\x00') syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 2m13.930016242s ago: executing program 1 (id=691): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000540)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000580)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000900)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000000880)='./my_configfs/target/core/rd_mcp_0\x00') syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x7}}) 2m11.208923664s ago: executing program 1 (id=694): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000001540)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c04000700", 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001580), 0x8041, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000016c0)=0x2dff) syz_open_dev$video4linux(0x0, 0x4d83, 0x101200) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/igmp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x7) 2m10.39215693s ago: executing program 1 (id=696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x8000, 0x2, 0x377}, 0x0, &(0x7f0000000280), &(0x7f0000000300)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) fadvise64(r1, 0x401, 0xffffffff, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="83", 0x1, 0xfffffffffffffffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') pread64(r3, &(0x7f0000000700)=""/203, 0xcb, 0x3) r4 = syz_open_dev$radio(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000008c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) 2m5.915677651s ago: executing program 1 (id=701): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000003f00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001cf00)=0x7) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f000001cf40), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f000001cf80)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x0, 0x4eac, 0x5, 0xce}}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f000001cfc0)=0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f000001d000), 0x2800) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f000001d080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f000001d0c0)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r6, &(0x7f0000001d80)={0x2020}, 0xfffffe0c) syz_genetlink_get_family_id$tipc(&(0x7f0000003e00), 0xffffffffffffffff) 2m2.588460788s ago: executing program 1 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)) close(0x3) r2 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20044001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 1m47.182985849s ago: executing program 37 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)) close(0x3) r2 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20044001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 5.285187015s ago: executing program 6 (id=975): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r2}, &(0x7f0000001840), &(0x7f0000001880)='%pi6 \x00', 0x500}, 0x20) 5.18083941s ago: executing program 6 (id=977): mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.103733617s ago: executing program 6 (id=979): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000002000)={r0}, 0x8) write$cgroup_int(r1, &(0x7f0000002040), 0xfffffdef) write$cgroup_type(r1, &(0x7f0000002080), 0x9) 5.056537357s ago: executing program 6 (id=980): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic=')']}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000540)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket(0x40000000015, 0x5, 0x0) socket(0x40000000015, 0x805, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000005c0)={r7, r7, 0x7, 0x0, 0x0, 0xe, 0x9c, 0x8, 0x9, 0x3, 0x2, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000680)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 4.020399798s ago: executing program 6 (id=985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.003026454s ago: executing program 6 (id=986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0x40505331, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xff}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\f\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000013000000180001801400020073697430000000"], 0x2c}}, 0x0) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x3a7}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) r6 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_open_dev$vbi(&(0x7f0000000680), 0x0, 0x2) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) io_uring_enter(r2, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x4c, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_NO_CSUM, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x8c}}, 0x0) io_uring_enter(r2, 0xed4, 0x3768, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800007f4ed7066200"/20], 0x18}}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102000000108c0d010240000102030109026000030109403f0904000000010100000a2401d2000a0002010209040100000102000009040101010102000009050109ff0378083a07250106040b000904020000010200000904020101010200000905820920000302d12ea906033ac70990e60f78c1ca0f1101072501000e03"], 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x9d87, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff1, 0x4, 0x0, 0x0}}, 0x0) gettid() r12 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x4081ff) 3.905444614s ago: executing program 9 (id=988): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6bd, 0x110, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create1(0x0) 3.751365246s ago: executing program 9 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000005c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000780)='scalable', 0x8) recvfrom$inet(r1, &(0x7f00000007c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) landlock_create_ruleset(&(0x7f00000007c0)={0x2, 0x3, 0x3}, 0x18, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r5, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000001e80)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x49, &(0x7f0000001f00), &(0x7f0000001f40)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805e", 0x0, 0x0, 0xaac}, 0x4c) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x1000, r7}, 0x38) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) sendmmsg(r6, &(0x7f0000000440), 0x4000000000001f2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r11, &(0x7f0000000140)='27', 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.504162303s ago: executing program 7 (id=997): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./trace\x00', &(0x7f0000000b40)='tracefs\x00', 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./trace/set_event\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000bc0)=""/79, 0x4f, 0x1b) 3.495484181s ago: executing program 8 (id=998): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="000086dd0000110000080000000046250fc000642c00010144047e71000004d60000000201000fff00008001000000000000100000002cc9000000c27ae85a"], 0xfce) 3.395166551s ago: executing program 7 (id=1000): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$vsock_diag(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc000000) 3.27232722s ago: executing program 7 (id=1002): mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) creat(&(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x120) 3.192421758s ago: executing program 3 (id=1003): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create1(0x0) 3.190788639s ago: executing program 7 (id=1004): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r0}, 0xc) 3.147181082s ago: executing program 8 (id=1005): sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000340)={0x0, @frame_sync}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 3.040429642s ago: executing program 7 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x48000) 2.936902817s ago: executing program 8 (id=1007): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x75, &(0x7f0000000000)="1a00000002000000", 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.898582745s ago: executing program 7 (id=1008): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffff36, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x1000000}}]}}, &(0x7f0000000580)=""/196, 0x32, 0xc4, 0x1}, 0x28) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x0, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2801, 0x2800, 0xfffffffe, 0xd1, 0x19, 0x30, {0x8, 0xfffffff7}, 0x2f, 0x9}}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x5, 0x40101) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mknod(&(0x7f0000000180)='./sys\x00', 0x1000, 0x1a) mount(&(0x7f0000000400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='msdos\x00', 0x8080, &(0x7f0000000500)='discard') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1.085935519s ago: executing program 8 (id=1009): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 510.957709ms ago: executing program 9 (id=1010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4800) 401.539842ms ago: executing program 9 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x15, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000c40)={r2, 0x0, 0x0}, 0x10) 396.207895ms ago: executing program 3 (id=1012): syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) 365.650182ms ago: executing program 8 (id=1013): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000001fc0), 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1e, 0x3, &(0x7f00000022c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002340)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) 284.179625ms ago: executing program 3 (id=1014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 268.253334ms ago: executing program 3 (id=1015): mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) creat(&(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x120) 229.606335ms ago: executing program 9 (id=1016): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r0}, 0xc) 165.200905ms ago: executing program 8 (id=1017): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="000086dd0000110000080000000046250fc000642c00010144047e71000004d60000000201000fff00008001000000000000100000002cc9000000c27ae85a"], 0xfce) 163.684854ms ago: executing program 3 (id=1018): sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000340)={0x0, @frame_sync}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 258.263µs ago: executing program 3 (id=1019): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f080000000000000010020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000900)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 0s ago: executing program 9 (id=1020): mknodat$md(0xffffffffffffff9c, &(0x7f0000000940)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000980)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000240)={0xfffffffe, 0x77, 0x0, 0x0, 0x5, 0x72f, 0x0, 0x2, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000a40)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000a80)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f00000001c0)="db8d", 0x2) kernel console output (not intermixed with test programs): 49820.087:397): avc: denied { write } for pid=9201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.629390][ T5990] wlan1: Trigger new scan to find an IBSS to join [ 604.123305][ T9217] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 604.191527][ T30] audit: type=1400 audit(1793749820.767:398): avc: denied { write } for pid=9213 comm="syz.7.598" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 605.122961][ T30] audit: type=1400 audit(1793749821.697:399): avc: denied { write } for pid=9224 comm="syz.9.562" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 605.215395][ T30] audit: type=1400 audit(1793749821.797:400): avc: denied { write } for pid=9224 comm="syz.9.562" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 605.890498][ T30] audit: type=1400 audit(1793749822.467:401): avc: denied { write } for pid=9226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.619272][ T7156] wlan1: Trigger new scan to find an IBSS to join [ 606.818506][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 607.119406][ T9228] vivid-004: ================= START STATUS ================= [ 607.119426][ T9228] vivid-004: RDS Tx I/O Mode: Controls [ 607.119450][ T9228] vivid-004: RDS Program ID: 32904 [ 607.121865][ T9228] vivid-004: RDS Program Type: 3 [ 607.121893][ T9228] vivid-004: RDS PS Name: VIVID-TX [ 607.121914][ T9228] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 607.121938][ T9228] vivid-004: RDS Stereo: true [ 607.122425][ T9228] vivid-004: RDS Artificial Head: false [ 607.122446][ T9228] vivid-004: RDS Compressed: false [ 607.122466][ T9228] vivid-004: RDS Dynamic PTY: false [ 607.122485][ T9228] vivid-004: RDS Traffic Announcement: false [ 607.122507][ T9228] vivid-004: RDS Traffic Program: true [ 607.124626][ T9228] vivid-004: RDS Music: true [ 607.124647][ T9228] vivid-004: ================== END STATUS ================== [ 607.651830][ T30] audit: type=1400 audit(1793749824.227:402): avc: denied { write } for pid=9235 comm="syz.9.601" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 607.697386][ T30] audit: type=1400 audit(1793749824.277:403): avc: denied { write } for pid=9235 comm="syz.9.601" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 607.810348][ T1150] wlan1: Creating new IBSS network, BSSID 0e:f8:2a:b6:98:d4 [ 609.340664][ T9247] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 611.944968][ T30] audit: type=1400 audit(1793749828.517:404): avc: denied { write } for pid=9254 comm="syz.7.602" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 611.950853][ T9259] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.004229][ T30] audit: type=1400 audit(1793749828.587:405): avc: denied { write } for pid=9254 comm="syz.7.602" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 612.006608][ T9251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 613.577335][ T30] audit: type=1400 audit(1793749830.157:406): avc: denied { write } for pid=9272 comm="syz.6.605" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 613.581020][ T9274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 613.681304][ T30] audit: type=1400 audit(1793749830.257:407): avc: denied { write } for pid=9272 comm="syz.6.605" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.079782][ T30] audit: type=1400 audit(1793749830.657:408): avc: denied { write } for pid=9277 comm="syz.9.606" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.113818][ T9278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.180799][ T30] audit: type=1400 audit(1793749830.757:409): avc: denied { write } for pid=9277 comm="syz.9.606" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.907807][ T30] audit: type=1400 audit(1793749831.487:410): avc: denied { write } for pid=9261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.966951][ T9286] vivid-001: ================= START STATUS ================= [ 614.966972][ T9286] vivid-001: RDS Tx I/O Mode: Controls [ 614.966996][ T9286] vivid-001: RDS Program ID: 32904 [ 614.967019][ T9286] vivid-001: RDS Program Type: 3 [ 614.967038][ T9286] vivid-001: RDS PS Name: VIVID-TX [ 614.967058][ T9286] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 614.967080][ T9286] vivid-001: RDS Stereo: true [ 614.967100][ T9286] vivid-001: RDS Artificial Head: false [ 614.967120][ T9286] vivid-001: RDS Compressed: false [ 614.967139][ T9286] vivid-001: RDS Dynamic PTY: false [ 614.967159][ T9286] vivid-001: RDS Traffic Announcement: false [ 614.967178][ T9286] vivid-001: RDS Traffic Program: true [ 614.967196][ T9286] vivid-001: RDS Music: true [ 614.967214][ T9286] vivid-001: ================== END STATUS ================== [ 615.360102][ T30] audit: type=1400 audit(1793749831.937:411): avc: denied { write } for pid=9301 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.420541][ T9280] vivid-004: ================= START STATUS ================= [ 615.421342][ T9280] vivid-004: RDS Tx I/O Mode: Controls [ 615.435101][ T9280] vivid-004: RDS Program ID: 32904 [ 615.435132][ T9280] vivid-004: RDS Program Type: 3 [ 615.435152][ T9280] vivid-004: RDS PS Name: VIVID-TX [ 615.435170][ T9280] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 615.435190][ T9280] vivid-004: RDS Stereo: true [ 615.436598][ T9280] vivid-004: RDS Artificial Head: false [ 615.436619][ T9280] vivid-004: RDS Compressed: false [ 615.436637][ T9280] vivid-004: RDS Dynamic PTY: false [ 615.436654][ T9280] vivid-004: RDS Traffic Announcement: false [ 615.436673][ T9280] vivid-004: RDS Traffic Program: true [ 615.436842][ T9280] vivid-004: RDS Music: true [ 615.436861][ T9280] vivid-004: ================== END STATUS ================== [ 616.492860][ T9297] vivid-002: ================= START STATUS ================= [ 616.493536][ T9297] vivid-002: RDS Tx I/O Mode: Controls [ 616.493564][ T9297] vivid-002: RDS Program ID: 32904 [ 616.502169][ T9297] vivid-002: RDS Program Type: 3 [ 616.502197][ T9297] vivid-002: RDS PS Name: VIVID-TX [ 616.502217][ T9297] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 616.502240][ T9297] vivid-002: RDS Stereo: true [ 616.502257][ T9297] vivid-002: RDS Artificial Head: false [ 616.515549][ T9297] vivid-002: RDS Compressed: false [ 616.515571][ T9297] vivid-002: RDS Dynamic PTY: false [ 616.515590][ T9297] vivid-002: RDS Traffic Announcement: false [ 616.515609][ T9297] vivid-002: RDS Traffic Program: true [ 616.538541][ T9297] vivid-002: RDS Music: true [ 616.538572][ T9297] vivid-002: ================== END STATUS ================== [ 617.707257][ T30] audit: type=1400 audit(1793749834.277:412): avc: denied { write } for pid=9317 comm="syz.8.613" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 617.750633][ T9318] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.810442][ T30] audit: type=1400 audit(1793749834.387:413): avc: denied { write } for pid=9317 comm="syz.8.613" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 618.831094][ T9294] vivid-002: ================= START STATUS ================= [ 618.833404][ T9294] vivid-002: RDS Tx I/O Mode: Controls [ 618.833434][ T9294] vivid-002: RDS Program ID: 32904 [ 618.833478][ T9294] vivid-002: RDS Program Type: 3 [ 618.833993][ T9294] vivid-002: RDS PS Name: VIVID-TX [ 618.834015][ T9294] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 618.846305][ T9294] vivid-002: RDS Stereo: true [ 618.846355][ T9294] vivid-002: RDS Artificial Head: false [ 618.846381][ T9294] vivid-002: RDS Compressed: false [ 618.846401][ T9294] vivid-002: RDS Dynamic PTY: false [ 618.846420][ T9294] vivid-002: RDS Traffic Announcement: false [ 618.881554][ T9294] vivid-002: RDS Traffic Program: true [ 618.881586][ T9294] vivid-002: RDS Music: true [ 618.881607][ T9294] vivid-002: ================== END STATUS ================== [ 618.986435][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.986466][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.285762][ T9324] vivid-004: ================= START STATUS ================= [ 620.285784][ T9324] vivid-004: RDS Tx I/O Mode: Controls [ 620.285808][ T9324] vivid-004: RDS Program ID: 32904 [ 620.285840][ T9324] vivid-004: RDS Program Type: 3 [ 620.286787][ T9324] vivid-004: RDS PS Name: VIVID-TX [ 620.286809][ T9324] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 620.286832][ T9324] vivid-004: RDS Stereo: true [ 620.286851][ T9324] vivid-004: RDS Artificial Head: false [ 620.306212][ T9324] vivid-004: RDS Compressed: false [ 620.306236][ T9324] vivid-004: RDS Dynamic PTY: false [ 620.306253][ T9324] vivid-004: RDS Traffic Announcement: false [ 620.306271][ T9324] vivid-004: RDS Traffic Program: true [ 620.306287][ T9324] vivid-004: RDS Music: true [ 620.356626][ T9324] vivid-004: ================== END STATUS ================== [ 620.398173][ T30] audit: type=1400 audit(1793749836.977:414): avc: denied { write } for pid=9330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.399295][ T9337] vivid-002: ================= START STATUS ================= [ 620.399951][ T9337] vivid-002: RDS Tx I/O Mode: Controls [ 620.399976][ T9337] vivid-002: RDS Program ID: 32904 [ 620.399998][ T9337] vivid-002: RDS Program Type: 3 [ 620.400017][ T9337] vivid-002: RDS PS Name: VIVID-TX [ 620.434212][ T9337] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 620.434236][ T9337] vivid-002: RDS Stereo: true [ 620.434252][ T9337] vivid-002: RDS Artificial Head: false [ 620.434269][ T9337] vivid-002: RDS Compressed: false [ 620.479780][ T9337] vivid-002: RDS Dynamic PTY: false [ 620.479803][ T9337] vivid-002: RDS Traffic Announcement: false [ 620.479815][ T9337] vivid-002: RDS Traffic Program: true [ 620.479827][ T9337] vivid-002: RDS Music: true [ 620.479839][ T9337] vivid-002: ================== END STATUS ================== [ 620.940280][ T30] audit: type=1400 audit(1793749837.517:415): avc: denied { write } for pid=9358 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.067859][ T9345] vivid-001: ================= START STATUS ================= [ 621.069069][ T9345] vivid-001: RDS Tx I/O Mode: Controls [ 621.071290][ T9345] vivid-001: RDS Program ID: 32904 [ 621.071316][ T9345] vivid-001: RDS Program Type: 3 [ 621.071336][ T9345] vivid-001: RDS PS Name: VIVID-TX [ 621.071355][ T9345] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 621.071377][ T9345] vivid-001: RDS Stereo: true [ 621.072448][ T9345] vivid-001: RDS Artificial Head: false [ 621.072469][ T9345] vivid-001: RDS Compressed: false [ 621.072488][ T9345] vivid-001: RDS Dynamic PTY: false [ 621.074039][ T9345] vivid-001: RDS Traffic Announcement: false [ 621.115393][ T9345] vivid-001: RDS Traffic Program: true [ 621.115417][ T9345] vivid-001: RDS Music: true [ 621.115437][ T9345] vivid-001: ================== END STATUS ================== [ 621.309054][ T30] audit: type=1400 audit(1793749837.887:416): avc: denied { write } for pid=9365 comm="syz.6.621" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 621.343599][ T9367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 621.403497][ T30] audit: type=1400 audit(1793749837.977:417): avc: denied { write } for pid=9365 comm="syz.6.621" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 622.737200][ T9362] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 624.165359][ T30] audit: type=1400 audit(1793749840.747:418): avc: denied { write } for pid=9372 comm="syz.7.622" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 624.222851][ T30] audit: type=1400 audit(1793749840.797:419): avc: denied { write } for pid=9372 comm="syz.7.622" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 625.485906][ T6905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.323650][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.625'. [ 626.749947][ T8389] Bluetooth: hci5: command 0x0406 tx timeout [ 626.981335][ T30] audit: type=1400 audit(1793749843.557:420): avc: denied { write } for pid=9379 comm="syz.9.624" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 627.027279][ T30] audit: type=1400 audit(1793749843.607:421): avc: denied { write } for pid=9379 comm="syz.9.624" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 628.671790][ T30] audit: type=1400 audit(1793749845.247:422): avc: denied { write } for pid=9394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.136206][ T9405] vivid-003: ================= START STATUS ================= [ 629.136228][ T9405] vivid-003: RDS Tx I/O Mode: Controls [ 629.136252][ T9405] vivid-003: RDS Program ID: 32904 [ 629.136683][ T9405] vivid-003: RDS Program Type: 3 [ 629.136703][ T9405] vivid-003: RDS PS Name: VIVID-TX [ 629.136723][ T9405] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 629.136746][ T9405] vivid-003: RDS Stereo: true [ 629.136764][ T9405] vivid-003: RDS Artificial Head: false [ 629.137509][ T9405] vivid-003: RDS Compressed: false [ 629.137528][ T9405] vivid-003: RDS Dynamic PTY: false [ 629.137547][ T9405] vivid-003: RDS Traffic Announcement: false [ 629.137565][ T9405] vivid-003: RDS Traffic Program: true [ 629.138171][ T9405] vivid-003: RDS Music: true [ 629.138190][ T9405] vivid-003: ================== END STATUS ================== [ 629.603982][ T30] audit: type=1400 audit(1793749846.177:423): avc: denied { write } for pid=9422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.339881][ T9425] vivid-003: ================= START STATUS ================= [ 631.339902][ T9425] vivid-003: RDS Tx I/O Mode: Controls [ 631.339926][ T9425] vivid-003: RDS Program ID: 32904 [ 631.339949][ T9425] vivid-003: RDS Program Type: 3 [ 631.340375][ T9425] vivid-003: RDS PS Name: VIVID-TX [ 631.340398][ T9425] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 631.340422][ T9425] vivid-003: RDS Stereo: true [ 631.340442][ T9425] vivid-003: RDS Artificial Head: false [ 631.340461][ T9425] vivid-003: RDS Compressed: false [ 631.342228][ T9425] vivid-003: RDS Dynamic PTY: false [ 631.342249][ T9425] vivid-003: RDS Traffic Announcement: false [ 631.342269][ T9425] vivid-003: RDS Traffic Program: true [ 631.342287][ T9425] vivid-003: RDS Music: true [ 631.343533][ T9425] vivid-003: ================== END STATUS ================== [ 633.136949][ T30] audit: type=1400 audit(1793749849.717:424): avc: denied { write } for pid=9441 comm="syz.8.633" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 633.185237][ T30] audit: type=1400 audit(1793749849.757:425): avc: denied { write } for pid=9441 comm="syz.8.633" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 634.103610][ T30] audit: type=1400 audit(1793749850.677:426): avc: denied { write } for pid=9457 comm="syz.7.636" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 634.160891][ T9438] vivid-002: ================= START STATUS ================= [ 634.160912][ T9438] vivid-002: RDS Tx I/O Mode: Controls [ 634.160937][ T9438] vivid-002: RDS Program ID: 32904 [ 634.160959][ T9438] vivid-002: RDS Program Type: 3 [ 634.160979][ T9438] vivid-002: RDS PS Name: [ 634.162625][ T9464] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 634.166522][ T9438] VIVID-TX [ 634.166540][ T9438] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 634.166566][ T9438] vivid-002: RDS Stereo: true [ 634.166585][ T9438] vivid-002: RDS Artificial Head: false [ 634.166606][ T9438] vivid-002: RDS Compressed: false [ 634.169233][ T9438] vivid-002: RDS Dynamic PTY: false [ 634.169253][ T9438] vivid-002: RDS Traffic Announcement: false [ 634.169272][ T9438] vivid-002: RDS Traffic Program: true [ 634.169291][ T9438] vivid-002: RDS Music: true [ 634.169310][ T9438] vivid-002: ================== END STATUS ================== [ 634.229741][ T30] audit: type=1400 audit(1793749850.807:427): avc: denied { write } for pid=9457 comm="syz.7.636" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 634.389106][ T9466] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 637.930091][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 637.978478][ T9453] vivid-002: ================= START STATUS ================= [ 637.978491][ T9453] vivid-002: RDS Tx I/O Mode: Controls [ 637.978506][ T9453] vivid-002: RDS Program ID: 32904 [ 637.980721][ T9453] vivid-002: RDS Program Type: 3 [ 637.980738][ T9453] vivid-002: RDS PS Name: VIVID-TX [ 637.980749][ T9453] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 637.980763][ T9453] vivid-002: RDS Stereo: true [ 637.980775][ T9453] vivid-002: RDS Artificial Head: false [ 637.980786][ T9453] vivid-002: RDS Compressed: false [ 637.980798][ T9453] vivid-002: RDS Dynamic PTY: false [ 637.980809][ T9453] vivid-002: RDS Traffic Announcement: false [ 637.983506][ T9453] vivid-002: RDS Traffic Program: true [ 637.983519][ T9453] vivid-002: RDS Music: true [ 637.983529][ T9453] vivid-002: ================== END STATUS ================== [ 638.564806][ T30] audit: type=1400 audit(1793749855.147:428): avc: denied { write } for pid=9450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.125203][ T9475] vivid-004: ================= START STATUS ================= [ 639.125223][ T9475] vivid-004: RDS Tx I/O Mode: Controls [ 639.125246][ T9475] vivid-004: RDS Program ID: 32904 [ 639.125274][ T9475] vivid-004: RDS Program Type: 3 [ 639.125292][ T9475] vivid-004: RDS PS Name: VIVID-TX [ 639.125343][ T9475] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 639.125394][ T9475] vivid-004: RDS Stereo: true [ 639.125421][ T9475] vivid-004: RDS Artificial Head: false [ 639.125465][ T9475] vivid-004: RDS Compressed: false [ 639.125510][ T9475] vivid-004: RDS Dynamic PTY: false [ 639.125535][ T9475] vivid-004: RDS Traffic Announcement: false [ 639.125580][ T9475] vivid-004: RDS Traffic Program: true [ 639.125616][ T9475] vivid-004: RDS Music: true [ 639.125674][ T9475] vivid-004: ================== END STATUS ================== [ 639.850246][ T30] audit: type=1400 audit(1793749856.427:429): avc: denied { write } for pid=9488 comm="syz.1.642" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 639.859809][ T30] audit: type=1400 audit(1793749856.437:430): avc: denied { write } for pid=9488 comm="syz.1.642" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 640.257143][ T30] audit: type=1400 audit(1793749856.837:431): avc: denied { write } for pid=9492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.001285][ T9485] vivid-003: ================= START STATUS ================= [ 641.003904][ T9485] vivid-003: RDS Tx I/O Mode: Controls [ 641.004425][ T9485] vivid-003: RDS Program ID: 32904 [ 641.004459][ T9485] vivid-003: RDS Program Type: 3 [ 641.004480][ T9485] vivid-003: RDS PS Name: VIVID-TX [ 641.004500][ T9485] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 641.024151][ T9485] vivid-003: RDS Stereo: true [ 641.024169][ T9485] vivid-003: RDS Artificial Head: false [ 641.024186][ T9485] vivid-003: RDS Compressed: false [ 641.024203][ T9485] vivid-003: RDS Dynamic PTY: false [ 641.060358][ T9485] vivid-003: RDS Traffic Announcement: false [ 641.060382][ T9485] vivid-003: RDS Traffic Program: true [ 641.060399][ T9485] vivid-003: RDS Music: true [ 641.060417][ T9485] vivid-003: ================== END STATUS ================== [ 641.673446][ T9497] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 643.583637][ T9503] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 646.256119][ T30] audit: type=1400 audit(1793749862.837:432): avc: denied { write } for pid=9501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.755351][ T9522] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 648.317406][ T30] audit: type=1400 audit(1793749864.897:433): avc: denied { write } for pid=9529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.927367][ T9537] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 649.618806][ T9541] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 651.542134][ T30] audit: type=1400 audit(1793749868.117:434): avc: denied { write } for pid=9539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.968350][ T30] audit: type=1400 audit(1793749868.547:435): avc: denied { write } for pid=9567 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.606410][ T9562] vivid-004: ================= START STATUS ================= [ 652.606430][ T9562] vivid-004: RDS Tx I/O Mode: Controls [ 652.606454][ T9562] vivid-004: RDS Program ID: 32904 [ 652.606475][ T9562] vivid-004: RDS Program Type: 3 [ 652.607284][ T9562] vivid-004: RDS PS Name: VIVID-TX [ 652.607305][ T9562] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 652.607327][ T9562] vivid-004: RDS Stereo: true [ 652.607347][ T9562] vivid-004: RDS Artificial Head: false [ 652.607897][ T9562] vivid-004: RDS Compressed: false [ 652.607918][ T9562] vivid-004: RDS Dynamic PTY: false [ 652.664199][ T9562] vivid-004: RDS Traffic Announcement: false [ 652.664213][ T9562] vivid-004: RDS Traffic Program: true [ 652.664240][ T9562] vivid-004: RDS Music: true [ 652.664253][ T9562] vivid-004: ================== END STATUS ================== [ 652.721314][ T9564] vivid-001: ================= START STATUS ================= [ 652.728726][ T9564] vivid-001: RDS Tx I/O Mode: Controls [ 652.728757][ T9564] vivid-001: RDS Program ID: 32904 [ 652.728780][ T9564] vivid-001: RDS Program Type: 3 [ 652.729083][ T9564] vivid-001: RDS PS Name: VIVID-TX [ 652.729109][ T9564] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 652.729132][ T9564] vivid-001: RDS Stereo: true [ 652.729150][ T9564] vivid-001: RDS Artificial Head: false [ 652.730838][ T9564] vivid-001: RDS Compressed: false [ 652.730858][ T9564] vivid-001: RDS Dynamic PTY: false [ 652.730877][ T9564] vivid-001: RDS Traffic Announcement: false [ 652.730897][ T9564] vivid-001: RDS Traffic Program: true [ 652.731215][ T9564] vivid-001: RDS Music: true [ 652.731241][ T9564] vivid-001: ================== END STATUS ================== [ 655.172756][ T9586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 657.695046][ T5990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.382255][ T9611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 658.998067][ T30] audit: type=1400 audit(1793749875.577:436): avc: denied { write } for pid=9589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.437698][ T9628] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 660.598094][ T30] audit: type=1400 audit(1793749877.177:437): avc: denied { write } for pid=9629 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.339452][ T9636] vivid-002: ================= START STATUS ================= [ 661.339471][ T9636] vivid-002: RDS Tx I/O Mode: Controls [ 661.339495][ T9636] vivid-002: RDS Program ID: 32904 [ 661.339807][ T9636] vivid-002: RDS Program Type: 3 [ 661.339826][ T9636] vivid-002: RDS PS Name: VIVID-TX [ 661.339884][ T9636] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 661.339917][ T9636] vivid-002: RDS Stereo: true [ 661.340105][ T9636] vivid-002: RDS Artificial Head: false [ 661.340125][ T9636] vivid-002: RDS Compressed: false [ 661.341940][ T9636] vivid-002: RDS Dynamic PTY: false [ 661.341985][ T9636] vivid-002: RDS Traffic Announcement: false [ 661.342006][ T9636] vivid-002: RDS Traffic Program: true [ 661.342025][ T9636] vivid-002: RDS Music: true [ 661.342428][ T9636] vivid-002: ================== END STATUS ================== [ 661.931900][ T9643] vivid-003: ================= START STATUS ================= [ 661.931921][ T9643] vivid-003: RDS Tx I/O Mode: Controls [ 661.931945][ T9643] vivid-003: RDS Program ID: 32904 [ 661.931967][ T9643] vivid-003: RDS Program Type: 3 [ 661.931986][ T9643] vivid-003: RDS PS Name: VIVID-TX [ 661.932809][ T9643] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 661.932834][ T9643] vivid-003: RDS Stereo: true [ 661.932854][ T9643] vivid-003: RDS Artificial Head: false [ 661.963199][ T9643] vivid-003: RDS Compressed: false [ 661.963226][ T9643] vivid-003: RDS Dynamic PTY: false [ 661.963243][ T9643] vivid-003: RDS Traffic Announcement: false [ 661.963261][ T9643] vivid-003: RDS Traffic Program: true [ 661.963278][ T9643] vivid-003: RDS Music: true [ 662.006174][ T9643] vivid-003: ================== END STATUS ================== [ 662.871694][ T9653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 664.931664][ T9648] vivid-004: ================= START STATUS ================= [ 664.931916][ T9648] vivid-004: RDS Tx I/O Mode: Controls [ 664.931954][ T9648] vivid-004: RDS Program ID: 32904 [ 664.931976][ T9648] vivid-004: RDS Program Type: 3 [ 664.931996][ T9648] vivid-004: RDS PS Name: VIVID-TX [ 664.932016][ T9648] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 664.932497][ T9648] vivid-004: RDS Stereo: true [ 664.932517][ T9648] vivid-004: RDS Artificial Head: false [ 664.932537][ T9648] vivid-004: RDS Compressed: false [ 664.932557][ T9648] vivid-004: RDS Dynamic PTY: false [ 664.932576][ T9648] vivid-004: RDS Traffic Announcement: false [ 664.932594][ T9648] vivid-004: RDS Traffic Program: true [ 664.932985][ T9648] vivid-004: RDS Music: true [ 664.933007][ T9648] vivid-004: ================== END STATUS ================== [ 666.635347][ T9685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 667.601157][ T9687] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 669.263404][ T9678] vivid-002: ================= START STATUS ================= [ 669.266464][ T9678] vivid-002: RDS Tx I/O Mode: Controls [ 669.266490][ T9678] vivid-002: RDS Program ID: 32904 [ 669.266513][ T9678] vivid-002: RDS Program Type: 3 [ 669.266531][ T9678] vivid-002: RDS PS Name: VIVID-TX [ 669.266551][ T9678] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 669.266631][ T9678] vivid-002: RDS Stereo: true [ 669.266650][ T9678] vivid-002: RDS Artificial Head: false [ 669.266670][ T9678] vivid-002: RDS Compressed: false [ 669.266689][ T9678] vivid-002: RDS Dynamic PTY: false [ 669.266709][ T9678] vivid-002: RDS Traffic Announcement: false [ 669.267779][ T9678] vivid-002: RDS Traffic Program: true [ 669.267798][ T9678] vivid-002: RDS Music: true [ 669.267817][ T9678] vivid-002: ================== END STATUS ================== [ 669.606672][ T30] audit: type=1400 audit(1793749886.187:438): avc: denied { write } for pid=9662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.855184][ T6905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.888068][ T30] audit: type=1400 audit(1793749886.437:439): avc: denied { write } for pid=9703 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.720609][ T9715] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 672.758600][ T9704] vivid-001: ================= START STATUS ================= [ 672.758621][ T9704] vivid-001: RDS Tx I/O Mode: Controls [ 672.758645][ T9704] vivid-001: RDS Program ID: 32904 [ 672.758667][ T9704] vivid-001: RDS Program Type: 3 [ 672.758686][ T9704] vivid-001: RDS PS Name: VIVID-TX [ 672.759240][ T9704] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 672.759264][ T9704] vivid-001: RDS Stereo: true [ 672.759284][ T9704] vivid-001: RDS Artificial Head: false [ 672.759302][ T9704] vivid-001: RDS Compressed: false [ 672.759964][ T9704] vivid-001: RDS Dynamic PTY: false [ 672.759983][ T9704] vivid-001: RDS Traffic Announcement: false [ 672.760004][ T9704] vivid-001: RDS Traffic Program: true [ 672.760022][ T9704] vivid-001: RDS Music: true [ 672.760040][ T9704] vivid-001: ================== END STATUS ================== [ 675.967971][ T9738] sctp: [Deprecated]: syz.9.687 (pid 9738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.967971][ T9738] Use struct sctp_sack_info instead [ 678.069061][ T30] audit: type=1400 audit(1793749894.647:440): avc: denied { write } for pid=9745 comm="syz.1.681" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.145811][ T30] audit: type=1400 audit(1793749894.717:441): avc: denied { write } for pid=9745 comm="syz.1.681" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.768874][ T9743] vivid-002: ================= START STATUS ================= [ 678.768896][ T9743] vivid-002: RDS Tx I/O Mode: Controls [ 678.770615][ T9743] vivid-002: RDS Program ID: 32904 [ 678.770638][ T9743] vivid-002: RDS Program Type: 3 [ 678.770660][ T9743] vivid-002: RDS PS Name: VIVID-TX [ 678.771988][ T9743] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 678.772014][ T9743] vivid-002: RDS Stereo: true [ 678.772033][ T9743] vivid-002: RDS Artificial Head: false [ 678.772053][ T9743] vivid-002: RDS Compressed: false [ 678.832243][ T9743] vivid-002: RDS Dynamic PTY: false [ 678.832265][ T9743] vivid-002: RDS Traffic Announcement: false [ 678.832285][ T9743] vivid-002: RDS Traffic Program: true [ 679.251941][ T9743] vivid-002: RDS Music: true [ 679.251973][ T9743] vivid-002: ================== END STATUS ================== [ 680.399333][ T9764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 680.425718][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.425753][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.188352][ T9758] orangefs_mount: mount request failed with -4 [ 682.588619][ T9752] vivid-002: ================= START STATUS ================= [ 682.588640][ T9752] vivid-002: RDS Tx I/O Mode: Controls [ 682.591934][ T9752] vivid-002: RDS Program ID: 32904 [ 682.608138][ T9752] vivid-002: RDS Program Type: 3 [ 682.608159][ T9752] vivid-002: RDS PS Name: VIVID-TX [ 682.608179][ T9752] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 682.608200][ T9752] vivid-002: RDS Stereo: true [ 682.621586][ T9752] vivid-002: RDS Artificial Head: false [ 682.621611][ T9752] vivid-002: RDS Compressed: false [ 682.621631][ T9752] vivid-002: RDS Dynamic PTY: false [ 682.658211][ T9752] vivid-002: RDS Traffic Announcement: false [ 682.658252][ T9752] vivid-002: RDS Traffic Program: true [ 682.658274][ T9752] vivid-002: RDS Music: true [ 682.658294][ T9752] vivid-002: ================== END STATUS ================== [ 683.431981][ T9766] vivid-001: ================= START STATUS ================= [ 683.432001][ T9766] vivid-001: RDS Tx I/O Mode: Controls [ 683.432024][ T9766] vivid-001: RDS Program ID: 32904 [ 683.432046][ T9766] vivid-001: RDS Program Type: 3 [ 683.432564][ T9766] vivid-001: RDS PS Name: VIVID-TX [ 683.432586][ T9766] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 683.432609][ T9766] vivid-001: RDS Stereo: true [ 683.432628][ T9766] vivid-001: RDS Artificial Head: false [ 683.433545][ T9766] vivid-001: RDS Compressed: false [ 683.433571][ T9766] vivid-001: RDS Dynamic PTY: false [ 683.433598][ T9766] vivid-001: RDS Traffic Announcement: false [ 683.433617][ T9766] vivid-001: RDS Traffic Program: true [ 683.443381][ T9766] vivid-001: RDS Music: true [ 683.443405][ T9766] vivid-001: ================== END STATUS ================== [ 683.770428][ T9782] sctp: [Deprecated]: syz.6.695 (pid 9782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.770428][ T9782] Use struct sctp_sack_info instead [ 686.772291][ T9780] vivid-002: ================= START STATUS ================= [ 686.772318][ T9780] vivid-002: RDS Tx I/O Mode: Controls [ 686.772342][ T9780] vivid-002: RDS Program ID: 32904 [ 686.773207][ T9780] vivid-002: RDS Program Type: 3 [ 686.773229][ T9780] vivid-002: RDS PS Name: VIVID-TX [ 686.773250][ T9780] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 686.773273][ T9780] vivid-002: RDS Stereo: true [ 686.787727][ T9780] vivid-002: RDS Artificial Head: false [ 686.787751][ T9780] vivid-002: RDS Compressed: false [ 686.787770][ T9780] vivid-002: RDS Dynamic PTY: false [ 686.838586][ T9780] vivid-002: RDS Traffic Announcement: false [ 686.838616][ T9780] vivid-002: RDS Traffic Program: true [ 686.838635][ T9780] vivid-002: RDS Music: true [ 686.838655][ T9780] vivid-002: ================== END STATUS ================== [ 687.178842][ T30] audit: type=1400 audit(1793749903.757:442): avc: denied { write } for pid=9796 comm="syz.8.699" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 687.214025][ T9798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 687.308512][ T30] audit: type=1400 audit(1793749903.887:443): avc: denied { write } for pid=9796 comm="syz.8.699" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 688.256015][ T9795] Bluetooth: hci6: command 0x0406 tx timeout [ 688.256107][ T9795] Bluetooth: hci0: command 0x0406 tx timeout [ 689.177035][ T6905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 689.940351][ T9804] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 690.450072][ T9813] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 691.857979][ T30] audit: type=1400 audit(1793749908.437:444): avc: denied { write } for pid=9822 comm="syz.7.706" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 691.874069][ T9825] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 691.937246][ T30] audit: type=1400 audit(1793749908.517:445): avc: denied { write } for pid=9822 comm="syz.7.706" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 692.801654][ T9827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 696.910091][ T9836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 698.505940][ T9845] vivid-003: ================= START STATUS ================= [ 698.505961][ T9845] vivid-003: RDS Tx I/O Mode: Controls [ 698.505984][ T9845] vivid-003: RDS Program ID: 32904 [ 698.507930][ T9845] vivid-003: RDS Program Type: 3 [ 698.507956][ T9845] vivid-003: RDS PS Name: VIVID-TX [ 698.507976][ T9845] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 698.510608][ T9845] vivid-003: RDS Stereo: true [ 698.510631][ T9845] vivid-003: RDS Artificial Head: false [ 698.510651][ T9845] vivid-003: RDS Compressed: false [ 698.510671][ T9845] vivid-003: RDS Dynamic PTY: false [ 698.510691][ T9845] vivid-003: RDS Traffic Announcement: false [ 698.513557][ T9845] vivid-003: RDS Traffic Program: true [ 698.513577][ T9845] vivid-003: RDS Music: true [ 698.513597][ T9845] vivid-003: ================== END STATUS ================== [ 702.312409][ T9853] vivid-001: ================= START STATUS ================= [ 702.312428][ T9853] vivid-001: RDS Tx I/O Mode: Controls [ 702.312452][ T9853] vivid-001: RDS Program ID: 32904 [ 702.312473][ T9853] vivid-001: RDS Program Type: 3 [ 702.312491][ T9853] vivid-001: RDS PS Name: VIVID-TX [ 702.313706][ T9853] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 702.313729][ T9853] vivid-001: RDS Stereo: true [ 702.313748][ T9853] vivid-001: RDS Artificial Head: false [ 702.313768][ T9853] vivid-001: RDS Compressed: false [ 702.313788][ T9853] vivid-001: RDS Dynamic PTY: false [ 702.337479][ T9853] vivid-001: RDS Traffic Announcement: false [ 702.337499][ T9853] vivid-001: RDS Traffic Program: true [ 702.337515][ T9853] vivid-001: RDS Music: true [ 702.337532][ T9853] vivid-001: ================== END STATUS ================== [ 702.840246][ T9843] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 703.047950][ T9861] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 703.106106][ T30] audit: type=1400 audit(1793749919.687:446): avc: denied { write } for pid=9868 comm="syz.7.714" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 703.188559][ T9869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 703.252680][ T30] audit: type=1400 audit(1793749919.827:447): avc: denied { write } for pid=9868 comm="syz.7.714" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 706.320040][ T9882] orangefs_mount: mount request failed with -4 [ 706.600141][ T9873] vivid-004: ================= START STATUS ================= [ 706.600214][ T9873] vivid-004: RDS Tx I/O Mode: Controls [ 706.600239][ T9873] vivid-004: RDS Program ID: 32904 [ 706.600259][ T9873] vivid-004: RDS Program Type: 3 [ 706.600279][ T9873] vivid-004: RDS PS Name: VIVID-TX [ 706.600298][ T9873] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 706.603114][ T9873] vivid-004: RDS Stereo: true [ 706.603136][ T9873] vivid-004: RDS Artificial Head: false [ 706.603157][ T9873] vivid-004: RDS Compressed: false [ 706.603177][ T9873] vivid-004: RDS Dynamic PTY: false [ 706.603221][ T9873] vivid-004: RDS Traffic Announcement: false [ 706.603240][ T9873] vivid-004: RDS Traffic Program: true [ 706.603257][ T9873] vivid-004: RDS Music: true [ 706.603276][ T9873] vivid-004: ================== END STATUS ================== [ 706.762565][ T9877] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 707.492440][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 707.501885][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 707.503137][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 707.527520][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 707.531196][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.944453][ T9899] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 709.545044][ T5623] Bluetooth: hci1: command tx timeout [ 712.131682][ T5623] Bluetooth: hci1: command tx timeout [ 712.509120][ T360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.048151][ T9889] rxe_eth0 speed is unknown, defaulting to 1000 [ 713.120859][ T9917] vivid-004: ================= START STATUS ================= [ 713.124010][ T9917] vivid-004: RDS Tx I/O Mode: Controls [ 713.133081][ T9917] vivid-004: RDS Program ID: 32904 [ 713.133106][ T9917] vivid-004: RDS Program Type: 3 [ 713.133125][ T9917] vivid-004: RDS PS Name: VIVID-TX [ 713.133144][ T9917] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 713.157583][ T9917] vivid-004: RDS Stereo: true [ 713.157604][ T9917] vivid-004: RDS Artificial Head: false [ 713.157624][ T9917] vivid-004: RDS Compressed: false [ 713.157649][ T9917] vivid-004: RDS Dynamic PTY: false [ 713.186788][ T9917] vivid-004: RDS Traffic Announcement: false [ 713.186810][ T9917] vivid-004: RDS Traffic Program: true [ 713.186828][ T9917] vivid-004: RDS Music: true [ 713.210277][ T9917] vivid-004: ================== END STATUS ================== [ 713.374860][ T360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.957537][ T9930] sctp: [Deprecated]: syz.6.727 (pid 9930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.957537][ T9930] Use struct sctp_sack_info instead [ 714.567298][ T5623] Bluetooth: hci1: command tx timeout [ 714.574913][ T360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.169169][ T9933] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 715.933133][ T360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.584162][ T5623] Bluetooth: hci1: command tx timeout [ 717.443947][ T360] bridge_slave_1: left allmulticast mode [ 717.443966][ T360] bridge_slave_1: left promiscuous mode [ 717.457313][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.497399][ T360] bridge_slave_0: left allmulticast mode [ 717.497426][ T360] bridge_slave_0: left promiscuous mode [ 717.497605][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.947346][ T30] audit: type=1400 audit(1793749934.527:448): avc: denied { write } for pid=9951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.110956][ T30] audit: type=1400 audit(1793749934.687:449): avc: denied { write } for pid=9962 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.478411][ T9966] sctp: [Deprecated]: syz.8.728 (pid 9966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.478411][ T9966] Use struct sctp_sack_info instead [ 719.445085][ T360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.478262][ T360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.506257][ T360] bond0 (unregistering): Released all slaves [ 719.581830][ T5282] 8021q: adding VLAN 0 to HW filter on device eth21 [ 719.906658][ T30] audit: type=1400 audit(1793749936.487:450): avc: denied { write } for pid=9969 comm="syz.6.729" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 719.957886][ T9974] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 720.237059][ T30] audit: type=1400 audit(1793749936.817:451): avc: denied { write } for pid=9969 comm="syz.6.729" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 721.811197][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.819861][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.819950][ T9889] bridge_slave_0: entered allmulticast mode [ 721.863161][ T9889] bridge_slave_0: entered promiscuous mode [ 721.878916][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.882627][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.882703][ T9889] bridge_slave_1: entered allmulticast mode [ 721.924856][ T9889] bridge_slave_1: entered promiscuous mode [ 722.239770][ T9889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.240110][ T30] audit: type=1400 audit(1793749938.817:452): avc: denied { write } for pid=9983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.321114][ T360] hsr_slave_0: left promiscuous mode [ 722.338735][ T360] hsr_slave_1: left promiscuous mode [ 722.339783][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.339801][ T360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.362017][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.362038][ T360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.400558][ T30] audit: type=1400 audit(1793749938.977:453): avc: denied { write } for pid=9994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.435120][ T360] veth1_macvtap: left promiscuous mode [ 722.435158][ T360] veth0_macvtap: left promiscuous mode [ 722.435240][ T360] veth1_vlan: left promiscuous mode [ 722.435370][ T360] veth0_vlan: left promiscuous mode [ 722.969586][ T360] team0 (unregistering): Port device team_slave_1 removed [ 722.991439][ T360] team0 (unregistering): Port device team_slave_0 removed [ 723.132750][ T9889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.133675][ T5282] 8021q: adding VLAN 0 to HW filter on device eth22 [ 723.193943][ T9889] team0: Port device team_slave_0 added [ 723.216560][ T9889] team0: Port device team_slave_1 added [ 723.312528][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.312546][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.312569][ T9889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.366069][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.366087][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.366111][ T9889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.556781][ T9889] hsr_slave_0: entered promiscuous mode [ 723.566150][ T9889] hsr_slave_1: entered promiscuous mode [ 723.661048][ T30] audit: type=1400 audit(1793749940.237:454): avc: denied { write } for pid=9997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.759795][ T30] audit: type=1400 audit(1793749940.337:455): avc: denied { write } for pid=10008 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.855859][ T5282] 8021q: adding VLAN 0 to HW filter on device eth23 [ 724.220069][ T30] audit: type=1400 audit(1793749940.797:456): avc: denied { write } for pid=10012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.299859][ T30] audit: type=1400 audit(1793749940.877:457): avc: denied { write } for pid=10024 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.364002][ T5282] 8021q: adding VLAN 0 to HW filter on device eth24 [ 724.478951][ T9889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 724.483134][ T9889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.484541][ T9889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 724.493500][ T9889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.494364][ T9889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 724.500678][ T9889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.501481][ T9889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 724.508926][ T9889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.573970][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.583757][ T9889] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.592542][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.592626][ T7099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.599586][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.599661][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.735608][ T30] audit: type=1400 audit(1793749941.317:458): avc: denied { write } for pid=10026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.816793][ T30] audit: type=1400 audit(1793749941.397:459): avc: denied { write } for pid=10046 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.050783][ T9889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.090370][ T9889] veth0_vlan: entered promiscuous mode [ 725.098460][ T9889] veth1_vlan: entered promiscuous mode [ 725.123488][ T9889] veth0_macvtap: entered promiscuous mode [ 725.131163][ T9889] veth1_macvtap: entered promiscuous mode [ 725.143526][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.155953][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.176115][ T7099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.176451][ T7099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.176481][ T7099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.176508][ T7099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.232643][ T30] audit: type=1400 audit(1793749941.807:460): avc: denied { write } for pid=10051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.269896][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.269917][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.326600][ T9843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.326622][ T9843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.342455][ T30] audit: type=1400 audit(1793749941.917:461): avc: denied { write } for pid=10066 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.623825][ T30] audit: type=1400 audit(1793749942.197:462): avc: denied { write } for pid=10074 comm="syz.3.719" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.662951][T10078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 725.702390][ T30] audit: type=1400 audit(1793749942.277:463): avc: denied { write } for pid=10074 comm="syz.3.719" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 733.926033][ T5990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 735.931854][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 735.931871][ T30] audit: type=1400 audit(1793749952.507:484): avc: denied { write } for pid=10214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.994222][ T30] audit: type=1400 audit(1793749952.577:485): avc: denied { write } for pid=10225 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.743165][ T30] audit: type=1400 audit(1793749955.317:486): avc: denied { write } for pid=10228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.812546][ T30] audit: type=1400 audit(1793749955.387:487): avc: denied { write } for pid=10239 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.012290][ T30] audit: type=1400 audit(1793749955.587:488): avc: denied { write } for pid=10242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.068107][ T30] audit: type=1400 audit(1793749955.647:489): avc: denied { write } for pid=10253 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.568110][ T30] audit: type=1400 audit(1793749956.147:490): avc: denied { write } for pid=10256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.636843][ T30] audit: type=1400 audit(1793749956.217:491): avc: denied { write } for pid=10267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.875453][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.875486][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.324989][T10274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 746.359237][T10281] vivid-001: ================= START STATUS ================= [ 746.359255][T10281] vivid-001: RDS Tx I/O Mode: Controls [ 746.359531][T10281] vivid-001: RDS Program ID: 32904 [ 746.360967][T10281] vivid-001: RDS Program Type: 3 [ 746.360989][T10281] vivid-001: RDS PS Name: VIVID-TX [ 746.361009][T10281] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 746.361030][T10281] vivid-001: RDS Stereo: true [ 746.362301][T10281] vivid-001: RDS Artificial Head: false [ 746.362322][T10281] vivid-001: RDS Compressed: false [ 746.362341][T10281] vivid-001: RDS Dynamic PTY: false [ 746.362551][T10281] vivid-001: RDS Traffic Announcement: false [ 746.362594][T10281] vivid-001: RDS Traffic Program: true [ 746.362614][T10281] vivid-001: RDS Music: true [ 746.362632][T10281] vivid-001: ================== END STATUS ================== [ 747.902274][T10296] orangefs_mount: mount request failed with -4 [ 749.871946][T10312] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 750.432527][T10306] vivid-003: ================= START STATUS ================= [ 750.432548][T10306] vivid-003: RDS Tx I/O Mode: Controls [ 750.432571][T10306] vivid-003: RDS Program ID: 32904 [ 750.432594][T10306] vivid-003: RDS Program Type: 3 [ 750.441837][T10306] vivid-003: RDS PS Name: VIVID-TX [ 750.441860][T10306] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 750.441885][T10306] vivid-003: RDS Stereo: true [ 750.447648][T10306] vivid-003: RDS Artificial Head: false [ 750.447676][T10306] vivid-003: RDS Compressed: false [ 750.447695][T10306] vivid-003: RDS Dynamic PTY: false [ 750.447712][T10306] vivid-003: RDS Traffic Announcement: false [ 750.447755][T10306] vivid-003: RDS Traffic Program: true [ 750.447775][T10306] vivid-003: RDS Music: true [ 750.449481][T10306] vivid-003: ================== END STATUS ================== [ 753.017649][T10330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 753.877368][T10322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 754.658649][ T30] audit: type=1400 audit(1793749970.447:492): avc: denied { write } for pid=10321 comm="syz.8.746" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 754.658691][ T30] audit: type=1400 audit(1793749970.517:493): avc: denied { write } for pid=10321 comm="syz.8.746" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 756.020494][T10328] vivid-004: ================= START STATUS ================= [ 756.020514][T10328] vivid-004: RDS Tx I/O Mode: Controls [ 756.020537][T10328] vivid-004: RDS Program ID: 32904 [ 756.020568][T10328] vivid-004: RDS Program Type: 3 [ 756.020799][T10328] vivid-004: RDS PS Name: VIVID-TX [ 756.020819][T10328] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 756.020842][T10328] vivid-004: RDS Stereo: true [ 756.020998][T10328] vivid-004: RDS Artificial Head: false [ 756.021410][T10328] vivid-004: RDS Compressed: false [ 756.021430][T10328] vivid-004: RDS Dynamic PTY: false [ 756.021447][T10328] vivid-004: RDS Traffic Announcement: false [ 756.022994][T10328] vivid-004: RDS Traffic Program: true [ 756.023037][T10328] vivid-004: RDS Music: true [ 756.023062][T10328] vivid-004: ================== END STATUS ================== [ 758.542903][ T30] audit: type=1400 audit(1793749975.097:494): avc: denied { create } for pid=10346 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 759.652496][T10354] orangefs_mount: mount request failed with -4 [ 760.571532][T10344] vivid-003: ================= START STATUS ================= [ 760.571558][T10344] vivid-003: RDS Tx I/O Mode: Controls [ 760.571581][T10344] vivid-003: RDS Program ID: 32904 [ 760.572372][T10344] vivid-003: RDS Program Type: 3 [ 760.572391][T10344] vivid-003: RDS PS Name: VIVID-TX [ 760.572411][T10344] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 760.572433][T10344] vivid-003: RDS Stereo: true [ 760.572823][T10344] vivid-003: RDS Artificial Head: false [ 760.572845][T10344] vivid-003: RDS Compressed: false [ 760.572865][T10344] vivid-003: RDS Dynamic PTY: false [ 760.572883][T10344] vivid-003: RDS Traffic Announcement: false [ 760.572903][T10344] vivid-003: RDS Traffic Program: true [ 760.573317][T10344] vivid-003: RDS Music: true [ 760.573337][T10344] vivid-003: ================== END STATUS ================== [ 761.329750][T10366] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 762.329154][T10361] vivid-001: ================= START STATUS ================= [ 762.329175][T10361] vivid-001: RDS Tx I/O Mode: Controls [ 762.329199][T10361] vivid-001: RDS Program ID: 32904 [ 762.330191][T10361] vivid-001: RDS Program Type: 3 [ 762.330213][T10361] vivid-001: RDS PS Name: VIVID-TX [ 762.330233][T10361] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 762.330257][T10361] vivid-001: RDS Stereo: true [ 762.330591][T10361] vivid-001: RDS Artificial Head: false [ 762.330611][T10361] vivid-001: RDS Compressed: false [ 762.330630][T10361] vivid-001: RDS Dynamic PTY: false [ 762.330647][T10361] vivid-001: RDS Traffic Announcement: false [ 762.330666][T10361] vivid-001: RDS Traffic Program: true [ 762.330900][T10361] vivid-001: RDS Music: true [ 762.330919][T10361] vivid-001: ================== END STATUS ================== [ 762.837869][ T30] audit: type=1400 audit(1793749979.417:495): avc: denied { write } for pid=10368 comm="syz.9.756" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 762.891244][T10369] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 762.956484][ T30] audit: type=1400 audit(1793749979.537:496): avc: denied { write } for pid=10368 comm="syz.9.756" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 764.753325][T10373] vivid-001: ================= START STATUS ================= [ 764.753344][T10373] vivid-001: RDS Tx I/O Mode: Controls [ 764.753742][T10373] vivid-001: RDS Program ID: 32904 [ 764.767634][T10373] vivid-001: RDS Program Type: 3 [ 764.767657][T10373] vivid-001: RDS PS Name: VIVID-TX [ 764.767676][T10373] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 764.767885][T10373] vivid-001: RDS Stereo: true [ 764.767904][T10373] vivid-001: RDS Artificial Head: false [ 764.767924][T10373] vivid-001: RDS Compressed: false [ 764.767943][T10373] vivid-001: RDS Dynamic PTY: false [ 764.770265][T10373] vivid-001: RDS Traffic Announcement: false [ 764.770790][T10373] vivid-001: RDS Traffic Program: true [ 764.770812][T10373] vivid-001: RDS Music: true [ 764.772587][T10373] vivid-001: ================== END STATUS ================== [ 764.851746][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 766.350567][T10375] vivid-001: ================= START STATUS ================= [ 766.350587][T10375] vivid-001: RDS Tx I/O Mode: Controls [ 766.351912][T10375] vivid-001: RDS Program ID: 32904 [ 766.351935][T10375] vivid-001: RDS Program Type: 3 [ 766.351960][T10375] vivid-001: RDS PS Name: VIVID-TX [ 766.352383][T10375] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 766.352408][T10375] vivid-001: RDS Stereo: true [ 766.352428][T10375] vivid-001: RDS Artificial Head: false [ 766.352446][T10375] vivid-001: RDS Compressed: false [ 766.355951][T10375] vivid-001: RDS Dynamic PTY: false [ 766.355993][T10375] vivid-001: RDS Traffic Announcement: false [ 766.356014][T10375] vivid-001: RDS Traffic Program: true [ 766.356868][T10375] vivid-001: RDS Music: true [ 766.356892][T10375] vivid-001: ================== END STATUS ================== [ 769.512071][ T30] audit: type=1400 audit(1793749986.087:497): avc: denied { write } for pid=10402 comm="syz.8.766" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 769.567830][T10407] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 769.687507][ T30] audit: type=1400 audit(1793749986.267:498): avc: denied { write } for pid=10402 comm="syz.8.766" name="core" dev="configfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 769.866859][T10401] vivid-002: ================= START STATUS ================= [ 769.866884][T10401] vivid-002: RDS Tx I/O Mode: Controls [ 769.866908][T10401] vivid-002: RDS Program ID: 32904 [ 769.866936][T10401] vivid-002: RDS Program Type: 3 [ 769.872140][T10401] vivid-002: RDS PS Name: VIVID-TX [ 769.872163][T10401] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 769.872186][T10401] vivid-002: RDS Stereo: true [ 769.872741][T10401] vivid-002: RDS Artificial Head: false [ 769.872765][T10401] vivid-002: RDS Compressed: false [ 769.872785][T10401] vivid-002: RDS Dynamic PTY: false [ 769.872804][T10401] vivid-002: RDS Traffic Announcement: false [ 770.021957][T10401] vivid-002: RDS Traffic Program: true [ 770.022007][T10401] vivid-002: RDS Music: true [ 770.022029][T10401] vivid-002: ================== END STATUS ================== [ 771.202952][ T30] audit: type=1400 audit(1793749987.777:499): avc: denied { relabelfrom } for pid=10412 comm="syz.6.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 771.227652][ T30] audit: type=1400 audit(1793749987.807:500): avc: denied { relabelto } for pid=10412 comm="syz.6.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 772.771003][ T30] audit: type=1400 audit(1793749989.297:501): avc: denied { prog_run } for pid=10419 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 772.902215][ T30] audit: type=1400 audit(1793749989.477:502): avc: denied { create } for pid=10421 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 772.903189][ T30] audit: type=1400 audit(1793749989.477:503): avc: denied { setopt } for pid=10421 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 773.236372][ T30] audit: type=1400 audit(1793749989.817:504): avc: denied { create } for pid=10425 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.270024][ T30] audit: type=1400 audit(1793749989.847:505): avc: denied { write } for pid=10425 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.592990][T10428] netlink: 'syz.8.774': attribute type 10 has an invalid length. [ 778.707902][T10428] syz_tun: entered promiscuous mode [ 778.710931][T10428] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 778.802366][ T30] audit: type=1400 audit(1793749995.377:506): avc: denied { setopt } for pid=10441 comm="syz.8.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 778.863989][T10448] netlink: 830 bytes leftover after parsing attributes in process `syz.3.782'. [ 778.872794][ T30] audit: type=1400 audit(1793749995.447:507): avc: denied { create } for pid=10450 comm="syz.6.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 778.907527][ T30] audit: type=1400 audit(1793749995.487:508): avc: denied { write } for pid=10450 comm="syz.6.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 778.937509][T10443] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 779.037748][T10455] netlink: 'syz.7.786': attribute type 21 has an invalid length. [ 779.179632][ T30] audit: type=1400 audit(1793749995.757:509): avc: denied { mount } for pid=10460 comm="syz.9.789" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 779.253180][ T30] audit: type=1400 audit(1793749995.827:510): avc: denied { unmount } for pid=8840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 779.312851][ T30] audit: type=1400 audit(1793749995.887:511): avc: denied { connect } for pid=10466 comm="syz.6.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 779.360067][ T30] audit: type=1400 audit(1793749995.937:512): avc: denied { listen } for pid=10466 comm="syz.6.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 779.739808][ T30] audit: type=1400 audit(1793749996.317:513): avc: denied { create } for pid=10471 comm="syz.6.796" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.743141][ T30] audit: type=1400 audit(1793749996.317:514): avc: denied { map } for pid=10471 comm="syz.6.796" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.743842][ T30] audit: type=1400 audit(1793749996.317:515): avc: denied { read write } for pid=10471 comm="syz.6.796" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.902129][T10465] pim6reg: entered allmulticast mode [ 779.962293][T10476] pim6reg: left allmulticast mode [ 780.136483][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 781.569657][ T1233] wlan1: Trigger new scan to find an IBSS to join [ 782.886492][T10507] FAULT_INJECTION: forcing a failure. [ 782.886492][T10507] name failslab, interval 1, probability 0, space 0, times 1 [ 782.886524][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.6.803 Not tainted syzkaller #0 PREEMPT(full) [ 782.886547][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 782.886559][T10507] Call Trace: [ 782.886566][T10507] [ 782.886574][T10507] dump_stack_lvl+0x100/0x190 [ 782.886613][T10507] should_fail_ex.cold+0x5/0xa [ 782.886644][T10507] should_failslab+0xc2/0x120 [ 782.886669][T10507] __kmalloc_noprof+0xfc/0x840 [ 782.886702][T10507] ? __memcg_list_lru_alloc+0x429/0x6a0 [ 782.886729][T10507] __memcg_list_lru_alloc+0x429/0x6a0 [ 782.886751][T10507] ? xa_load+0x149/0x2c0 [ 782.886789][T10507] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 782.886819][T10507] ? rcu_read_unlock+0x17/0x60 [ 782.886851][T10507] memcg_list_lru_alloc+0xdc/0x110 [ 782.886875][T10507] __memcg_slab_post_alloc_hook+0x277/0x10b0 [ 782.886909][T10507] ? kasan_save_track+0x14/0x30 [ 782.886933][T10507] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 782.886966][T10507] ? aio_alloc_inode+0x25/0x70 [ 782.886995][T10507] ? __pfx_aio_alloc_inode+0x10/0x10 [ 782.887025][T10507] aio_alloc_inode+0x25/0x70 [ 782.887052][T10507] alloc_inode+0x68/0x250 [ 782.887072][T10507] alloc_anon_inode+0x28/0x3b0 [ 782.887102][T10507] ioctx_alloc+0x4dc/0x21d0 [ 782.887139][T10507] ? __might_fault+0xc5/0x140 [ 782.887164][T10507] ? find_held_lock+0x2b/0x80 [ 782.887186][T10507] ? __pfx_ioctx_alloc+0x10/0x10 [ 782.887224][T10507] __x64_sys_io_setup+0xc9/0x220 [ 782.887257][T10507] do_syscall_64+0x123/0x790 [ 782.887280][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.887301][T10507] RIP: 0033:0x7facca59fb19 [ 782.887318][T10507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.887338][T10507] RSP: 002b:00007faccb41a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 782.887360][T10507] RAX: ffffffffffffffda RBX: 00007facca826090 RCX: 00007facca59fb19 [ 782.887373][T10507] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000239f [ 782.887385][T10507] RBP: 00007facca637b70 R08: 0000000000000000 R09: 0000000000000000 [ 782.887398][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.887410][T10507] R13: 00007facca826128 R14: 00007facca826090 R15: 00007ffc94618548 [ 782.887438][T10507] [ 783.545017][T10526] zram0: detected capacity change from 0 to 8 [ 783.822256][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 783.822274][ T30] audit: type=1400 audit(1793750000.397:548): avc: denied { create } for pid=10535 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 783.980180][T10538] FAULT_INJECTION: forcing a failure. [ 783.980180][T10538] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 783.980204][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.7.819 Not tainted syzkaller #0 PREEMPT(full) [ 783.980219][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 783.980228][T10538] Call Trace: [ 783.980233][T10538] [ 783.980237][T10538] dump_stack_lvl+0x100/0x190 [ 783.980264][T10538] should_fail_ex.cold+0x5/0xa [ 783.980284][T10538] should_fail_alloc_page+0xeb/0x140 [ 783.980300][T10538] prepare_alloc_pages+0x1f0/0x5b0 [ 783.980316][T10538] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 783.980335][T10538] ? __pfx_get_page_from_freelist+0x10/0x10 [ 783.980353][T10538] ? rcu_is_watching+0x13/0xc0 [ 783.980366][T10538] ? trace_mm_page_alloc+0x164/0x1c0 [ 783.980380][T10538] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 783.980398][T10538] ? is_bpf_text_address+0x8a/0x1a0 [ 783.980413][T10538] ? lock_release+0x24d/0x310 [ 783.980430][T10538] ? bpf_ksym_find+0x128/0x1c0 [ 783.980446][T10538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 783.980463][T10538] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 783.980481][T10538] ? is_bpf_text_address+0x94/0x1a0 [ 783.980496][T10538] ? kernel_text_address+0x8d/0x100 [ 783.980509][T10538] ? mark_held_locks+0x40/0x70 [ 783.980525][T10538] ? __kernel_text_address+0xd/0x30 [ 783.980539][T10538] ? unwind_get_return_address+0x59/0xa0 [ 783.980552][T10538] ? arch_stack_walk+0xa6/0xf0 [ 783.980571][T10538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 783.980593][T10538] ? stack_trace_save+0x8e/0xc0 [ 783.980609][T10538] ? __pfx_stack_trace_save+0x10/0x10 [ 783.980632][T10538] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 783.980653][T10538] ? policy_nodemask+0xed/0x5e0 [ 783.980669][T10538] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 783.980695][T10538] __kasan_populate_vmalloc+0xf0/0x210 [ 783.980717][T10538] alloc_vmap_area+0x963/0x2bc0 [ 783.980741][T10538] ? kasan_save_track+0x14/0x30 [ 783.980759][T10538] ? __kasan_kmalloc+0xaa/0xb0 [ 783.980771][T10538] ? __pfx_alloc_vmap_area+0x10/0x10 [ 783.980792][T10538] ? __get_vm_area_node+0x124/0x350 [ 783.980807][T10538] __get_vm_area_node+0x1ed/0x350 [ 783.980822][T10538] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 783.980837][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 783.980857][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 783.980880][T10538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 783.980895][T10538] ? rcu_is_watching+0x13/0xc0 [ 783.980911][T10538] __kvmalloc_node_noprof+0x3da/0x9b0 [ 783.980931][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 783.980945][T10538] ? __kmalloc_noprof+0x350/0x840 [ 783.980964][T10538] ? __find_set_type_get+0x78/0x440 [ 783.980980][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 783.980996][T10538] hash_ipmac_create+0x40b/0x1280 [ 783.981013][T10538] ? __pfx_hash_ipmac_create+0x10/0x10 [ 783.981028][T10538] ip_set_create+0x6c4/0x1510 [ 783.981046][T10538] ? __pfx_ip_set_create+0x10/0x10 [ 783.981060][T10538] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 783.981090][T10538] ? find_held_lock+0x2b/0x80 [ 783.981107][T10538] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 783.981131][T10538] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 783.981152][T10538] ? __lock_acquire+0x5c0/0x1f40 [ 783.981183][T10538] ? avc_has_perm_noaudit+0x145/0x470 [ 783.981201][T10538] netlink_rcv_skb+0x159/0x420 [ 783.981217][T10538] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 783.981237][T10538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 783.981261][T10538] ? ns_capable+0xcd/0xf0 [ 783.981277][T10538] nfnetlink_rcv+0x1b3/0x440 [ 783.981296][T10538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 783.981314][T10538] ? netlink_deliver_tap+0x1ae/0xb50 [ 783.981331][T10538] netlink_unicast+0x668/0x950 [ 783.981348][T10538] ? __pfx_netlink_unicast+0x10/0x10 [ 783.981368][T10538] netlink_sendmsg+0x9ac/0x10c0 [ 783.981385][T10538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.981404][T10538] ? selinux_socket_sendmsg+0x198/0x2f0 [ 783.981423][T10538] ? ____sys_sendmsg+0xa99/0xc30 [ 783.981439][T10538] ____sys_sendmsg+0xa99/0xc30 [ 783.981455][T10538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.981471][T10538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.981492][T10538] ? plist_check_list+0x1b8/0x280 [ 783.981510][T10538] ? plist_del+0x308/0x510 [ 783.981529][T10538] ___sys_sendmsg+0x190/0x1e0 [ 783.981548][T10538] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.981565][T10538] ? futex_wake+0x220/0x5e0 [ 783.981589][T10538] ? find_held_lock+0x2b/0x80 [ 783.981613][T10538] __sys_sendmsg+0x160/0x210 [ 783.981629][T10538] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.981653][T10538] do_syscall_64+0x123/0x790 [ 783.981668][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.981682][T10538] RIP: 0033:0x7fb530d9fb19 [ 783.981693][T10538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.981705][T10538] RSP: 002b:00007fb531cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.981717][T10538] RAX: ffffffffffffffda RBX: 00007fb531025fa0 RCX: 00007fb530d9fb19 [ 783.981725][T10538] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 783.981733][T10538] RBP: 00007fb530e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 783.981742][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.981749][T10538] R13: 00007fb531026038 R14: 00007fb531025fa0 R15: 00007ffdbc893db8 [ 783.981771][T10538] [ 784.000251][T10538] syz.7.819: vmalloc error: size 4194344, align 0x200000, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 784.000379][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.7.819 Not tainted syzkaller #0 PREEMPT(full) [ 784.000402][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 784.000414][T10538] Call Trace: [ 784.000420][T10538] [ 784.000428][T10538] dump_stack_lvl+0x100/0x190 [ 784.000462][T10538] warn_alloc.cold+0x9e/0xb2 [ 784.000482][T10538] ? __pfx_warn_alloc+0x10/0x10 [ 784.000509][T10538] ? lockdep_hardirqs_on+0x7d/0x110 [ 784.000529][T10538] ? __get_vm_area_node+0x2f0/0x350 [ 784.000552][T10538] ? __get_vm_area_node+0x22b/0x350 [ 784.000575][T10538] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 784.000604][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 784.000635][T10538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 784.000659][T10538] ? rcu_is_watching+0x13/0xc0 [ 784.000686][T10538] __kvmalloc_node_noprof+0x3da/0x9b0 [ 784.000712][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 784.000733][T10538] ? __kmalloc_noprof+0x350/0x840 [ 784.000763][T10538] ? __find_set_type_get+0x78/0x440 [ 784.000786][T10538] ? hash_ipmac_create+0x40b/0x1280 [ 784.000813][T10538] hash_ipmac_create+0x40b/0x1280 [ 784.000838][T10538] ? __pfx_hash_ipmac_create+0x10/0x10 [ 784.000862][T10538] ip_set_create+0x6c4/0x1510 [ 784.000891][T10538] ? __pfx_ip_set_create+0x10/0x10 [ 784.000912][T10538] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 784.000958][T10538] ? find_held_lock+0x2b/0x80 [ 784.000984][T10538] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 784.001018][T10538] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 784.001047][T10538] ? __lock_acquire+0x5c0/0x1f40 [ 784.001093][T10538] ? avc_has_perm_noaudit+0x145/0x470 [ 784.001121][T10538] netlink_rcv_skb+0x159/0x420 [ 784.001142][T10538] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 784.001170][T10538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.001202][T10538] ? ns_capable+0xcd/0xf0 [ 784.001224][T10538] nfnetlink_rcv+0x1b3/0x440 [ 784.001250][T10538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 784.001276][T10538] ? netlink_deliver_tap+0x1ae/0xb50 [ 784.001301][T10538] netlink_unicast+0x668/0x950 [ 784.001326][T10538] ? __pfx_netlink_unicast+0x10/0x10 [ 784.001355][T10538] netlink_sendmsg+0x9ac/0x10c0 [ 784.001380][T10538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.001408][T10538] ? selinux_socket_sendmsg+0x198/0x2f0 [ 784.001436][T10538] ? ____sys_sendmsg+0xa99/0xc30 [ 784.001459][T10538] ____sys_sendmsg+0xa99/0xc30 [ 784.001481][T10538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.001505][T10538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.001534][T10538] ? plist_check_list+0x1b8/0x280 [ 784.001558][T10538] ? plist_del+0x308/0x510 [ 784.001585][T10538] ___sys_sendmsg+0x190/0x1e0 [ 784.001611][T10538] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.001637][T10538] ? futex_wake+0x220/0x5e0 [ 784.001670][T10538] ? find_held_lock+0x2b/0x80 [ 784.001704][T10538] __sys_sendmsg+0x160/0x210 [ 784.001725][T10538] ? __pfx___sys_sendmsg+0x10/0x10 [ 784.001764][T10538] do_syscall_64+0x123/0x790 [ 784.001785][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.001803][T10538] RIP: 0033:0x7fb530d9fb19 [ 784.001820][T10538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.001836][T10538] RSP: 002b:00007fb531cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.001853][T10538] RAX: ffffffffffffffda RBX: 00007fb531025fa0 RCX: 00007fb530d9fb19 [ 784.001865][T10538] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 784.001876][T10538] RBP: 00007fb530e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 784.001887][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.001898][T10538] R13: 00007fb531026038 R14: 00007fb531025fa0 R15: 00007ffdbc893db8 [ 784.001924][T10538] [ 784.011405][T10538] Mem-Info: [ 784.011418][T10538] active_anon:11293 inactive_anon:0 isolated_anon:0 [ 784.011418][T10538] active_file:4384 inactive_file:58293 isolated_file:0 [ 784.011418][T10538] unevictable:10 dirty:288 writeback:0 [ 784.011418][T10538] slab_reclaimable:8287 slab_unreclaimable:103351 [ 784.011418][T10538] mapped:30945 shmem:540 pagetables:1916 [ 784.011418][T10538] sec_pagetables:0 bounce:0 [ 784.011418][T10538] kernel_misc_reclaimable:0 [ 784.011418][T10538] free:1291466 free_pcp:12181 free_cma:0 [ 784.011892][T10538] Node 0 active_anon:45172kB inactive_anon:0kB active_file:17536kB inactive_file:232964kB unevictable:40kB isolated(anon):0kB isolated(file):0kB mapped:123780kB dirty:1152kB writeback:0kB shmem:2160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:7500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 784.011940][T10538] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 784.011986][T10538] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.012039][T10538] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 784.012073][T10538] Node 0 DMA32 free:1210836kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:45172kB inactive_anon:0kB active_file:17536kB inactive_file:232964kB unevictable:40kB writepending:1152kB zspages:0kB present:3129332kB managed:2506256kB mlocked:40kB bounce:0kB free_pcp:48724kB local_pcp:32544kB free_cma:0kB [ 784.012127][T10538] lowmem_reserve[]: 0 0 1 1 1 [ 784.012166][T10538] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1752kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.012212][T10538] lowmem_reserve[]: 0 0 0 0 0 [ 784.012241][T10538] Node 1 Normal free:3939668kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.012288][T10538] lowmem_reserve[]: 0 0 0 0 0 [ 784.012316][T10538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 784.012442][T10538] Node 0 DMA32: 7291*4kB (UME) 7049*8kB (UME) 5332*16kB (UME) 3869*32kB (UME) 1904*64kB (UME) 1145*128kB (UME) 424*256kB (UME) 99*512kB (UME) 15*1024kB (M) 3*2048kB (ME) 114*4096kB (UM) = 1210772kB [ 784.016802][T10538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 784.023096][T10538] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 7*16kB (UM) 9*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939668kB [ 784.023258][T10538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.023272][T10538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.023285][T10538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.023298][T10538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.023311][T10538] 63213 total pagecache pages [ 784.023317][T10538] 0 pages in swap cache [ 784.023323][T10538] Free swap = 124996kB [ 784.023329][T10538] Total swap = 124996kB [ 784.023336][T10538] 2097051 pages RAM [ 784.023341][T10538] 0 pages HighMem/MovableOnly [ 784.023347][T10538] 438433 pages reserved [ 784.023353][T10538] 0 pages cma reserved [ 784.030719][ T30] audit: type=1400 audit(1793750000.607:549): avc: denied { bind } for pid=10539 comm="syz.8.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 784.664831][ T1233] wlan1: Trigger new scan to find an IBSS to join [ 785.424845][ T30] audit: type=1400 audit(1793750002.007:550): avc: denied { shutdown } for pid=10557 comm="syz.7.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 785.506964][T10562] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 785.748712][T10562] block device autoloading is deprecated and will be removed. [ 785.794886][T10577] device-mapper: table: 248:0: multipath: queue-length ps: incorrect number of arguments (-EINVAL) [ 785.794913][T10577] device-mapper: ioctl: error adding target to table [ 785.829511][ T30] audit: type=1400 audit(1793750002.407:551): avc: denied { write } for pid=10561 comm="syz.8.828" name="md8" dev="devtmpfs" ino=2794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 785.857783][ T30] audit: type=1400 audit(1793750002.427:552): avc: denied { bind } for pid=10581 comm="syz.7.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 785.857834][ T30] audit: type=1400 audit(1793750002.427:553): avc: denied { connect } for pid=10581 comm="syz.7.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 785.923657][ T30] audit: type=1400 audit(1793750002.497:554): avc: denied { ioctl } for pid=10580 comm="syz.9.835" path="socket:[23838]" dev="sockfs" ino=23838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 785.931628][T10575] md: pers->run() failed ... [ 785.968937][ T30] audit: type=1400 audit(1793750002.547:555): avc: denied { mounton } for pid=10580 comm="syz.9.835" path="/48/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 785.996526][ T30] audit: type=1400 audit(1793750002.577:556): avc: denied { map } for pid=10580 comm="syz.9.835" path="socket:[23838]" dev="sockfs" ino=23838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 786.023097][T10569] block device autoloading is deprecated and will be removed. [ 786.023664][ T30] audit: type=1400 audit(1793750002.597:557): avc: denied { read } for pid=10580 comm="syz.9.835" path="socket:[23838]" dev="sockfs" ino=23838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 786.026619][T10562] md: md8 stopped. [ 786.071379][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.095494][T10584] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77edc [ 786.095523][T10584] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 786.095539][T10584] memcg:ffff888077edfe91 [ 786.095548][T10584] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 786.095567][T10584] page_type: f5(slab) [ 786.095584][T10584] raw: 00fff00000000040 ffff8880216a5280 dead000000000100 dead000000000122 [ 786.095601][T10584] raw: 0000000000000000 00000002000d000d 00000000f5000000 ffff888077edfe91 [ 786.095618][T10584] head: 00fff00000000040 ffff8880216a5280 dead000000000100 dead000000000122 [ 786.095636][T10584] head: 0000000000000000 00000002000d000d 00000000f5000000 ffff888077edfe91 [ 786.095653][T10584] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 786.095670][T10584] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 786.095681][T10584] page dumped because: unmovable page [ 786.095690][T10584] page_owner tracks the page as allocated [ 786.095697][T10584] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9889, tgid 9889 (syz-executor), ts 725306036303 [ 786.095731][T10584] post_alloc_hook+0xfd/0x120 [ 786.095758][T10584] get_page_from_freelist+0x1113/0x35e0 [ 786.095785][T10584] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 786.095814][T10584] new_slab+0xb1/0x6d0 [ 786.099877][T10584] refill_objects+0xe3/0x410 [ 786.099914][T10584] __pcs_replace_empty_main+0x35e/0x650 [ 786.099939][T10584] kmem_cache_alloc_lru_noprof+0x4bb/0x6a0 [ 786.099966][T10584] alloc_inode+0x68/0x250 [ 786.099982][T10584] new_inode+0x22/0x1c0 [ 786.099997][T10584] __debugfs_create_file+0xfb/0x500 [ 786.100019][T10584] debugfs_create_file_short+0x41/0x60 [ 786.100040][T10584] debugfs_hw_add+0x293/0x3a0 [ 786.100067][T10584] ieee80211_register_hw+0x30a7/0x45c0 [ 786.100085][T10584] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 786.100105][T10584] hwsim_new_radio_nl+0xc6b/0x13f0 [ 786.100124][T10584] genl_family_rcv_msg_doit+0x214/0x300 [ 786.100149][T10584] page last free pid 8134 tgid 8134 ts 455016578295 stack trace: [ 786.100164][T10584] __free_frozen_pages+0x7b4/0x1110 [ 786.100186][T10584] qlist_free_all+0x47/0xf0 [ 786.100215][T10584] kasan_quarantine_reduce+0x1a0/0x1f0 [ 786.100253][T10584] __kasan_slab_alloc+0x69/0x90 [ 786.100273][T10584] kmem_cache_alloc_noprof+0x269/0x6a0 [ 786.100303][T10584] __anon_vma_prepare+0xb0/0x870 [ 786.100326][T10584] __vmf_anon_prepare+0x31a/0x4b0 [ 786.100357][T10584] do_anonymous_page+0x47d/0x2050 [ 786.100377][T10584] __handle_mm_fault+0x1ff3/0x2f60 [ 786.100398][T10584] handle_mm_fault+0x363/0xa20 [ 786.100418][T10584] do_user_addr_fault+0x59c/0x12f0 [ 786.100448][T10584] exc_page_fault+0x6f/0xd0 [ 786.100466][T10584] asm_exc_page_fault+0x26/0x30 [ 786.439503][T10593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 786.506809][T10592] fuse: Unknown parameter 'use00000000000000000007' [ 787.164771][T10592] tcpci 0-0050: probe with driver tcpci failed with error -5 [ 787.192124][T10592] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 787.489421][T10610] svc: failed to register lockdv1 RPC service (errno 5). [ 787.489885][T10610] lockd_up: makesock failed, error=-5 [ 787.579131][T10612] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=10612 comm=syz.9.844 [ 787.607588][T10612] FAULT_INJECTION: forcing a failure. [ 787.607588][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 787.607621][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.9.844 Not tainted syzkaller #0 PREEMPT(full) [ 787.607646][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 787.607659][T10612] Call Trace: [ 787.607667][T10612] [ 787.607676][T10612] dump_stack_lvl+0x100/0x190 [ 787.607717][T10612] should_fail_ex.cold+0x5/0xa [ 787.607750][T10612] should_failslab+0xc2/0x120 [ 787.607774][T10612] __kmalloc_cache_noprof+0x91/0x6d0 [ 787.607801][T10612] ? __rwlock_init+0x37/0x150 [ 787.607819][T10612] ? __trace_uprobe_create+0x798/0x2310 [ 787.607851][T10612] __trace_uprobe_create+0x798/0x2310 [ 787.607886][T10612] ? __pfx___trace_uprobe_create+0x10/0x10 [ 787.607909][T10612] ? trace_kmalloc+0xeb/0x110 [ 787.607935][T10612] ? __kasan_kmalloc+0xaa/0xb0 [ 787.607957][T10612] ? __kmalloc_noprof+0x350/0x840 [ 787.607987][T10612] ? argv_split+0x173/0x420 [ 787.608014][T10612] ? argv_split+0x359/0x420 [ 787.608036][T10612] ? __pfx___trace_uprobe_create+0x10/0x10 [ 787.608062][T10612] trace_probe_create+0xef/0x100 [ 787.608083][T10612] ? __pfx_trace_probe_create+0x10/0x10 [ 787.608113][T10612] dyn_event_create+0x50/0x90 [ 787.608140][T10612] create_or_delete_trace_uprobe+0x5a/0xb0 [ 787.608165][T10612] trace_parse_run_command+0x1ab/0x3b0 [ 787.608186][T10612] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 787.608215][T10612] vfs_write+0x2aa/0x1050 [ 787.608237][T10612] ? __pfx_probes_write+0x10/0x10 [ 787.608259][T10612] ? lock_acquire+0x1d1/0x380 [ 787.608286][T10612] ? __fget_files+0x34/0x3d0 [ 787.608310][T10612] ? __pfx_vfs_write+0x10/0x10 [ 787.608328][T10612] ? find_held_lock+0x2b/0x80 [ 787.608351][T10612] ? __fget_files+0x215/0x3d0 [ 787.608381][T10612] ? __fget_files+0x21f/0x3d0 [ 787.608414][T10612] ksys_write+0x12a/0x250 [ 787.608433][T10612] ? __pfx_ksys_write+0x10/0x10 [ 787.608462][T10612] do_syscall_64+0x123/0x790 [ 787.608486][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.608507][T10612] RIP: 0033:0x7f4b88b9fb19 [ 787.608525][T10612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.608544][T10612] RSP: 002b:00007f4b899e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.608563][T10612] RAX: ffffffffffffffda RBX: 00007f4b88e25fa0 RCX: 00007f4b88b9fb19 [ 787.608574][T10612] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000008 [ 787.608586][T10612] RBP: 00007f4b88c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 787.608597][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.608609][T10612] R13: 00007f4b88e26038 R14: 00007f4b88e25fa0 R15: 00007ffc0a7f6438 [ 787.608637][T10612] [ 787.627055][ T1233] wlan1: Trigger new scan to find an IBSS to join [ 787.850358][T10610] svc: failed to register nfsdv3 RPC service (errno 5). [ 787.852288][T10610] failed to unregister tcp with rpcbind [ 788.264976][T10637] pim6reg: entered allmulticast mode [ 788.308307][ T4949] libceph: connect (1)[c::]:6789 error -101 [ 788.308517][ T4949] libceph: mon0 (1)[c::]:6789 connect error [ 788.341885][T10630] mmap: syz.8.851 (10630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 788.387122][T10634] ceph: No mds server is up or the cluster is laggy [ 788.422445][T10626] pim6reg: left allmulticast mode [ 788.575079][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.849'. [ 788.645502][ T7274] wlan1: Creating new IBSS network, BSSID 0e:13:be:27:7e:0f [ 788.691592][T10642] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 788.859575][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 788.859594][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 788.859610][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 788.859619][ T5623] Workqueue: hci1 hci_rx_work [ 788.859636][ T5623] Call Trace: [ 788.859641][ T5623] [ 788.859649][ T5623] dump_stack_lvl+0x100/0x190 [ 788.859685][ T5623] sysfs_warn_dup.cold+0x1c/0x28 [ 788.859709][ T5623] sysfs_create_dir_ns+0x24b/0x2b0 [ 788.859727][ T5623] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 788.859744][ T5623] ? find_held_lock+0x2b/0x80 [ 788.859757][ T5623] ? kobject_add_internal+0x25f/0x930 [ 788.859775][ T5623] ? kobject_add_internal+0x25f/0x930 [ 788.859795][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.859808][ T5623] kobject_add_internal+0x2c8/0x930 [ 788.859828][ T5623] kobject_add+0x16a/0x1e0 [ 788.859844][ T5623] ? __pfx_kobject_add+0x10/0x10 [ 788.859864][ T5623] ? class_to_subsys+0x10f/0x150 [ 788.859883][ T5623] ? kobject_put+0xb9/0x640 [ 788.859898][ T5623] ? _raw_spin_unlock+0x28/0x50 [ 788.859920][ T5623] device_add+0x294/0x1970 [ 788.859936][ T5623] ? __pfx_dev_set_name+0x10/0x10 [ 788.859954][ T5623] ? __pfx_device_add+0x10/0x10 [ 788.859971][ T5623] ? mgmt_send_event_skb+0x2fb/0x460 [ 788.859989][ T5623] hci_conn_add_sysfs+0x1a3/0x260 [ 788.860006][ T5623] le_conn_complete_evt+0x12f9/0x2200 [ 788.860024][ T5623] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 788.860038][ T5623] ? hci_event_packet+0x186/0xcd0 [ 788.860050][ T5623] ? hci_event_packet+0x186/0xcd0 [ 788.860066][ T5623] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 788.860081][ T5623] ? skb_pull_data+0x15f/0x1e0 [ 788.860100][ T5623] hci_le_meta_evt+0x34a/0x5f0 [ 788.860114][ T5623] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 788.860131][ T5623] hci_event_packet+0x51c/0xcd0 [ 788.860144][ T5623] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 788.860159][ T5623] ? __pfx_hci_event_packet+0x10/0x10 [ 788.860175][ T5623] ? lockdep_hardirqs_on+0x7d/0x110 [ 788.860190][ T5623] hci_rx_work+0x6ea/0x10c0 [ 788.860205][ T5623] process_one_work+0xac7/0x1b10 [ 788.860225][ T5623] ? __pfx_process_one_work+0x10/0x10 [ 788.860239][ T5623] ? lock_acquire+0x1d1/0x380 [ 788.860260][ T5623] ? __pfx_hci_rx_work+0x10/0x10 [ 788.860273][ T5623] worker_thread+0x5ef/0xe50 [ 788.860292][ T5623] ? kthread+0x13a/0x450 [ 788.860303][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 788.860315][ T5623] kthread+0x373/0x450 [ 788.860326][ T5623] ? __pfx_kthread+0x10/0x10 [ 788.860339][ T5623] ret_from_fork+0x730/0xd60 [ 788.860363][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 788.860380][ T5623] ? __switch_to+0x800/0x10e0 [ 788.860393][ T5623] ? __pfx_kthread+0x10/0x10 [ 788.860406][ T5623] ret_from_fork_asm+0x1a/0x30 [ 788.860431][ T5623] [ 788.860445][ T5623] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 788.860465][ T5623] Bluetooth: hci1: failed to register connection device [ 789.464524][ T5623] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 789.564909][ T4949] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 789.716120][ T4949] usb 9-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 789.718793][ T4949] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 789.721229][ T4949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.026449][ T4949] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 790.062692][ T4949] wwan wwan0: port wwan0qmi0 attached [ 790.123952][T10666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.863'. [ 790.221199][ T4949] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, 72:f8:a0:ca:0f:18 [ 790.333059][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 790.333079][ T30] audit: type=1400 audit(1793750006.907:598): avc: denied { cmd } for pid=10669 comm="syz.6.864" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 790.422888][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.423253][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.460003][ T30] audit: type=1400 audit(1793750007.037:599): avc: denied { read write } for pid=10656 comm="syz.8.859" name="cdc-wdm0" dev="devtmpfs" ino=2805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 790.460056][ T30] audit: type=1400 audit(1793750007.037:600): avc: denied { open } for pid=10656 comm="syz.8.859" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 790.651749][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.652539][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.652758][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.652792][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.652984][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.652999][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.653191][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.653206][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.653397][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.653412][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.653602][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.653617][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.653807][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.653822][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.654064][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.654083][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.654273][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.654291][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.655500][ C1] qmi_wwan 9-1:1.0: nonzero urb status received: -71 [ 790.655518][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - 0 bytes [ 790.799892][ C1] qmi_wwan 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 790.800162][ T9264] usb 9-1: USB disconnect, device number 2 [ 790.829418][ T9264] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device [ 790.922692][ T30] audit: type=1400 audit(1793750007.497:601): avc: denied { unmount } for pid=8840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 790.958131][ T9264] wwan wwan0: port wwan0qmi0 disconnected [ 791.128503][T10684] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 791.412017][ T30] audit: type=1400 audit(1793750007.987:602): avc: denied { read } for pid=10692 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 791.412969][ T30] audit: type=1400 audit(1793750007.987:603): avc: denied { open } for pid=10692 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 791.429364][ T30] audit: type=1400 audit(1793750007.987:604): avc: denied { getattr } for pid=10692 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.088661][ T30] audit: type=1400 audit(1793750008.667:605): avc: denied { write } for pid=10673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.089142][ T30] audit: type=1400 audit(1793750008.667:606): avc: denied { create } for pid=10673 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.146257][ T30] audit: type=1400 audit(1793750008.727:607): avc: denied { write } for pid=10673 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=2216 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 792.277195][T10693] orangefs_mount: mount request failed with -4 [ 792.872515][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.9.876'. [ 793.081799][T10719] l2tp_ppp: sess 2/0: no socket in recv [ 793.229979][T10723] pim6reg: entered allmulticast mode [ 793.273931][T10723] pim6reg: left allmulticast mode [ 793.686350][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.874'. [ 795.203506][T10771] FAULT_INJECTION: forcing a failure. [ 795.203506][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 795.203574][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.6.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.203606][T10771] Tainted: [L]=SOFTLOCKUP [ 795.203613][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 795.203627][T10771] Call Trace: [ 795.203634][T10771] [ 795.203643][T10771] dump_stack_lvl+0x100/0x190 [ 795.203682][T10771] should_fail_ex.cold+0x5/0xa [ 795.203716][T10771] should_failslab+0xc2/0x120 [ 795.203740][T10771] kmem_cache_alloc_noprof+0x92/0x6a0 [ 795.203771][T10771] ? __pfx_vma_merge_new_range+0x10/0x10 [ 795.203798][T10771] ? vm_area_dup+0x27/0x9d0 [ 795.203823][T10771] vm_area_dup+0x27/0x9d0 [ 795.203848][T10771] copy_vma+0x761/0x1710 [ 795.203883][T10771] ? __pfx_copy_vma+0x10/0x10 [ 795.203936][T10771] ? lock_acquire+0x1d1/0x380 [ 795.203964][T10771] ? __vma_start_write+0x11c/0x280 [ 795.203987][T10771] copy_vma_and_data+0x298/0x850 [ 795.204016][T10771] ? __pfx_copy_vma_and_data+0x10/0x10 [ 795.204052][T10771] ? __vma_start_write+0x17f/0x280 [ 795.204069][T10771] ? __pfx___vma_start_write+0x10/0x10 [ 795.204094][T10771] move_vma+0x2a0/0x11e0 [ 795.204118][T10771] ? shmem_get_unmapped_area+0x141/0x960 [ 795.204156][T10771] ? __pfx_move_vma+0x10/0x10 [ 795.204177][T10771] ? security_mmap_addr+0x71/0x1e0 [ 795.204190][T10771] ? __get_unmapped_area+0x255/0x3e0 [ 795.204212][T10771] ? vrm_set_new_addr+0x1f5/0x2a0 [ 795.204229][T10771] mremap_to+0x234/0x530 [ 795.204245][T10771] ? __pfx_mremap_to+0x10/0x10 [ 795.204265][T10771] __do_sys_mremap+0xc6b/0x17f0 [ 795.204283][T10771] ? find_held_lock+0x2b/0x80 [ 795.204296][T10771] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 795.204315][T10771] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 795.204336][T10771] ? __pfx___do_sys_mremap+0x10/0x10 [ 795.204351][T10771] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 795.204370][T10771] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 795.204390][T10771] ? trace_sched_exit_tp+0x120/0x160 [ 795.204402][T10771] ? __schedule+0x1270/0x6990 [ 795.204421][T10771] ? do_futex+0x190/0x440 [ 795.204444][T10771] ? xfd_validate_state+0x129/0x190 [ 795.204466][T10771] do_syscall_64+0x123/0x790 [ 795.204480][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.204494][T10771] RIP: 0033:0x7facca59fb19 [ 795.204506][T10771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.204518][T10771] RSP: 002b:00007faccb43b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 795.204532][T10771] RAX: ffffffffffffffda RBX: 00007facca825fa0 RCX: 00007facca59fb19 [ 795.204540][T10771] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000 [ 795.204547][T10771] RBP: 00007facca637b70 R08: 0000200000a00000 R09: 0000000000000000 [ 795.204555][T10771] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 795.204562][T10771] R13: 00007facca826038 R14: 00007facca825fa0 R15: 00007ffc94618548 [ 795.204578][T10771] [ 796.448551][T10782] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 797.668296][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 797.668315][ T30] audit: type=1400 audit(1793750014.247:617): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.214 dest=37800 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 797.747722][ T30] audit: type=1400 audit(1793750014.317:618): avc: denied { create } for pid=10801 comm="syz.8.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 797.793873][ T30] audit: type=1400 audit(1793750014.367:619): avc: denied { bind } for pid=10801 comm="syz.8.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 797.802875][ T30] audit: type=1400 audit(1793750014.377:620): avc: denied { connect } for pid=10801 comm="syz.8.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 797.807826][ T30] audit: type=1400 audit(1793750014.377:621): avc: denied { write } for pid=10801 comm="syz.8.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 797.835470][ T30] audit: type=1400 audit(1793750014.427:622): avc: denied { shutdown } for pid=10803 comm="syz.7.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 797.848363][ T30] audit: type=1400 audit(1793750014.427:623): avc: denied { read } for pid=10803 comm="syz.7.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 797.993211][ T30] audit: type=1400 audit(1793750014.567:624): avc: denied { read write } for pid=10816 comm="syz.8.910" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 797.998691][ T30] audit: type=1400 audit(1793750014.577:625): avc: denied { open } for pid=10816 comm="syz.8.910" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 798.069378][ T5725] hid-sensor-hub 0003:1234:5678.0003: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 798.080683][ T30] audit: type=1400 audit(1793750014.647:626): avc: denied { mount } for pid=10807 comm="syz.6.906" name="/" dev="ramfs" ino=24188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 798.243719][T10822] fido_id[10822]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 798.268423][T10824] ntfs3(nullb0): Primary boot signature is not NTFS. [ 798.285121][T10824] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 802.029986][T10857] pim6reg: entered allmulticast mode [ 802.031823][T10859] pim6reg: left allmulticast mode [ 802.902150][T10871] batman_adv: batadv0: Adding interface: syzkaller0 [ 802.902168][T10871] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.902196][T10871] batman_adv: batadv0: Interface activated: syzkaller0 [ 803.307333][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.307381][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.803505][T10870] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 803.863864][T10870] batman_adv: batadv0: Removing interface: syzkaller0 [ 803.935608][ T9096] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 804.105543][ T9096] usb 9-1: Using ep0 maxpacket: 8 [ 804.107651][ T9096] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 804.108656][ T9096] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 804.108687][ T9096] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 804.108744][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 804.108769][ T9096] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.108801][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.108825][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.108849][ T9096] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 804.108873][ T9096] usb 9-1: config 168 interface 0 has no altsetting 0 [ 804.111864][ T9096] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 804.111897][ T9096] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 804.111930][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 804.111957][ T9096] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.111981][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.112006][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.112033][ T9096] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 804.112059][ T9096] usb 9-1: config 168 interface 0 has no altsetting 0 [ 804.112884][ T9096] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 804.112912][ T9096] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 804.112944][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 804.112967][ T9096] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.112989][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.113009][ T9096] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.113031][ T9096] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 804.113053][ T9096] usb 9-1: config 168 interface 0 has no altsetting 0 [ 804.297916][ T9096] usb 9-1: string descriptor 0 read error: -22 [ 804.298038][ T9096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.430491][ T9096] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 804.469989][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 804.470008][ T30] audit: type=1400 audit(1793750021.047:630): avc: denied { name_connect } for pid=10895 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 804.554493][ T5626] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 804.678545][T10900] team0: Device xfrm0 is of different type [ 804.706320][ T5626] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 804.707900][ T5626] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.707925][ T5626] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 804.707967][ T5626] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.748558][T10898] rxe_eth0 speed is unknown, defaulting to 1000 [ 804.768067][ T5626] usb 8-1: interface 1 not found [ 804.822157][ T4949] usb 9-1: USB disconnect, device number 3 [ 805.074457][ T5724] usb 8-1: USB disconnect, device number 2 [ 805.506101][T10921] syz.9.940 uses obsolete (PF_INET,SOCK_PACKET) [ 805.553287][ T30] audit: type=1400 audit(1793750022.127:631): avc: denied { ioctl } for pid=10916 comm="syz.9.940" path="socket:[24324]" dev="sockfs" ino=24324 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 806.276960][T10930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 806.610947][T10951] bond0: entered promiscuous mode [ 806.610970][T10951] bond_slave_0: entered promiscuous mode [ 806.611153][T10951] bond_slave_1: entered promiscuous mode [ 806.623934][T10951] batadv0: entered promiscuous mode [ 806.642465][T10951] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 806.658404][T10951] bond0: left promiscuous mode [ 806.658903][T10951] bond_slave_0: left promiscuous mode [ 806.659963][T10951] bond_slave_1: left promiscuous mode [ 806.669911][T10951] batadv0: left promiscuous mode [ 806.715151][ T30] audit: type=1400 audit(1793750023.287:632): avc: denied { listen } for pid=10941 comm="syz.8.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 806.715200][ T30] audit: type=1400 audit(1793750023.287:633): avc: denied { read } for pid=10941 comm="syz.8.951" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 807.286699][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.959'. [ 808.545076][T11011] openvswitch: netlink: Flow key attr not present in new flow. [ 808.550662][ T30] audit: type=1400 audit(1793750025.127:634): avc: denied { create } for pid=10989 comm="syz.7.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 808.556169][ T30] audit: type=1400 audit(1793750025.127:635): avc: denied { write } for pid=10989 comm="syz.7.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 808.556393][ T30] audit: type=1400 audit(1793750025.127:636): avc: denied { nlmsg_write } for pid=10989 comm="syz.7.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 808.704485][T11011] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 810.304152][ T5626] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 810.419269][T11043] FAULT_INJECTION: forcing a failure. [ 810.419269][T11043] name failslab, interval 1, probability 0, space 0, times 0 [ 810.419302][T11043] CPU: 1 UID: 0 PID: 11043 Comm: syz.9.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.419333][T11043] Tainted: [L]=SOFTLOCKUP [ 810.419340][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 810.419352][T11043] Call Trace: [ 810.419359][T11043] [ 810.419368][T11043] dump_stack_lvl+0x100/0x190 [ 810.419408][T11043] should_fail_ex.cold+0x5/0xa [ 810.419440][T11043] should_failslab+0xc2/0x120 [ 810.419463][T11043] __kmalloc_cache_node_noprof+0x94/0x710 [ 810.419484][T11043] ? __alloc_workqueue+0xeba/0x1900 [ 810.419515][T11043] ? init_rescuer+0x19f/0x550 [ 810.419541][T11043] init_rescuer+0x19f/0x550 [ 810.419561][T11043] ? __pfx_init_rescuer+0x10/0x10 [ 810.419588][T11043] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.419617][T11043] ? __alloc_workqueue+0xdea/0x1900 [ 810.419648][T11043] ? kfree+0x22b/0x6d0 [ 810.419679][T11043] __alloc_workqueue+0xf81/0x1900 [ 810.419720][T11043] alloc_workqueue_noprof+0xc7/0x130 [ 810.419751][T11043] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 810.419788][T11043] ? __pfx___debug_object_init+0x10/0x10 [ 810.419824][T11043] nci_register_device+0x21e/0xb80 [ 810.419858][T11043] ? __pfx_nci_register_device+0x10/0x10 [ 810.419891][T11043] ? lockdep_init_map_type+0x5c/0x250 [ 810.419924][T11043] virtual_ncidev_open+0x141/0x220 [ 810.419952][T11043] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 810.419979][T11043] misc_open+0x26d/0x450 [ 810.420006][T11043] ? __pfx_misc_open+0x10/0x10 [ 810.420029][T11043] chrdev_open+0x234/0x6a0 [ 810.420052][T11043] ? __pfx_chrdev_open+0x10/0x10 [ 810.420073][T11043] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 810.420106][T11043] do_dentry_open+0x674/0x1470 [ 810.420125][T11043] ? __pfx_chrdev_open+0x10/0x10 [ 810.420151][T11043] vfs_open_consume+0xcc/0x460 [ 810.420179][T11043] path_openat+0x1547/0x23f0 [ 810.420207][T11043] ? __pfx_path_openat+0x10/0x10 [ 810.420237][T11043] do_file_open+0x20e/0x430 [ 810.420261][T11043] ? __pfx_do_file_open+0x10/0x10 [ 810.420304][T11043] ? _raw_spin_unlock+0x28/0x50 [ 810.420334][T11043] ? alloc_fd+0x471/0x7a0 [ 810.420365][T11043] do_sys_openat2+0x163/0x1d0 [ 810.420390][T11043] ? __pfx_do_sys_openat2+0x10/0x10 [ 810.420416][T11043] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.420445][T11043] __x64_sys_openat+0x12d/0x210 [ 810.420472][T11043] ? __pfx___x64_sys_openat+0x10/0x10 [ 810.420509][T11043] do_syscall_64+0x123/0x790 [ 810.420531][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.420552][T11043] RIP: 0033:0x7f4b88b9fb19 [ 810.420568][T11043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.420595][T11043] RSP: 002b:00007f4b899e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 810.420615][T11043] RAX: ffffffffffffffda RBX: 00007f4b88e25fa0 RCX: 00007f4b88b9fb19 [ 810.420629][T11043] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 810.420641][T11043] RBP: 00007f4b88c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 810.420653][T11043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.420665][T11043] R13: 00007f4b88e26038 R14: 00007f4b88e25fa0 R15: 00007ffc0a7f6438 [ 810.420692][T11043] [ 810.425433][T11043] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 810.465613][ T5626] usb 7-1: Using ep0 maxpacket: 16 [ 810.501074][ T5626] usb 7-1: unable to get BOS descriptor or descriptor too short [ 810.501123][ T5626] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0201, bcdDevice=0.40 [ 810.528262][ T5626] usb 7-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 810.528324][ T5626] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 810.598773][ T5626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.598803][ T5626] usb 7-1: Product: syz [ 810.598818][ T5626] usb 7-1: Manufacturer: syz [ 810.598832][ T5626] usb 7-1: SerialNumber: syz [ 810.964701][ T30] audit: type=1400 audit(1793750027.517:637): avc: denied { read write } for pid=11072 comm="syz.7.1008" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 810.964759][ T30] audit: type=1400 audit(1793750027.527:638): avc: denied { open } for pid=11072 comm="syz.7.1008" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 810.964797][ T30] audit: type=1400 audit(1793750027.527:639): avc: denied { map } for pid=11072 comm="syz.7.1008" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 812.204739][ T30] audit: type=1400 audit(1793750028.687:641): avc: denied { getopt } for pid=11021 comm="syz.6.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 812.205030][ T30] audit: type=1400 audit(1793750028.657:640): avc: denied { cmd } for pid=11021 comm="syz.6.986" path="socket:[24917]" dev="sockfs" ino=24917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 813.608176][ T30] audit: type=1400 audit(1793750030.187:642): avc: denied { create } for pid=11105 comm="syz.9.1020" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 813.769928][ T30] audit: type=1400 audit(1793750030.347:643): avc: denied { read write } for pid=11105 comm="syz.9.1020" name="md0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 813.770358][ T30] audit: type=1400 audit(1793750030.347:644): avc: denied { open } for pid=11105 comm="syz.9.1020" path="/79/md0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 813.770397][T11106] [ 813.817645][T11106] ====================================================== [ 813.824663][T11106] WARNING: possible circular locking dependency detected [ 813.831662][T11106] syzkaller #0 Tainted: G L [ 813.837623][T11106] ------------------------------------------------------ [ 813.844614][T11106] syz.9.1020/11106 is trying to acquire lock: [ 813.850655][T11106] ffffffff91a51640 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10c0 [ 813.858913][T11106] [ 813.858913][T11106] but task is already holding lock: [ 813.866252][T11106] ffffffff90be37e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 813.875291][T11106] [ 813.875291][T11106] which lock already depends on the new lock. [ 813.875291][T11106] [ 813.885671][T11106] [ 813.885671][T11106] the existing dependency chain (in reverse order) is: [ 813.894660][T11106] [ 813.894660][T11106] -> #2 (major_names_lock){+.+.}-{4:4}: [ 813.902371][T11106] lock_acquire+0x1d1/0x380 [ 813.907386][T11106] __mutex_lock+0x19f/0x1c10 [ 813.912481][T11106] blk_probe_dev+0x28/0x1e0 [ 813.917487][T11106] blk_request_module+0x16/0xc0 [ 813.922848][T11106] blkdev_get_no_open+0x9b/0xf0 [ 813.928209][T11106] bdev_file_open_by_dev+0x70/0x210 [ 813.933919][T11106] md_import_device+0x120/0x360 [ 813.939276][T11106] new_dev_store+0x42a/0x8e0 [ 813.944378][T11106] md_attr_store+0x1c5/0x330 [ 813.949472][T11106] sysfs_kf_write+0xf2/0x150 [ 813.954572][T11106] kernfs_fop_write_iter+0x3e0/0x5f0 [ 813.960360][T11106] vfs_write+0x6af/0x1050 [ 813.965198][T11106] ksys_write+0x12a/0x250 [ 813.970027][T11106] do_syscall_64+0x123/0x790 [ 813.975121][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.981528][T11106] [ 813.981528][T11106] -> #1 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 813.989763][T11106] lock_acquire+0x1d1/0x380 [ 813.994776][T11106] __mutex_lock+0x19f/0x1c10 [ 813.999869][T11106] md_alloc+0x3d0/0x10c0 [ 814.004627][T11106] md_alloc_and_put+0x16/0xb0 [ 814.009811][T11106] add_named_array+0x27d/0x3a0 [ 814.015257][T11106] param_attr_store+0x199/0x300 [ 814.020617][T11106] module_attr_store+0x58/0x80 [ 814.025884][T11106] sysfs_kf_write+0xf2/0x150 [ 814.030981][T11106] kernfs_fop_write_iter+0x3e0/0x5f0 [ 814.036775][T11106] vfs_write+0x6af/0x1050 [ 814.041603][T11106] ksys_write+0x12a/0x250 [ 814.046432][T11106] do_syscall_64+0x123/0x790 [ 814.051526][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.057920][T11106] [ 814.057920][T11106] -> #0 (disks_mutex){+.+.}-{4:4}: [ 814.065195][T11106] check_prev_add+0xeb/0xe60 [ 814.070290][T11106] __lock_acquire+0x1528/0x1f40 [ 814.075648][T11106] lock_acquire+0x1d1/0x380 [ 814.080658][T11106] __mutex_lock+0x19f/0x1c10 [ 814.085748][T11106] md_alloc+0x3e/0x10c0 [ 814.090411][T11106] md_probe+0x73/0xf0 [ 814.094899][T11106] blk_probe_dev+0x149/0x1e0 [ 814.099998][T11106] blk_request_module+0x16/0xc0 [ 814.105355][T11106] blkdev_get_no_open+0x9b/0xf0 [ 814.110730][T11106] blkdev_open+0x141/0x4f0 [ 814.115659][T11106] do_dentry_open+0x674/0x1470 [ 814.120924][T11106] vfs_open_consume+0xcc/0x460 [ 814.126194][T11106] path_openat+0x1547/0x23f0 [ 814.131288][T11106] do_file_open+0x20e/0x430 [ 814.136294][T11106] do_sys_openat2+0x163/0x1d0 [ 814.141491][T11106] __x64_sys_openat+0x12d/0x210 [ 814.146851][T11106] do_syscall_64+0x123/0x790 [ 814.151945][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.158352][T11106] [ 814.158352][T11106] other info that might help us debug this: [ 814.158352][T11106] [ 814.168564][T11106] Chain exists of: [ 814.168564][T11106] disks_mutex --> &mddev->reconfig_mutex --> major_names_lock [ 814.168564][T11106] [ 814.182014][T11106] Possible unsafe locking scenario: [ 814.182014][T11106] [ 814.189447][T11106] CPU0 CPU1 [ 814.194798][T11106] ---- ---- [ 814.200143][T11106] lock(major_names_lock); [ 814.204632][T11106] lock(&mddev->reconfig_mutex); [ 814.212158][T11106] lock(major_names_lock); [ 814.219164][T11106] lock(disks_mutex); [ 814.223218][T11106] [ 814.223218][T11106] *** DEADLOCK *** [ 814.223218][T11106] [ 814.231336][T11106] locks held by syz.9.1020/11106: 1, last CPU#1: [ 814.237728][T11106] #0: ffffffff90be37e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 814.247200][T11106] [ 814.247200][T11106] stack backtrace: [ 814.253070][T11106] CPU: 1 UID: 0 PID: 11106 Comm: syz.9.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.264002][T11106] Tainted: [L]=SOFTLOCKUP [ 814.268304][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 814.278340][T11106] Call Trace: [ 814.281600][T11106] [ 814.284524][T11106] dump_stack_lvl+0x100/0x190 [ 814.289195][T11106] print_circular_bug.cold+0x178/0x1be [ 814.294645][T11106] check_noncircular+0x146/0x160 [ 814.299571][T11106] check_prev_add+0xeb/0xe60 [ 814.304146][T11106] ? lockdep_hardirqs_on+0x7d/0x110 [ 814.309328][T11106] __lock_acquire+0x1528/0x1f40 [ 814.314168][T11106] ? __mutex_unlock_slowpath+0x35d/0x930 [ 814.319803][T11106] lock_acquire+0x1d1/0x380 [ 814.324295][T11106] ? md_alloc+0x3e/0x10c0 [ 814.328614][T11106] ? __pfx___might_resched+0x10/0x10 [ 814.333886][T11106] __mutex_lock+0x19f/0x1c10 [ 814.338456][T11106] ? md_alloc+0x3e/0x10c0 [ 814.342779][T11106] ? md_alloc+0x3e/0x10c0 [ 814.347101][T11106] ? __pfx___mutex_lock+0x10/0x10 [ 814.352110][T11106] ? __pfx___flush_workqueue+0x10/0x10 [ 814.357551][T11106] ? lock_acquire+0x1d1/0x380 [ 814.362216][T11106] ? find_inode_fast+0xa5/0xa30 [ 814.367062][T11106] ? find_inode_fast+0x1fa/0xa30 [ 814.371994][T11106] ? md_alloc+0x3e/0x10c0 [ 814.376320][T11106] md_alloc+0x3e/0x10c0 [ 814.380488][T11106] md_probe+0x73/0xf0 [ 814.384478][T11106] ? __pfx_md_probe+0x10/0x10 [ 814.389154][T11106] blk_probe_dev+0x149/0x1e0 [ 814.393738][T11106] blk_request_module+0x16/0xc0 [ 814.398575][T11106] blkdev_get_no_open+0x9b/0xf0 [ 814.403418][T11106] blkdev_open+0x141/0x4f0 [ 814.407820][T11106] do_dentry_open+0x674/0x1470 [ 814.412569][T11106] ? __pfx_blkdev_open+0x10/0x10 [ 814.417491][T11106] vfs_open_consume+0xcc/0x460 [ 814.422270][T11106] path_openat+0x1547/0x23f0 [ 814.426847][T11106] ? __pfx_path_openat+0x10/0x10 [ 814.431774][T11106] do_file_open+0x20e/0x430 [ 814.436268][T11106] ? __pfx_do_file_open+0x10/0x10 [ 814.441308][T11106] ? _raw_spin_unlock+0x28/0x50 [ 814.446171][T11106] ? alloc_fd+0x471/0x7a0 [ 814.450505][T11106] do_sys_openat2+0x163/0x1d0 [ 814.455180][T11106] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.460370][T11106] __x64_sys_openat+0x12d/0x210 [ 814.465209][T11106] ? __pfx___x64_sys_openat+0x10/0x10 [ 814.470585][T11106] do_syscall_64+0x123/0x790 [ 814.475180][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.481081][T11106] RIP: 0033:0x7f4b88b9fb19 [ 814.485479][T11106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.505070][T11106] RSP: 002b:00007f4b899e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 814.513464][T11106] RAX: ffffffffffffffda RBX: 00007f4b88e25fa0 RCX: 00007f4b88b9fb19 SYZFAIL: failed to send rpc fd=3 want=13488 sent=0 n=-1 (errno 32: Broken pipe) [ 814.521418][T11106] RDX: 0000000000000002 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 814.529369][T11106] RBP: 00007f4b88c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 814.537319][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.545271][T11106] R13: 00007f4b88e26038 R14: 00007f4b88e25fa0 R15: 00007ffc0a7f6438 [ 814.553228][T11106] [ 814.630006][ T30] audit: type=1400 audit(1793750031.167:645): avc: denied { recv } for pid=4969 comm="syslogd" saddr=10.128.0.169 src=49104 daddr=10.128.0.214 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 814.732967][T11106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 814.732986][T11106] block device autoloading is deprecated and will be removed. [ 815.058235][ T1233] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.092349][T11034] bond0: (slave syz_tun): Releasing backup interface [ 815.139885][ T1233] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.180760][ T1233] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.267768][ T1233] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.389654][ T1233] bridge_slave_1: left allmulticast mode [ 815.389678][ T1233] bridge_slave_1: left promiscuous mode [ 815.389790][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.390806][ T1233] bridge_slave_0: left allmulticast mode [ 815.390831][ T1233] bridge_slave_0: left promiscuous mode [ 815.390921][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.534495][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.552135][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.552985][ T1233] bond0 (unregistering): Released all slaves [ 815.706658][ T5626] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 815.711049][ T5626] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 815.741044][ T30] audit: type=1400 audit(1793750032.317:646): avc: denied { write } for pid=11112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.859335][ T1233] hsr_slave_0: left promiscuous mode [ 815.872392][ T1233] hsr_slave_1: left promiscuous mode [ 815.872846][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.872862][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.895841][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.895858][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.903560][ T1233] veth1_macvtap: left promiscuous mode [ 815.903588][ T1233] veth0_macvtap: left promiscuous mode [ 815.903642][ T1233] veth1_vlan: left promiscuous mode [ 815.903679][ T1233] veth0_vlan: left promiscuous mode [ 815.944666][ T5626] usb 7-1: USB disconnect, device number 2 [ 816.049585][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 816.051778][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 816.076712][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 816.229735][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 816.229751][ T30] audit: type=1400 audit(1793750032.807:648): avc: denied { write } for pid=11127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.279006][ T30] audit: type=1400 audit(1793750032.857:649): avc: denied { write } for pid=11138 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.306901][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 816.453701][ T1233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.466363][ T30] audit: type=1400 audit(1793750033.057:650): avc: denied { write } for pid=11141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.512639][ T1233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.515204][ T30] audit: type=1400 audit(1793750033.097:651): avc: denied { write } for pid=11152 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.561080][ T1233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.569873][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 816.600592][ T1233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.686398][ T1233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.712737][ T30] audit: type=1400 audit(1793750033.297:652): avc: denied { write } for pid=11155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.743686][ T1233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.759665][ T30] audit: type=1400 audit(1793750033.347:653): avc: denied { write } for pid=11166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.798835][ T1233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.803545][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 816.825619][ T1233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.932353][ T30] audit: type=1400 audit(1793750033.507:654): avc: denied { write } for pid=11170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.980897][ T30] audit: type=1400 audit(1793750033.557:655): avc: denied { write } for pid=11181 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.012332][ T1233] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.039935][ T1233] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.043632][ T5282] 8021q: adding VLAN 0 to HW filter on device eth25 [ 817.069214][ T1233] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.106911][ T1233] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.190687][ T1233] bridge_slave_1: left allmulticast mode [ 817.190712][ T1233] bridge_slave_1: left promiscuous mode [ 817.190818][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.192044][ T1233] bridge_slave_0: left allmulticast mode [ 817.192061][ T1233] bridge_slave_0: left promiscuous mode [ 817.192155][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.214478][ T30] audit: type=1400 audit(1793750033.777:656): avc: denied { write } for pid=11185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.256913][ T30] audit: type=1400 audit(1793750033.837:657): avc: denied { write } for pid=11196 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.257785][ T1233] bridge_slave_1: left allmulticast mode [ 817.257802][ T1233] bridge_slave_1: left promiscuous mode [ 817.257904][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.258968][ T1233] bridge_slave_0: left allmulticast mode [ 817.259003][ T1233] bridge_slave_0: left promiscuous mode [ 817.259084][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.312189][ T1233] bridge_slave_1: left allmulticast mode [ 817.312211][ T1233] bridge_slave_1: left promiscuous mode [ 817.312312][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.325100][ T1233] bridge_slave_0: left allmulticast mode [ 817.325121][ T1233] bridge_slave_0: left promiscuous mode [ 817.325204][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.398535][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.399425][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.399922][ T1233] bond0 (unregistering): Released all slaves [ 817.433209][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.434388][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.451568][ T1233] bond0 (unregistering): Released all slaves [ 817.471458][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.472244][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.472729][ T1233] bond0 (unregistering): Released all slaves [ 817.477786][ T5282] 8021q: adding VLAN 0 to HW filter on device eth26 [ 817.709427][ T5282] 8021q: adding VLAN 0 to HW filter on device eth27 [ 817.969360][ T1233] hsr_slave_0: left promiscuous mode [ 817.969601][ T1233] hsr_slave_1: left promiscuous mode [ 817.969864][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.969874][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.970118][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.970129][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.971664][ T1233] hsr_slave_0: left promiscuous mode [ 817.971869][ T1233] hsr_slave_1: left promiscuous mode [ 817.972122][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.972132][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.972369][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.972380][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.973850][ T1233] hsr_slave_0: left promiscuous mode [ 817.986359][ T1233] hsr_slave_1: left promiscuous mode [ 817.986785][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.986799][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.987179][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.987191][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.995756][ T1233] veth1_macvtap: left promiscuous mode [ 817.995780][ T1233] veth0_macvtap: left promiscuous mode [ 817.995827][ T1233] veth1_vlan: left promiscuous mode [ 817.995860][ T1233] veth0_vlan: left promiscuous mode [ 818.022512][ T1233] veth1_macvtap: left promiscuous mode [ 818.022543][ T1233] veth0_macvtap: left promiscuous mode [ 818.022599][ T1233] veth1_vlan: left promiscuous mode [ 818.022634][ T1233] veth0_vlan: left promiscuous mode [ 818.042446][ T1233] veth1_macvtap: left promiscuous mode [ 818.042471][ T1233] veth0_macvtap: left promiscuous mode [ 818.042517][ T1233] veth1_vlan: left promiscuous mode [ 818.042556][ T1233] veth0_vlan: left promiscuous mode [ 818.183700][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 818.192421][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 818.255512][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 818.257366][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 818.327787][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 818.329728][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 818.357393][ T5282] 8021q: adding VLAN 0 to HW filter on device eth28 [ 818.641964][ T5282] 8021q: adding VLAN 0 to HW filter on device eth29 [ 818.812526][ T5282] 8021q: adding VLAN 0 to HW filter on device eth30 [ 818.976589][ T5282] 8021q: adding VLAN 0 to HW filter on device eth31 [ 819.132779][ T5282] 8021q: adding VLAN 0 to HW filter on device eth32 [ 819.289928][ T5282] 8021q: adding VLAN 0 to HW filter on device eth33 [ 819.449607][ T5282] 8021q: adding VLAN 0 to HW filter on device eth34 [ 819.626468][ T5282] 8021q: adding VLAN 0 to HW filter on device eth35 [ 819.781029][ T5282] 8021q: adding VLAN 0 to HW filter on device eth36