last executing test programs: 1m1.682894283s ago: executing program 0 (id=344): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mount(0x0, 0x0, &(0x7f0000000340)='exfat\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/1, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x8000, 0x1000}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xf, 0x1000}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r5, r4, 0x0, 0x20000) 59.660402088s ago: executing program 0 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r8) get_robust_list(r3, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f00000001c0), 0x0, &(0x7f0000000280)}, &(0x7f0000000440)=0x18) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000000)={'comedi_test\x00'}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000100)={0xc000003, 0xf, &(0x7f0000000200)=[0x138d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4094) write$usbip_server(0xffffffffffffffff, &(0x7f0000000240)=@ret_unlink={{0x4, 0x22b, 0x0, 0x0, 0x5}, {0x2}}, 0x30) 57.697940145s ago: executing program 0 (id=338): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000280)=0x6, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8000) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) pipe(&(0x7f0000000040)) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 55.097062674s ago: executing program 0 (id=341): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = dup(r6) write$P9_RSTATFS(r7, &(0x7f0000000240)={0x43, 0x9, 0x1, {0x8, 0x3, 0x3, 0x8, 0x8, 0x7, 0x1, 0x0, 0x9}}, 0x43) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 53.672597693s ago: executing program 0 (id=343): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) bind$nfc_llcp(r6, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24004840) 44.204056286s ago: executing program 0 (id=355): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x64, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xffff, 0xfff1}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x11e}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x21}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x850) fcntl$setstatus(r0, 0x4, 0x2200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, &(0x7f0000001a40)={0xa, 0x4e23, 0x5, @mcast2, 0x8080000}, 0x1c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0xa4e2812056436617) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000004b40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 28.78533573s ago: executing program 32 (id=355): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x64, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xffff, 0xfff1}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x11e}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x21}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x850) fcntl$setstatus(r0, 0x4, 0x2200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, &(0x7f0000001a40)={0xa, 0x4e23, 0x5, @mcast2, 0x8080000}, 0x1c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0xa4e2812056436617) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000004b40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 24.572244015s ago: executing program 1 (id=372): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x40) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x60000726) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 24.392190819s ago: executing program 4 (id=373): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) lseek(r1, 0xa3d2, 0x1) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 22.109919705s ago: executing program 2 (id=374): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2080) close(0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x200000000000000, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfb0001000000000000b9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xd8, 0x6d, &(0x7f00000000c0)="39e12dad43a02436f94155eb6c8c809fec6eea41faf915a2cd7d70465a891d585e6e02a22240a874d19ba11e0ca5022040216b0ee9f3d1a5756682a30cb5536eaf31a32e5fcfe2c9c4a91c066c98ebfee9cdc4eddcbfe80a8d4acbe54fb21e69fc0766befbaf0beed609b770c27e16083e262c1d56326cf804d4a3277c8bbb93e0589da8ef74c40428895161b9923eec3b471f900cbc8d66667e6912706c821fde11df61c7ca53465771139e39b6f0efc9e19684aad08aac05ebe2fc4f8e1006f031eeef28054b2f4bad2d7463337b196e33ca575de0ca65", &(0x7f0000000540)=""/109, 0x80000001, 0x0, 0xfa, 0x45, &(0x7f0000000700)="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", &(0x7f0000000800)="e879aa4e4e8088f32e4bbd43d0cd075c95950d9a804444bae97a077348aa5cd4c571f800f928e96a284b8f9a46968aff7c9d229560b4c9ec88362d3bebea33178bf7d45232", 0x2, 0x0, 0x8}, 0x50) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x6c, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}]}}]}, 0x6c}}, 0x0) syz_clone3(&(0x7f0000000680)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 17.959140648s ago: executing program 4 (id=375): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x0, r2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r7, &(0x7f0000001ec0)=""/4101, 0xc54) 17.521127938s ago: executing program 1 (id=377): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x84000) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x80000) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, 0x0, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008041}, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 17.326590465s ago: executing program 1 (id=378): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x44, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000006c0)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x11, 0x27, 0x7, 0xf8d1}, {0xd, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x2000001, 0x7}, {0x80000001, 0x200, 0x6, 0x68be, 0x8, 0x2}]}) r7 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) ioctl$MEMUNLOCK(r7, 0x40084d06, 0x0) 17.180311956s ago: executing program 2 (id=379): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x210, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x6, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x7, 0x2}}]}}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010102}, {0x0, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0xfffffffb}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @empty}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c}}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x210}}, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, 0x0, 0x1003) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f00000008c0)) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4a0, 0x0, 0x0, 0xffffffff, 0x338, 0x290, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'macvtap0\x00', 0x10, 0x1, 0x6, 0x10000, 0xc, 0x2, {0xfffffffffffffffc}, {0x6}}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sg0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000070000002be27851952fb8e0181100003999", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000001801000020756c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000200000056000000060000002c93000000000000b5030000000000008500000078000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x15) 15.575048448s ago: executing program 1 (id=380): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4, 0xbb32, 0xf, 0x8000, 0x7, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='task\x00') ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x26b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) fchdir(r2) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)="b0523df72687df88f2947d761ca195076b5bd27f5aeaaad562008a0fa91e04e0fc870680d8eb015a99cab7c5acda30093760470024bb336fe82d6ddd5ec1e5f15f077177e7ea7461edb6a614a8a59902bf2e9df7c65b", 0x56, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r4, &(0x7f0000000680)="a9", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x29) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @private=0xa010102, 0x1, "103ddea1080ccd149bc203201089001e0a96a2acf04e42a64ad6ec6528956adb", 0xf, 0x1c00000, 0xfffffff8, 0x6}, 0x3c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001840)={&(0x7f0000000280), 0xc, &(0x7f0000001800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="970000", @ANYRES16=r7, @ANYBLOB="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"], 0x1110}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 14.527032032s ago: executing program 2 (id=381): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffff4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 14.446956823s ago: executing program 3 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0001f1ff07000800ffd000000000cde1d36283c9c4fb74dab28618ff503e0d102bad18820402e9abffba95c8b150a61e68165079a4650b3e3f286936cd36a18fdecba5b399febcf1cdafbb88adbdfbd4ea6194aeb140f6f246d6994e7f6c43600c7595d4e199b82592e83d1ab7bf5e81dc8270f3cfa8485c5d65782285e92e8095c79f650fc5ad96b12246066ba9b40d1a8974397843548a7580030b647cd513830cceb64293ebb9d5a7bfe185cb145bc5dad1db495084b3fac53a4e0cc14d180fe70f2eecd961dfbf0e10c2454cf3df33000000000000000000"], 0xde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x4, 0x4, 0x0, 0x0, 0x80, 0x0, 0x2, 0xfe, 0x3, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) 12.887065983s ago: executing program 3 (id=383): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix={0x5, 0x3, 0x20303159, 0x0, 0x2000001, 0x0, 0x9, 0x1, 0x0, 0x8, 0x610eb8e02ceafee, 0x6}}) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket(0x10, 0x1, 0x200) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x2010002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0xf05, &(0x7f0000000940)={0x0, 0x595e, 0x80, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_submit(r3, r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV_FIXED={0x3d, 0x1, 0x4007, @fd_index, 0x1, &(0x7f0000000880)=[{&(0x7f00000001c0)="e8433b303c1ec8266f355d53abd88a917975c4520b59b77a6226e2f6034b547b1fe829", 0x23}, {&(0x7f0000000480)="6b3f673408b7dd75a5eb4c26f1020b5e213289a6a234ecaf269f6cef2fc718370464ad6530b1af97a75e9375fad1bd2411d7c819feda5c414247fa11f21086a9cd422f411393276f2f18cee3f7e88b890e2781622fb3605fabdcdef238b004be5fd565e18a93b49b27a1e6d6be247af68a4bbbe428161f494d2cedde1d3b303041407fd7e4285944ca033ff06c3359286615", 0x92}, {&(0x7f0000000540)="d41a3edbecdac01ba94f60fce5953e9f40c4135429e3e0c28bae79fbb74cb9958dfc40984b1f9a5cc211cfffdfcfad38174b308274714636f4", 0x39}, {&(0x7f00000005c0)="9542dabd81ef2aa1ed32c52f98d105a0941d2219662631ffe40bd905dec85a57abe3e528ea483e9c07be681de08e13c3ee177ef9314569165021730c8eaf9cfde20d93e3482ca9d4d27578a7e1c6322cffe86b0b7fdd6a38c9e7911d913df290f2c80c9718a8a4e4c18543dd416f14dd2049163c226b70d64fb1f6a717f4ae941eb2dbd68f00ce7d732507e0ae2e75eba040f592e8946018c63d2ebea9355547f05ead30dd1d88ab78cbd7426cee5f4c96b2031c23b29a8b40c4de371982664df890", 0xc2}, {&(0x7f00000026c0)="decefaa3ffb077a80ded5938f909355f48d07a95ae44857a26af1efe6f92c140853473239031f16a61731c73017e15979c3c9d2f5ebef346391d6226b86f7fbbbb8fb29744ef706fe7754752a9a5afba376d75875a88b972f5bd62bd67d847e54ee5eb7d8309e3299576b629acdc63a1224305ab4c2a358402c855aa3d3f97266fdc08af23a9440f95674f258cc5c9b8b2e6a3144e3728c44371ab7ed9e64ba49e29cb4f42871701e9f5caded16bb9a8832a38ec2cb654132656bb8c611ff3f9e6b2fe255eb6542b29cbe799c001ce40ee41fca8a828e221fa6bff0f898330c224b3283e35738c12550ee0d86ad47283e8763f26dbf1ba396f39b3c8b59a2c694f4405caa8f9e6eff7f80c3945b72806cc3cf02d2ca653ac94bc14f9a4e838fc787fd5df421475372abd567d92e48c92fea9464becaa2fccc7a3b6636d1371251e4509df5f9fd2876ea84c7af49c676846459dda18a61e23cf472123309cde60bef6cc4aed3b124d2791e404a43d966b60446f37396832fa48dec4e3178afa9ed25284462b240f5ddd479258ea2dabca8097421dfba7da7c8158fd92ff4946b9e253d4d5da7dd0f9cae405c9a0f34c72d69e0dd6284866df5b41a1adc3fa5602e72031f6544996e327e945d20b5a503862fd021f996b4504c827adf52ca449faeac21372214f0aa953266ae87a94020e2d5d7c10cf5304c904e600a8e502ec1a27cd38c46ab832294d4d59fcdff1bc98da2594b6c04f10da9d8c16be151b4728d54ab016340d548221805d54ee37d1cc5d9046130d01beab8c71aeb52ac2c2a91aaa2211232f161d2b133968678a3623bfa986cebe97b954eebca1ddb1f85d453641e99d8b904e2c10297f1a2c65fb2631398b7b8f72b639fc46905396657e1ba0d36800692bd3936d6551c6622d2296db6f82e2041f6a487b406d4bc86ae8675a322f870c6c17c2f2c8aaa637af037e2757db2e5e94f0c6b62ca26ca1e7d89a57c21c91e00c71fc56126b4d8a279b7945eccc7e218acd99ab7c948211a280bf156aac25c9dd7adb6b184c39baf65cfce18ed762aa49134d1affa443cec639a138f8acbe98e654eebfcfc4d2149eaa70455fb9647bbecc588008daba1cd2eba34ad84bf26d157b3aa68525d7bfe35c366ad2f3583f172e4eed218fe6d81ff9f57f85ce7c86991413b96d4a18899d45aa205ad0fd02dd688657dedcef0394f38568c5742ec7a486b04cfaf5e694daff2981276e1643df3ce3e924222403656273a50718ce8f04aae0f753c3223822f77cc5e61e55aa98f79a3723c9bfd9d35241dce44fe281d7a6d8f1c7ba62e82fd22fadf80d472e2b8fe70a13ebda42160fc275f4a2c86a71e118579b3146aa385339dfc7fa55f91206bada1bf582d784c66dccc932f7a230e7abe03ed57fb0bc6d00575888a8cda45afb3368aa4b8301b03f4fb564b1e07a43dd321fc944361b38103f46ced507ffc6b030607c88cc6aa1919076550ead11a2f342c5dae5156c0a4da14df7e55eb3194361537a517b09de47f97e4415a849c08175580a0a7adb2e2653fc969ecf8b6318faba15301a75b76d78581f3ab63506b5d3b1dbbbe1bf2ccdabfd7c347dd87f243d63b80b02dc02d474323ea32398615e644679115bd432bf04eb1a26d04db03652a508eee5facb1226e7f84284c1b623ae718c304910f712eb62b30d793b2b949493a56c5a45740971969698d77d58a0108a2d183f3d3c40fc006f313b20aade5ee8eec8ab2954f30d47c76381cca5741f2ce257affa1aa1dc4eac37160d7963eb4e899de99824c73386e09514e5664cc4dd0ee2fa8780d7962be3c245d040f90ad48b6b2c0fb590d25cd7aee178fb1dc39bad07af68e4e67e5cf577987baa4d70d648ec88952b20b84d73c1c3d88e855bae8d3448d805bfd5d0e0ef5ebc97da81199cd8d0b47c661f00bb2e85247922e8be8d2acfc4e6fccc32bc9af9828e87bead6cf78dcc6377a6f7f0ea4af81225a9623a78ee5e126da6688b7dba51e74e80f42d513055cab245d368a0bfe4616aa49dbd918b2ba5ec6cf7e5fb1fec470d018a608fc43d955fd85f907bb100ec788e8a793a46596ff630e0acd977146041c533ae317ea2b1e24714cfff36e500a131210a26eaa3a619d92c9c72fb7867dd98e8ebbb2b023bf7862c312e0ebde66b2ba6b072ccbcc8d1bf40cd0ec1a4cc715fafb750f80a4af5cb38f44d3327e898953c1b36a37f499457cdb1d1c0e833d538b91d858b75d5b0b0b15498a780268b8c4555f8a8f596837941f640651dd4c2ed06fa1136f81755743982c069a29ac9f94a5ed2f309c4bcacedd5c22d4bd5a982654759947056767322406aab9b76d04d98938164981a04c49edc4e9d633c747923b4b682cda60bebeb7d33c77ad35da78afea82c5e7c1daedb71372b22fd5b24b9cdd80743981d448b329b3026a21bbfdd45414ff10b405d54940e53302429db47957b16492ee3296f83cf72d973c4883e440a05b061b6ce613a9f4de61c53463a10ef21b6b5cd01d26e2134b29b154e251935cb231526593a39ab693a527bfed0120bb741c5396755d9a58b1944dcfb8dc8f78e344a46f63b69306ede0547808304c75ff77356dc1f30339e665d53011a11cd7fa617b2ff5de96aa520e312d916e23f91cdbcc90959d60a26cc6a989ffce8f599b7cfad8158fcc891aa9ca59e85b58be2a9999718849cb73b28699845306cf6c17856d4d36999d8e556e9e7a795851b178fb9d252375fa0272ce997230658fc8e888c7bdcccdbdcef5e5554764363cf5ca9c49b1d690af65ca545e519b2e39c9ced40655001252c1ebfad60c82bd5d30db268b1384d3ede076656ce8b16c084da28b6d54bb4ec3e215a28f4b8b690745fd063a7893601fa83ae50c0f004cc9c1ac6a221c4e6cd8d0e7bc09d9faeb4dd726182ed86e9b5ebab55b2e006780a59642638f619142f51baec5b0a0fa9be469a4017915bc53ba0156e7f37688aaaef6a05114d8279922cab0543f53bedd63ccfba9d9edf308bf8278c8c0eb88988affb599e7c0ad76797aef23dc948574de1ffe3ac9be676a630ef7a4231e1babb580b2b3df164ca565d9f6efea25162b5f76c97280786270141590ce1752cfd8d2e10ad1332134878c5bdfbeed79d1d188ff4a5de01b55e8c447e8a284e9ed51657d920657189f22c3742314fc84a610c780cf364b487906bd1c8958ffaf95cac396b27b72c4f159bdb4243dacff13fcc43518134a2c0c9e7b4b9f4b7cf7eb75ebcd2dced1182fa6d2d1d8009757abddcd4e0b2e4e6adf782fdb3b0967f7be5f004cf7ea2df411af8091cd07e8e289cf421a2930a61659de4a22a2eb1e44953b4c4f7fcf6e5f39565888632c2c672797acba520d2121ff09ac6de471b921a5423a25fe4e1f6d818dbf53279078adecb943ff1c19306d2e37df3b1f3cf3856114edc16492aa3d750a6140ef5c1c3b4e5811b507e821a1094fdf4c3fdc100bd6230359d844a28646f91a7623c1fbb8b0f3c1efbcd771c8bea539e9127948ed38612b146c4535f5ab1271eef1a2fc7d35460f90172b77ef625aa675facc994f8b658cef163c7371e21695128b27d37907e77c4c924fa0a64aeb5c2082bdbfed64a3c5acbdefc106e9ca5d7120e492e12e287ba6597780b7b8cf1cad2626623275e5a79c1211834e8d324a1bc60115fab50b8fdb7372fda2d7ff8ff6f729e0aa4e920ce495868561652dc05fd52226a9ad9c814945aa37f1bf590e837d7f3b2cb3f169491484297f9ec7da8419fe5ba41cf329503e2d267e08d03874ae55a0d02e924f9662ab7ad1a013438df0cfddee21557e81c2ddb856912f0bc838d2d2a4d5fd4ec2162cb0493a2c0a9fa07f3fded949ffff03b222958f067b934ee4ad74413bf3878994a82f3f3820190cff1dde521671195f35f39d500e11798314b10818fad6b243f631b484c834ad65e4e1bf7aeaec5651a6b4d5e2062c25e0928aa341dac8871dc570e52dc7473bef702791beed930ffaae0b26ffbe023613b5ce803283a60dbcb0901fda7c433fb222bb08433d6666c26d69fc553a4ed364c5b0abb588a24256e647fefc85b3b434a42904a712c72507dfb291ffd0695fab421a122f8969bf0826c267a8923ad69404c6e70a713f647762fef8f7cea3059d81e60a031d30113a6c21382d8962058c97483aaf60ac68c708c1d4bfea45e6690f1463296d94fe41312cf1bce9b76ee4554a0a3c72a7a0cf475ebf42d699ff015990d521036fee4d131fa4234e59a333b7829a3d953b1f90b9f1c6571e633f45f0848ee34fd7d5bbf9637897c14f00d59f500f603aafdeaa75974b046404647975e0b7d27e34c49b042cfbdf0c8c4ff7dc4b3b9713ca755e9f8e2f8a57a059b5385d6ff2da020f453093a649619d03e9102303c64213bd39349ff27a80e24e0c5b62367dd02c8ca345df4c12fa5cc9fb483eb88321c53491f78c82ea48b64661e4818db86cbf8514d8e69c5c4d519a443e23384a9b3fc32688de7b36b53f510cf6474ccca21d4175faa17c2b41da7916a37c9b1592e8a384380ef937bd80692f7d3196ccbc5541ff4c7a26f2704a1b188fa8b20fbaa6ea988932ec4abb7d24de2f81fdfb95cbcc24f8b6fd771d6aa3ed6d0dadd84a63ae1b639128846bb2f7f8e497b12c7d3b9dbb1b9ba1e9aa9c640f13eea5d461d1aab3745004a7938987e3a844260cbefcc60b5abec1771ef3b4e3a954c9f1c27d3876cda9abf24a9fcb3495509c779a9b541a06becd67ba70bd58c316af7673f3513548cdf3a46adb2028aa184c0e9cf467a37af924caaf2e5822ee0aed215a267e23582bb1423f203d6c75eb80935bb8e2fa02ecba5a218495b69986307b5b6cba231fffd65a6e83754002be65cbe0a8fc83c6a8b8f779f4f183b80e9a8a3318dfbeeff706a67a154f4ec75f3223b7e54f99dc270b8efb61b50d4881d8a993d15d21b1de6a076bdfe55d22a1c84b6969af016ae0db7e75821139a5069c7f2b0a333f13e1bebc2a22f835d36700cb186bae0a4cabbeb1f6614f9f312f3721d8e5f2967ce04b8c2f90f56313871813795022ebd0660cfe5f027ded2db280a8b45fcc0d5a19f1a8011e050e848e75dd61b0ca5b9671ccfa4bedd382c73f8e31a2ba3c1e0bcd15dbcae9c6bddd41f9ef5e59af4aa8c155b4f36ba0bf78b98886be7b9edd3ac5fd88cf1397ce13a5dd5b561eb1824053facdde8f1809b7b172945dc1077288327711fa8b39de03f9791a7d5ab1eac6b64937e7626c85731684a7efade22113b92339d9c7f14ce5fe7c6aa6bfcc258e2c09f0f34410878d7fe253e8ec7747265f01543531d3a98ed63a356918f636084e3ab758f61423806aec637b3c9037efd61790bdd68f1770f1c34e8c7c803dd0901cf086a339aba27e8c93b3bbffd61935e36c325f90bcc0c7ebe3871ae54f0093e2bbc63aa9851bd586c2ba63f8ac1ebcb0c86b83e09d6f2bae26748084b4b447811f02b4fb620c3256c0411fcc3decbef638bd43e6c82a786c0b6d306547a9ada6b0682ef8ea9c73266bc0f90d139aad68f94e7b5f59039eb637737476f99c0c3d1c7c84074122dda7afc89e957f2bfc46456d99c3bd5a54291d3fb1eb0e2155aa2192b7d3fce4b37ffd0dce900ab8ba6aa403078b16adcf2511ac47515d1a3873c26821eaef57c31fd68124d314514f7e491130a086630e033e1ccbe68a23e0a922d8dae86d2fcf4195a2234c0625dea8994ade4626e1f636dd1c67b056e098cd9185af5a47161b7bf6576c2b6034d74", 0x1000}, {&(0x7f0000002480)="5e200fae4923488f355cc0d26c4deddf75ce93ea9718fc4e43c972d7aab4e8bbb97dc26e410f02c6975539cea3b265a7cbd85a3fb9ac920b7bfa8a672f3bb420aeaded91cfd6f2bef2a18d9ab60fc99fcd327e7519a34f16fd6e227e", 0x5c}, {&(0x7f0000002500)="16d921c61b486afbbe3d4dd79a79bc7fbbc687d0b84476a974f71d1038da44e2a81828bcf98ab095082ea2bf0f8f69233312c8aecd885dbc76bcfe6db4721651b5965a14eeea2ce46bd0938cc1e7f5e1fb3c6f3c03645d39d4b248c1317c142e5fffffe852", 0x65}, {&(0x7f00000006c0)="07d841b5547178a6e5cd43151d4f91eb0bb010e810de4d130238de17cd29ac6b11e6dd063f3dd1381fe074600886720aa59f36d918361112a677f4a7950408ca171ef8a399470d7c268139be58aa913f84d61531a058c7ddc5221593cbba8d709a1f2e8a3ba89182cedc550ba840961fdc33372db739ac4aaa91c5feea1ddf4bcbbab9574db43359a723bd3cba0b941d0989d7dd552d31eeb6ece4858f73620a5b6bb150647ac214a5b81fd037a31ec085ee9e10518b9d5584e3c9e5ecf697910bb87362589eeb6b2dc165", 0xcb}, {&(0x7f00000007c0)="326b36d424cca4df2d10db6f5dbd7eec1335e7c42a4dc9496c93ad53c8522dd6e7a8e47ee36159582586ecaddd6bc3ad942fb6931cb6e5a0eaca02f06576012a4e3f4a61ff51a79958646f95f87ef648de5856984cffee51be79daf3a1ded244663f427cc845b528ca12385c0aeaf9774a7563cc02613b5151aad693fb915afada00d8eba6abb39defcf2d0e11d9c972b84d3612c4bfbe51fd153348425addc8ac11e1cf98f05605bde41d168ae6da41847e9650d5ac88c692afd6e1ca6ae6a5", 0xc0}], 0x9, 0x7, 0x0, {0x0, 0x0, 0x3, '\x00', &(0x7f0000002680)={0x8000, 0x2, 0x65, &(0x7f0000000380)="ffbb763c93d66ae167afe98c09003d2a75986fc4035927622a62381a98c3ed849cb2a00b190ebbf78eedaa8cb1a44e558220444901f283703578c2cbca15539f47ae90ce0343e7765ca1745b0e58038b3638a5e7d369d4d55b0a00"/101, 0xfe00000000000000}}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='2', 0x1) write(r4, &(0x7f00000002c0)='2', 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x10000}}, './config/usb_gadget/g1\x00'}) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) r7 = openat(r6, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x181102, 0x163) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 12.515937132s ago: executing program 4 (id=384): syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x8802) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r4, 0xfffffffffffffffe, 0x29) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)) 9.600823711s ago: executing program 3 (id=385): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x3, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88900, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x400, 0x8, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 9.477494751s ago: executing program 4 (id=386): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x140, 0x2, 0x2003, 0xfb, 0x401, 0x80000001, 0x8000, 0x6, 0x8, 0xf1e4, 0x2, 0x7f, 0x800000f8, 0x8, 0x4c8, 0x827, 0x8000, 0x401, 0x1, 0x8, 0x6, 0xf, 0xff, 0x2007, 0x8, 0x200000, 0xc5, 0x2, 0x7, 0xffffffff, 0x2]}) syz_io_uring_setup(0x3168, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffdfe) memfd_secret(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f0000000040)=0x83ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x28040680) socket$inet6(0xa, 0x80002, 0x0) 9.475449262s ago: executing program 2 (id=387): socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x3}}) set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(0xc9, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x78d4a000) 8.919236708s ago: executing program 3 (id=388): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4917, 0xfffb, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.379967734s ago: executing program 1 (id=389): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x1895, &(0x7f0000000000)={0x0, 0x854d, 0xc00, 0x2002001, 0x39}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000008c0)=@IORING_OP_WAITID={0x32, 0x44, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x5}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x3, 0x3, 0x0, 0x0, 0x8, 0xffffffffffffffc0, 0x1}, @generic={0xb8, 0x1, 0xe, 0x1, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x79, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2ecbd, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b80), 0x10, 0x8}, 0x94) landlock_restrict_self(r9, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r8, 0x0, 0x0) 7.29646366s ago: executing program 3 (id=390): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000c20000fdeb0012cbd5f51cee3a7600b081f9637f6d4735f2dce7657669def6613a90098dca4cae4f47c6843dc7914316ed2e541188c9f3f65ba22578c47c25fafb6cfda16b4db0857d8a0b0cb0d7644437f18a51b73609ea1d4f1c4775c5aa329deda988ffbc78a2b916b585fa5b08968e9b0c875e27df6695735fdc54e65e4cb6cfd85ab9dba6e46f19f51ebb3a553bf55a749690daafbe9772f31b8a6f2e395495638f49a9d4121613bae5754fcfa084e68431e5f594abc9a53bd1fb993554cf4ee3870500fddcd287345461172cf3c480cfd13f63afee36de9847721ad173f547d8f020519f85f5dfc14c4b2d77385f923bde9b52ae8b6a707264114544644079df54d1dc1fed7b207930e8b1a008acab92ca11cf79d3bdc569407d559e415556c186fa921e7f535e170e262aa3cf6221eda62249d9c3067734229489d8d3b2412aa608746e044cde5b28c728c26ae72855cae4e85a51e7510fefc993954e69d4d59e234c34a0488eab767eaa66a6ef20f00dbd7e3a3c5f841139", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x210, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x6, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x7, 0x2}}]}}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010102}, {0x0, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0xfffffffb}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @empty}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c}}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x210}}, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, 0x0, 0x1003) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f00000008c0)) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4a0, 0x0, 0x0, 0xffffffff, 0x338, 0x290, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'macvtap0\x00', 0x10, 0x1, 0x6, 0x10000, 0xc, 0x2, {0xfffffffffffffffc}, {0x6}}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sg0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000070000002be27851952fb8e0181100003999", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000001801000020756c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000200000056000000060000002c93000000000000b5030000000000008500000078000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x15) 7.147556032s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc517ba9b67", 0x98}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000e80000000b010000000004000d6f7e4e4e000082"], 0x18}, 0x2c000811) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, {0x2011}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 5.614277447s ago: executing program 3 (id=392): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) accept4(r1, 0x0, &(0x7f00000001c0), 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x2007, 0x4}) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000200050000efdf2254f217c2", 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x475, 0x4) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x7) ppoll(&(0x7f0000000400)=[{r6, 0xa0}], 0x1, &(0x7f0000000440)={0x0, 0x3938700}, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 4.040792861s ago: executing program 1 (id=393): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00007100000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006001000060000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(0x0, 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{0x2}, {@val={0x8}, @val={0xfffffffffffffd1e, 0x99, {0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x48) 2.40553176s ago: executing program 4 (id=394): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413b8d82c3f3c48", 0x34}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.793334945s ago: executing program 2 (id=395): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000380)="abb2b5") ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x2, {0x6, 0x80, 0x7fff, 0x5a}}) sendfile(r3, r1, &(0x7f0000000280)=0x1, 0x5) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5dc, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) llistxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000600)=""/63, 0x3f) syz_usb_disconnect(r5) syz_usb_connect$uac2(0x5, 0x97, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x7, 0x80, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x19, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x2, 0x101, 0x6, 0x9, 0x3, 0x1, 0x81, 0x54, 0xe7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc, 0x40, 0x7, {0x8, 0x25, 0x1, 0x81, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x44, "f0368b", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0x40, {0x8, 0x25, 0x1, 0x3, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x8be906c6bc2ef1a2, 0x0, 0x1, 0xf8, 0x20, 0x8}, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0xf8}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '^/\xdf-\'.-&-\'\xb2,,('}}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a3a, 0x1022}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) fstat(r6, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4) pread64(r1, &(0x7f0000000100)=""/2, 0x2, 0xd000) 0s ago: executing program 2 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4917, 0xfffb, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) kernel console output (not intermixed with test programs): hci3: command tx timeout [ 82.802538][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.802561][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.804362][ T52] Bluetooth: hci4: command tx timeout [ 82.830031][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.830052][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.092834][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.092854][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.277793][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.277812][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.372251][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.372273][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.401730][ T5809] ======================================================= [ 84.401730][ T5809] WARNING: The mand mount option has been deprecated and [ 84.401730][ T5809] and is ignored by this kernel. Remove the mand [ 84.401730][ T5809] option from the mount to silence this warning. [ 84.401730][ T5809] ======================================================= [ 84.924001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.053867][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 85.053885][ T31] audit: type=1400 audit(1790098443.097:189): avc: denied { mount } for pid=5808 comm="syz.3.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.053932][ T31] audit: type=1400 audit(1790098443.107:190): avc: denied { mounton } for pid=5808 comm="syz.3.4" path="/0/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 85.053969][ T31] audit: type=1400 audit(1790098443.107:191): avc: denied { mount } for pid=5808 comm="syz.3.4" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.151059][ T31] audit: type=1400 audit(1790098443.847:192): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.199839][ T31] audit: type=1400 audit(1790098444.877:193): avc: denied { mount } for pid=5812 comm="syz.0.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 86.200034][ T31] audit: type=1400 audit(1790098444.877:194): avc: denied { search } for pid=5812 comm="syz.0.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.200088][ T31] audit: type=1400 audit(1790098444.877:195): avc: denied { search } for pid=5812 comm="syz.0.1" name="per_cpu" dev="tracefs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.200203][ T31] audit: type=1400 audit(1790098444.877:196): avc: denied { search } for pid=5812 comm="syz.0.1" name="cpu0" dev="tracefs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.200359][ T31] audit: type=1400 audit(1790098444.877:197): avc: denied { read } for pid=5812 comm="syz.0.1" name="trace" dev="tracefs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 86.200495][ T31] audit: type=1400 audit(1790098444.877:198): avc: denied { open } for pid=5812 comm="syz.0.1" path="/0/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.484105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.148064][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 90.148083][ T31] audit: type=1400 audit(1790098448.847:212): avc: denied { append } for pid=5838 comm="syz.2.15" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.190458][ T31] audit: type=1400 audit(1790098448.887:213): avc: denied { read write } for pid=5838 comm="syz.2.15" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.190860][ T31] audit: type=1400 audit(1790098448.887:214): avc: denied { open } for pid=5838 comm="syz.2.15" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.318411][ T31] audit: type=1400 audit(1790098450.017:216): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.345196][ T31] audit: type=1400 audit(1790098448.887:215): avc: denied { mounton } for pid=5838 comm="syz.2.15" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.648730][ T31] audit: type=1400 audit(1790098450.347:217): avc: denied { read write } for pid=5845 comm="syz.2.18" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 91.650639][ T31] audit: type=1400 audit(1790098450.347:218): avc: denied { open } for pid=5845 comm="syz.2.18" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 91.789773][ T31] audit: type=1400 audit(1790098450.487:219): avc: denied { read write } for pid=5848 comm="syz.3.9" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.789964][ T31] audit: type=1400 audit(1790098450.487:220): avc: denied { open } for pid=5848 comm="syz.3.9" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.809952][ T31] audit: type=1400 audit(1790098450.487:221): avc: denied { ioctl } for pid=5848 comm="syz.3.9" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.961151][ T5851] Zero length message leads to an empty skb [ 91.971322][ T5851] lo: entered promiscuous mode [ 91.984453][ T5851] tunl0: entered promiscuous mode [ 91.987041][ T5851] gre0: entered promiscuous mode [ 92.011025][ T5851] gretap0: entered promiscuous mode [ 92.025404][ T5851] erspan0: entered promiscuous mode [ 92.029401][ T5851] ip_vti0: entered promiscuous mode [ 92.032940][ T5851] ip6_vti0: entered promiscuous mode [ 92.052231][ T5851] sit0: entered promiscuous mode [ 92.062164][ T5851] ip6tnl0: entered promiscuous mode [ 92.064711][ T5853] process 'syz.0.14' launched './file0' with NULL argv: empty string added [ 92.078957][ T5851] ip6gre0: entered promiscuous mode [ 92.081824][ T5851] syz_tun: entered promiscuous mode [ 92.098072][ T5851] ip6gretap0: entered promiscuous mode [ 92.102795][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.104068][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.105830][ T5724] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.147417][ T5851] bridge0: entered promiscuous mode [ 92.159467][ T5851] vcan0: entered promiscuous mode [ 92.192540][ T5851] bond0: entered promiscuous mode [ 92.192565][ T5851] bond_slave_0: entered promiscuous mode [ 92.192740][ T5851] bond_slave_1: entered promiscuous mode [ 92.218763][ T5851] team0: entered promiscuous mode [ 92.218780][ T5851] team_slave_0: entered promiscuous mode [ 92.218888][ T5851] team_slave_1: entered promiscuous mode [ 92.250624][ T5851] dummy0: entered promiscuous mode [ 92.273007][ T5851] nlmon0: entered promiscuous mode [ 92.286433][ T5851] batadv0: entered promiscuous mode [ 92.293301][ T5851] vxcan0: entered promiscuous mode [ 92.297204][ T5851] vxcan1: entered promiscuous mode [ 92.298210][ T5724] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.301216][ T5851] veth0: entered promiscuous mode [ 92.320744][ T5851] veth1: entered promiscuous mode [ 92.322062][ T5724] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.322102][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.322119][ T5724] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.322158][ T5724] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.119948][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.119976][ T5724] usb 4-1: Product: syz [ 93.119991][ T5724] usb 4-1: Manufacturer: syz [ 93.535404][ T25] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 93.821045][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.848725][ T25] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 93.911633][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 93.911727][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.912137][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 93.912170][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 94.033344][ T25] usb 2-1: string descriptor 0 read error: -22 [ 94.042626][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.083057][ T5851] wg0: entered promiscuous mode [ 94.528560][ T5851] wg1: entered promiscuous mode [ 94.740006][ T5851] wg2: entered promiscuous mode [ 94.800087][ T25] usb 2-1: config 0 descriptor?? [ 94.827049][ T5851] veth0_to_bridge: entered promiscuous mode [ 94.833362][ T5858] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.843555][ T5851] veth1_to_bridge: entered promiscuous mode [ 94.881533][ T5851] veth0_to_bond: entered promiscuous mode [ 94.904759][ T5851] veth1_to_bond: entered promiscuous mode [ 94.919827][ T5724] usb 4-1: can't set config #1, error -71 [ 94.928204][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.929297][ T5851] veth0_to_team: entered promiscuous mode [ 94.965234][ T5851] veth1_to_team: entered promiscuous mode [ 94.971338][ T5851] veth0_to_batadv: entered promiscuous mode [ 94.991236][ T5724] usb 4-1: USB disconnect, device number 2 [ 94.991342][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.991388][ T5851] batadv_slave_0: entered promiscuous mode [ 95.025942][ T5851] veth1_to_batadv: entered promiscuous mode [ 95.032233][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.032285][ T5851] batadv_slave_1: entered promiscuous mode [ 95.056862][ T5851] xfrm0: entered promiscuous mode [ 95.059119][ T5851] veth0_to_hsr: entered promiscuous mode [ 95.079976][ T5851] veth1_to_hsr: entered promiscuous mode [ 95.127320][ T5851] hsr0: entered promiscuous mode [ 95.144140][ T5851] veth1_virt_wifi: entered promiscuous mode [ 95.160332][ T5851] veth0_virt_wifi: entered promiscuous mode [ 95.178291][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 95.178308][ T31] audit: type=1400 audit(1790098453.877:228): avc: denied { write } for pid=5862 comm="syz.3.19" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.185001][ T5851] virt_wifi0: entered promiscuous mode [ 95.251989][ T5851] vlan0: entered promiscuous mode [ 95.290145][ T5851] vlan1: entered promiscuous mode [ 95.322284][ T5851] macvlan0: entered promiscuous mode [ 95.336266][ T5851] macvlan1: entered promiscuous mode [ 95.451572][ T5851] ipvlan0: entered promiscuous mode [ 95.451726][ T5851] ipvlan1: entered promiscuous mode [ 95.594263][ T5869] 0x000000000000-0x000000020000 : "" [ 95.597098][ T31] audit: type=1400 audit(1790098454.247:229): avc: denied { read write } for pid=5864 comm="syz.2.20" name="video1" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.597402][ T31] audit: type=1400 audit(1790098454.247:230): avc: denied { open } for pid=5864 comm="syz.2.20" path="/dev/video1" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.597564][ T31] audit: type=1400 audit(1790098454.257:231): avc: denied { ioctl } for pid=5864 comm="syz.2.20" path="/dev/video1" dev="devtmpfs" ino=925 ioctlcmd=0x5660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.597732][ T31] audit: type=1400 audit(1790098454.277:232): avc: denied { write } for pid=5864 comm="syz.2.20" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 95.597892][ T31] audit: type=1400 audit(1790098454.287:233): avc: denied { open } for pid=5864 comm="syz.2.20" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 95.598035][ T31] audit: type=1400 audit(1790098454.287:234): avc: denied { ioctl } for pid=5864 comm="syz.2.20" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 95.847990][ T31] audit: type=1400 audit(1790098454.547:235): avc: denied { read } for pid=5870 comm="syz.4.17" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.873778][ T31] audit: type=1400 audit(1790098454.547:236): avc: denied { open } for pid=5870 comm="syz.4.17" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.873832][ T31] audit: type=1400 audit(1790098454.547:237): avc: denied { ioctl } for pid=5870 comm="syz.4.17" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.955325][ T5869] ftl_cs: FTL header not found. [ 96.007703][ T5851] macvtap0: entered promiscuous mode [ 96.024346][ T5851] macsec0: entered promiscuous mode [ 96.044750][ T5874] binder: 5870:5874 ioctl c0306201 200000000180 returned -14 [ 96.053440][ T5851] geneve0: entered promiscuous mode [ 96.070383][ T5851] geneve1: entered promiscuous mode [ 96.131731][ T5851] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 96.162995][ T5851] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 96.186391][ T5872] 9p: Bad value for 'rfdno' [ 96.200505][ T5851] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 96.230745][ T5851] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 96.562022][ T5851] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 97.075420][ T5851] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 97.156265][ T5860] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.182901][ T5860] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.183011][ T5860] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.183130][ T5860] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.371324][ T5857] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.371351][ T5857] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.371375][ T5857] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.376074][ T5867] syz_tun: entered allmulticast mode [ 97.376795][ T5867] syz_tun: left allmulticast mode [ 97.441560][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 97.495651][ T5857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.558617][ T5857] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 97.871563][ T25] usb 2-1: USB disconnect, device number 2 [ 100.263959][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 100.263994][ T31] audit: type=1400 audit(1790098458.927:254): avc: denied { bind } for pid=5898 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.264149][ T31] audit: type=1400 audit(1790098458.927:255): avc: denied { setopt } for pid=5898 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.383858][ T5909] 9pnet_fd: p9_fd_create_tcp (5909): problem connecting socket to 127.0.0.1 [ 100.728165][ T31] audit: type=1400 audit(1790098459.077:256): avc: denied { mounton } for pid=5903 comm="syz.2.28" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 100.855714][ T52] block nbd3: Receive control failed (result -107) [ 101.013781][ T31] audit: type=1400 audit(1790098459.697:257): avc: denied { setopt } for pid=5910 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.013835][ T31] audit: type=1400 audit(1790098459.697:258): avc: denied { ioctl } for pid=5910 comm="syz.1.30" path="socket:[9523]" dev="sockfs" ino=9523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.013875][ T31] audit: type=1400 audit(1790098459.697:259): avc: denied { write } for pid=5910 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.024912][ T31] audit: type=1400 audit(1790098459.727:260): avc: denied { create } for pid=5913 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.027100][ T31] audit: type=1400 audit(1790098459.727:261): avc: denied { setopt } for pid=5913 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.952652][ T31] audit: type=1400 audit(1790098460.557:262): avc: denied { prog_run } for pid=5912 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.326038][ T5586] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.603735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.707640][ T5897] block nbd3: shutting down sockets [ 104.495010][ T31] audit: type=1400 audit(1790098463.187:263): avc: denied { create } for pid=5927 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.815771][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 107.815787][ T31] audit: type=1400 audit(1790098466.517:266): avc: denied { create } for pid=5935 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.879810][ T31] audit: type=1400 audit(1790098466.577:267): avc: denied { bind } for pid=5935 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.942251][ T31] audit: type=1400 audit(1790098466.637:268): avc: denied { create } for pid=5935 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.965929][ T31] audit: type=1400 audit(1790098466.667:269): avc: denied { getopt } for pid=5935 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.061550][ T31] audit: type=1400 audit(1790098466.757:270): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.344056][ T31] audit: type=1400 audit(1790098466.967:271): avc: denied { mounton } for pid=5935 comm="syz.1.39" path="/6/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 108.788245][ T31] audit: type=1400 audit(1790098467.487:272): avc: denied { name_bind } for pid=5943 comm="syz.3.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 108.788292][ T31] audit: type=1400 audit(1790098467.487:273): avc: denied { node_bind } for pid=5943 comm="syz.3.41" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 110.867504][ T31] audit: type=1400 audit(1790098469.567:274): avc: denied { append } for pid=5957 comm="syz.3.44" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.901929][ T5961] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 110.935767][ T5961] Bluetooth: MGMT ver 1.23 [ 110.951036][ T31] audit: type=1400 audit(1790098469.627:275): avc: denied { write } for pid=5957 comm="syz.3.44" path="socket:[9013]" dev="sockfs" ino=9013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.094322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.780936][ T31] audit: type=1400 audit(1790098472.467:276): avc: denied { getopt } for pid=5967 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.803823][ T31] audit: type=1400 audit(1790098473.767:277): avc: denied { map } for pid=5975 comm="syz.3.47" path="socket:[9624]" dev="sockfs" ino=9624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 116.139152][ T31] audit: type=1400 audit(1790098474.837:278): avc: denied { ioctl } for pid=5977 comm="syz.0.48" path="socket:[9044]" dev="sockfs" ino=9044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.247829][ T31] audit: type=1400 audit(1790098474.947:279): avc: denied { mount } for pid=5977 comm="syz.0.48" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 116.260311][ T31] audit: type=1400 audit(1790098474.957:280): avc: denied { mounton } for pid=5977 comm="syz.0.48" path="/9/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 116.710010][ T31] audit: type=1400 audit(1790098475.407:281): avc: denied { read } for pid=5988 comm="syz.3.50" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.741966][ T31] audit: type=1400 audit(1790098475.437:282): avc: denied { open } for pid=5988 comm="syz.3.50" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 117.553729][ T31] audit: type=1400 audit(1790098476.247:283): avc: denied { setopt } for pid=5990 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.553933][ T31] audit: type=1400 audit(1790098476.247:284): avc: denied { bind } for pid=5990 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.554114][ T31] audit: type=1400 audit(1790098476.247:285): avc: denied { name_bind } for pid=5990 comm="syz.1.51" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 118.047619][ T5723] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.554418][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 118.555821][ T5723] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 118.556757][ T5723] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 118.556782][ T5723] usb 4-1: config 0 has no interface number 0 [ 118.556819][ T5723] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 118.556843][ T5723] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 118.556868][ T5723] usb 4-1: config 0 interface 41 has no altsetting 0 [ 118.558810][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.558834][ T5723] usb 4-1: Product: syz [ 118.558849][ T5723] usb 4-1: Manufacturer: syz [ 118.558864][ T5723] usb 4-1: SerialNumber: syz [ 118.575729][ T5723] usb 4-1: config 0 descriptor?? [ 118.577134][ T5993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.577252][ T5993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.243919][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.393774][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 119.396855][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.401424][ T25] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.401503][ T25] usb 5-1: config 0 has no interface number 0 [ 119.401632][ T25] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.401691][ T25] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.401720][ T25] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.401795][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.551892][ T25] usb 5-1: config 0 descriptor?? [ 119.687763][ T25] ldusb 5-1:0.55: Interrupt in endpoint not found [ 120.007550][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 120.007573][ T31] audit: type=1400 audit(1790098478.707:304): avc: denied { write } for pid=6024 comm="syz.0.55" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.157491][ T6026] random: crng reseeded on system resumption [ 120.221315][ T31] audit: type=1400 audit(1790098478.847:305): avc: denied { write } for pid=6024 comm="syz.0.55" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.221481][ T31] audit: type=1400 audit(1790098478.847:306): avc: denied { open } for pid=6024 comm="syz.0.55" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.524855][ T31] audit: type=1400 audit(1790098479.217:307): avc: denied { map } for pid=6010 comm="syz.4.54" path="socket:[9072]" dev="sockfs" ino=9072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.525035][ T31] audit: type=1400 audit(1790098479.217:308): avc: denied { read } for pid=6010 comm="syz.4.54" path="socket:[9072]" dev="sockfs" ino=9072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.838626][ T5723] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 120.855368][ T31] audit: type=1400 audit(1790098479.537:309): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.911610][ T5723] usb 4-1: USB disconnect, device number 4 [ 120.926586][ T5866] udevd[5866]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory [ 120.951443][ T31] audit: type=1400 audit(1790098479.657:310): avc: denied { read write } for pid=6010 comm="syz.4.54" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 120.951492][ T31] audit: type=1400 audit(1790098479.657:311): avc: denied { open } for pid=6010 comm="syz.4.54" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 121.175342][ T31] audit: type=1400 audit(1790098479.877:312): avc: denied { write } for pid=6035 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.226070][ T31] audit: type=1400 audit(1790098479.917:313): avc: denied { write } for pid=6037 comm="syz.2.46" name="usb_gadget" dev="configfs" ino=3768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.287081][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6042 comm=syz.1.56 [ 121.657738][ T6053] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 121.801685][ T189] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.803069][ T5723] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.037128][ T5723] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 122.038217][ T189] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 122.041245][ T189] usb 4-1: config 0 has no interfaces? [ 122.048021][ T5723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.048070][ T5723] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.048128][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.057836][ T189] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 122.057894][ T189] usb 4-1: Product: syz [ 122.057942][ T189] usb 4-1: Manufacturer: syz [ 122.057988][ T189] usb 4-1: SerialNumber: syz [ 122.306008][ T189] usb 4-1: config 0 descriptor?? [ 122.339382][ T5723] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 122.465441][ T5788] usb 5-1: USB disconnect, device number 2 [ 122.793924][ T6069] No source specified [ 123.210337][ T5788] usb 4-1: USB disconnect, device number 5 [ 123.419099][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'. [ 123.485423][ T6075] l2tp_ppp: sess 2/0: no socket in recv [ 123.564482][ T6073] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 123.763669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.833666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.821206][ T6086] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 124.850712][ T2343] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 124.876965][ T2343] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 124.964335][ T189] usb 1-1: USB disconnect, device number 2 [ 125.016617][ T79] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.244869][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 125.244892][ T31] audit: type=1400 audit(1790098483.937:339): avc: denied { write } for pid=6093 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.553878][ T31] audit: type=1400 audit(1790098484.187:340): avc: denied { prog_load } for pid=6094 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.535411][ T6120] Bluetooth: ISO socket layer initialized [ 132.728122][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.728176][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.031060][ T31] audit: type=1400 audit(1790098491.727:341): avc: denied { ioctl } for pid=6124 comm="syz.1.72" path="socket:[9181]" dev="sockfs" ino=9181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.618111][ T6133] o2cb: This node has not been configured. [ 133.618141][ T6133] o2cb: Cluster check failed. Fix errors before retrying. [ 133.618237][ T6133] (syz.2.73,6133,0):user_dlm_register:674 ERROR: status = -22 [ 133.618278][ T6133] (syz.2.73,6133,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 134.141865][ T31] audit: type=1400 audit(1790098492.307:342): avc: denied { write } for pid=6129 comm="syz.2.73" name="/" dev="ocfs2_dlmfs" ino=9848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.141911][ T31] audit: type=1400 audit(1790098492.307:343): avc: denied { add_name } for pid=6129 comm="syz.2.73" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.141947][ T31] audit: type=1400 audit(1790098492.317:344): avc: denied { create } for pid=6129 comm="syz.2.73" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 134.141982][ T31] audit: type=1400 audit(1790098492.317:345): avc: denied { associate } for pid=6129 comm="syz.2.73" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.142024][ T31] audit: type=1400 audit(1790098492.817:346): avc: denied { bind } for pid=6124 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.231557][ T31] audit: type=1400 audit(1790098492.917:347): avc: denied { ioctl } for pid=6132 comm="syz.0.74" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 134.639282][ T31] audit: type=1400 audit(1790098493.337:348): avc: denied { create } for pid=6138 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.668916][ T31] audit: type=1400 audit(1790098493.367:349): avc: denied { connect } for pid=6138 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.674296][ T31] audit: type=1400 audit(1790098493.377:350): avc: denied { write } for pid=6138 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.763751][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 136.867781][ T6176] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 137.903156][ T1009] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.414013][ T1009] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 138.414053][ T1009] usb 5-1: no configurations [ 138.414065][ T1009] usb 5-1: can't read configurations, error -22 [ 138.807254][ T1009] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.692443][ T5861] IPVS: starting estimator thread 0... [ 139.777852][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 139.777870][ T31] audit: type=1400 audit(1790098498.477:363): avc: denied { map } for pid=6192 comm="syz.0.85" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.844098][ T6196] IPVS: using max 62 ests per chain, 148800 per kthread [ 141.092755][ T31] audit: type=1400 audit(1790098499.537:364): avc: denied { mount } for pid=6199 comm="syz.4.87" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 141.092812][ T31] audit: type=1400 audit(1790098499.547:365): avc: denied { search } for pid=6199 comm="syz.4.87" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 141.092835][ T31] audit: type=1400 audit(1790098499.557:366): avc: denied { read write } for pid=6199 comm="syz.4.87" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 141.092858][ T31] audit: type=1400 audit(1790098499.567:367): avc: denied { open } for pid=6199 comm="syz.4.87" path="/13/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 141.383849][ T31] audit: type=1400 audit(1790098500.047:368): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 141.807563][ T31] audit: type=1400 audit(1790098500.477:369): avc: denied { listen } for pid=6197 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.909846][ T31] audit: type=1400 audit(1790098500.587:370): avc: denied { write } for pid=6197 comm="syz.2.86" name="subsystems" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.841933][ T31] audit: type=1400 audit(1790098501.537:371): avc: denied { create } for pid=6190 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.877110][ T6211] warning: `syz.2.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.190078][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 143.822363][ T31] audit: type=1400 audit(1790098502.517:372): avc: denied { create } for pid=6221 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.860018][ T6222] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 143.930621][ T6224] nvmet_rdma: address family 255 not supported [ 145.568288][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 145.568308][ T31] audit: type=1400 audit(1790098504.267:385): avc: denied { unlink } for pid=5597 comm="syz-executor" name="loop0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.206205][ T31] audit: type=1400 audit(1790098504.907:386): avc: denied { map_create } for pid=6240 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.206250][ T31] audit: type=1400 audit(1790098504.907:387): avc: denied { map_read } for pid=6240 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.234620][ T31] audit: type=1400 audit(1790098504.927:388): avc: denied { map_write } for pid=6240 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.743693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.557477][ T6267] Cannot find add_set index 2 as target [ 151.296694][ T31] audit: type=1400 audit(1790098509.747:389): avc: denied { create } for pid=6265 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 151.296746][ T31] audit: type=1400 audit(1790098509.877:390): avc: denied { write } for pid=6265 comm="syz.3.101" path="socket:[10505]" dev="sockfs" ino=10505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 151.319589][ T5709] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.927709][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 152.931062][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'. [ 153.485314][ T31] audit: type=1400 audit(1790098511.477:391): avc: denied { listen } for pid=6275 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.485365][ T31] audit: type=1400 audit(1790098511.517:392): avc: denied { ioctl } for pid=6275 comm="syz.1.106" path="socket:[10096]" dev="sockfs" ino=10096 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.485404][ T31] audit: type=1400 audit(1790098511.527:393): avc: denied { append } for pid=6275 comm="syz.1.106" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.423524][ T31] audit: type=1400 audit(1790098513.117:394): avc: denied { connect } for pid=6285 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.475429][ T31] audit: type=1400 audit(1790098513.177:395): avc: denied { name_bind } for pid=6270 comm="syz.4.88" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 154.480381][ T31] audit: type=1400 audit(1790098513.177:396): avc: denied { node_bind } for pid=6270 comm="syz.4.88" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 154.521596][ T31] audit: type=1400 audit(1790098513.217:397): avc: denied { prog_run } for pid=6270 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.543264][ T6287] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 154.593498][ T6287] CIFS: Attempting to mount //127.0.0.1/share [ 154.652057][ T6272] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 155.329296][ T6294] UDC core: g1: couldn't find an available UDC or it's busy [ 155.522348][ T31] audit: type=1400 audit(1790098513.777:398): avc: denied { write } for pid=6291 comm="syz.0.104" name="configs" dev="configfs" ino=9085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.535736][ T6287] CIFS: VFS: cifs_mount failed w/return code = -512 [ 158.885962][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 158.885982][ T31] audit: type=1400 audit(1790098516.877:402): avc: denied { watch watch_reads } for pid=6304 comm="syz.0.112" path="/25" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 158.963246][ T31] audit: type=1400 audit(1790098517.657:403): avc: denied { create } for pid=6313 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.877131][ T31] audit: type=1400 audit(1790098518.567:404): avc: denied { listen } for pid=6313 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.108049][ T31] audit: type=1400 audit(1790098519.807:405): avc: denied { connect } for pid=6320 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.322014][ T31] audit: type=1400 audit(1790098520.017:406): avc: denied { shutdown } for pid=6320 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.808799][ T6332] FAULT_INJECTION: forcing a failure. [ 163.808799][ T6332] name failslab, interval 1, probability 0, space 0, times 1 [ 163.808864][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.4.119 Not tainted syzkaller #0 PREEMPT(full) [ 163.808892][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 163.808911][ T6332] Call Trace: [ 163.808918][ T6332] [ 163.808927][ T6332] dump_stack_lvl+0x100/0x190 [ 163.808976][ T6332] should_fail_ex.cold+0x5/0xa [ 163.809007][ T6332] should_failslab+0xc2/0x120 [ 163.809033][ T6332] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 163.809059][ T6332] ? __kthread_create_on_node+0x186/0x3f0 [ 163.809093][ T6332] kvasprintf+0xbc/0x150 [ 163.809117][ T6332] ? __pfx_kvasprintf+0x10/0x10 [ 163.809140][ T6332] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 163.809170][ T6332] ? __kthread_create_on_node+0xce/0x3f0 [ 163.809200][ T6332] ? __pfx_cryptomgr_probe+0x10/0x10 [ 163.809219][ T6332] __kthread_create_on_node+0x186/0x3f0 [ 163.809245][ T6332] ? __pfx___kthread_create_on_node+0x10/0x10 [ 163.809285][ T6332] ? __pfx_cryptomgr_probe+0x10/0x10 [ 163.809305][ T6332] kthread_create_on_node+0xc7/0x100 [ 163.809330][ T6332] ? __pfx_kthread_create_on_node+0x10/0x10 [ 163.809358][ T6332] ? __kasan_kmalloc+0xaa/0xb0 [ 163.809381][ T6332] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 163.809411][ T6332] ? cryptomgr_notify+0xa4/0xb40 [ 163.809436][ T6332] cryptomgr_notify+0x953/0xb40 [ 163.809458][ T6332] ? __kasan_kmalloc+0xaa/0xb0 [ 163.809483][ T6332] notifier_call_chain+0x99/0x3f0 [ 163.809516][ T6332] blocking_notifier_call_chain+0x69/0xa0 [ 163.809547][ T6332] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 163.809580][ T6332] crypto_alloc_tfm_node+0xd3/0x260 [ 163.809611][ T6332] esp_init_authenc.constprop.0+0x1df/0xb50 [ 163.809640][ T6332] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 163.809678][ T6332] ? find_held_lock+0x2b/0x80 [ 163.809710][ T6332] esp_init_state+0x2f8/0x530 [ 163.809742][ T6332] __xfrm_init_state+0x842/0x1dc0 [ 163.809779][ T6332] xfrm_init_state+0x1c/0xa0 [ 163.809809][ T6332] pfkey_add+0x1c88/0x2f10 [ 163.809846][ T6332] ? __pfx_pfkey_add+0x10/0x10 [ 163.809871][ T6332] ? kfree_skbmem+0x19f/0x210 [ 163.809891][ T6332] ? sk_skb_reason_drop+0x114/0x1b0 [ 163.809920][ T6332] ? pfkey_broadcast+0x28c/0x420 [ 163.809947][ T6332] ? __pfx_pfkey_add+0x10/0x10 [ 163.809973][ T6332] pfkey_process+0x5c3/0x810 [ 163.810003][ T6332] ? __pfx_pfkey_process+0x10/0x10 [ 163.810030][ T6332] ? pfkey_sendmsg+0x41a/0x840 [ 163.810075][ T6332] ? __pfx___alloc_skb+0x10/0x10 [ 163.810107][ T6332] pfkey_sendmsg+0x428/0x840 [ 163.810139][ T6332] ____sys_sendmsg+0xa4d/0xbe0 [ 163.810166][ T6332] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 163.810196][ T6332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.810231][ T6332] ? plist_check_list+0x1b8/0x280 [ 163.810254][ T6332] ? plist_del+0x308/0x510 [ 163.810281][ T6332] ___sys_sendmsg+0x190/0x1e0 [ 163.810304][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.810324][ T6332] ? futex_wake+0x220/0x5e0 [ 163.810355][ T6332] ? find_held_lock+0x2b/0x80 [ 163.810405][ T6332] __sys_sendmsg+0x160/0x210 [ 163.810431][ T6332] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.810473][ T6332] do_syscall_64+0x123/0x790 [ 163.810505][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.810526][ T6332] RIP: 0033:0x7f470cf9e159 [ 163.810560][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.810584][ T6332] RSP: 002b:00007f470de43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.810609][ T6332] RAX: ffffffffffffffda RBX: 00007f470d225fa0 RCX: 00007f470cf9e159 [ 163.810624][ T6332] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 163.810636][ T6332] RBP: 00007f470d03506b R08: 0000000000000000 R09: 0000000000000000 [ 163.810648][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.810660][ T6332] R13: 00007f470d226038 R14: 00007f470d225fa0 R15: 00007ffe784e5388 [ 163.810689][ T6332] [ 164.144433][ T31] audit: type=1400 audit(1790098522.847:407): avc: denied { create } for pid=6346 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.173904][ T31] audit: type=1400 audit(1790098522.857:408): avc: denied { write } for pid=6346 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.309646][ T6349] ip_tables: iptables: counters copy to user failed while replacing table [ 165.475926][ T6363] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.829216][ T31] audit: type=1400 audit(1790098524.517:409): avc: denied { getopt } for pid=6355 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.979391][ T6365] SET target dimension over the limit! [ 166.767787][ T31] audit: type=1400 audit(1790098525.417:410): avc: denied { getopt } for pid=6359 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.797255][ T6367] sctp: [Deprecated]: syz.0.124 (pid 6367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.797255][ T6367] Use struct sctp_sack_info instead [ 166.859267][ T1009] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.483228][ T6370] o2cb: This node has not been configured. [ 167.483279][ T6370] o2cb: Cluster check failed. Fix errors before retrying. [ 167.483406][ T6370] (syz.3.127,6370,0):user_dlm_register:674 ERROR: status = -22 [ 167.483464][ T6370] (syz.3.127,6370,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 168.191557][ T31] audit: type=1400 audit(1790098526.177:411): avc: denied { write } for pid=6368 comm="syz.3.127" name="/" dev="ocfs2_dlmfs" ino=11338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.274791][ T1009] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 168.297170][ T1009] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 168.552563][ T1009] usb 5-1: string descriptor 0 read error: -71 [ 168.552633][ T1009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.589653][ T1009] usb 5-1: can't set config #54, error -71 [ 168.599700][ T31] audit: type=1400 audit(1790098527.237:412): avc: denied { create } for pid=6372 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.641358][ T1009] usb 5-1: USB disconnect, device number 5 [ 168.650491][ T31] audit: type=1400 audit(1790098527.347:413): avc: denied { bind } for pid=6372 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.727369][ T31] audit: type=1400 audit(1790098527.427:414): avc: denied { getopt } for pid=6372 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.105336][ T31] audit: type=1400 audit(1790098527.637:415): avc: denied { connect } for pid=6374 comm="syz.4.130" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.105880][ T31] audit: type=1400 audit(1790098527.647:416): avc: denied { name_connect } for pid=6374 comm="syz.4.130" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 169.954594][ T6376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.130'. [ 171.367004][ T6390] ip6t_srh: unknown srh invflags 7863 [ 172.453587][ T6392] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.476947][ T31] audit: type=1400 audit(1790098531.177:417): avc: denied { write } for pid=6380 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.477109][ T31] audit: type=1400 audit(1790098531.177:418): avc: denied { nlmsg_write } for pid=6380 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.073094][ T31] audit: type=1400 audit(1790098531.767:419): avc: denied { setopt } for pid=6394 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.587507][ T6405] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 174.049402][ T31] audit: type=1400 audit(1790098532.727:420): avc: denied { write } for pid=6398 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 176.980831][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 180.054002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.870140][ T31] audit: type=1400 audit(1790098542.567:421): avc: denied { ioctl } for pid=6438 comm="syz.0.145" path="socket:[10880]" dev="sockfs" ino=10880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.925670][ T31] audit: type=1400 audit(1790098542.627:422): avc: denied { bind } for pid=6438 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.964844][ T6439] netlink: 14 bytes leftover after parsing attributes in process `syz.0.145'. [ 184.034089][ T31] audit: type=1400 audit(1790098542.737:423): avc: denied { map } for pid=6438 comm="syz.0.145" path="socket:[10873]" dev="sockfs" ino=10873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.034274][ T31] audit: type=1400 audit(1790098542.737:424): avc: denied { read } for pid=6438 comm="syz.0.145" path="socket:[10873]" dev="sockfs" ino=10873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.067797][ T31] audit: type=1400 audit(1790098542.747:425): avc: denied { bind } for pid=6438 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.091670][ T31] audit: type=1400 audit(1790098542.777:426): avc: denied { accept } for pid=6438 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.112686][ T31] audit: type=1400 audit(1790098542.797:427): avc: denied { write } for pid=6438 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.446861][ T31] audit: type=1400 audit(1790098543.147:428): avc: denied { mount } for pid=6445 comm="syz.2.143" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 184.530683][ T31] audit: type=1400 audit(1790098543.227:429): avc: denied { shutdown } for pid=6445 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.075320][ T6449] o2cb: This node has not been configured. [ 185.076777][ T6449] o2cb: Cluster check failed. Fix errors before retrying. [ 185.077028][ T6449] (syz.4.140,6449,0):user_dlm_register:674 ERROR: status = -22 [ 185.077080][ T6449] (syz.4.140,6449,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 185.745971][ T31] audit: type=1400 audit(1790098543.767:430): avc: denied { write } for pid=6447 comm="syz.4.140" name="/" dev="ocfs2_dlmfs" ino=11539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.005111][ T6453] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 192.769821][ T2343] pvrusb2: request_firmware fatal error with code=-110 [ 192.769843][ T2343] pvrusb2: Failure uploading firmware1 [ 192.769850][ T2343] pvrusb2: Device initialization was not successful. [ 192.769857][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 192.769864][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 192.775922][ T189] pvrusb2: Device being rendered inoperable [ 193.294934][ T6492] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 193.732334][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 193.732353][ T31] audit: type=1800 audit(1790098552.427:437): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.156" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 193.801368][ T31] audit: type=1400 audit(1790098552.497:438): avc: denied { bind } for pid=6494 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.856561][ T31] audit: type=1400 audit(1790098552.557:439): avc: denied { ioctl } for pid=6494 comm="syz.0.157" path="socket:[10939]" dev="sockfs" ino=10939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.169705][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169740][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.208508][ T31] audit: type=1800 audit(1790098552.887:440): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.156" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 194.811348][ T31] audit: type=1400 audit(1790098553.507:441): avc: denied { setopt } for pid=6494 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.849046][ T6497] bridge0: port 3(syz_tun) entered blocking state [ 194.849299][ T6497] bridge0: port 3(syz_tun) entered disabled state [ 194.849458][ T6497] syz_tun: entered allmulticast mode [ 194.972640][ T6504] tc_dump_action: action bad kind [ 194.983304][ T31] audit: type=1326 audit(1790098553.677:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b19e159 code=0x7ffc0000 [ 194.984880][ T31] audit: type=1326 audit(1790098553.687:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc90b19e159 code=0x7ffc0000 [ 194.985298][ T31] audit: type=1326 audit(1790098553.687:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b19e159 code=0x7ffc0000 [ 194.985627][ T31] audit: type=1326 audit(1790098553.687:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc90b19e159 code=0x7ffc0000 [ 194.985861][ T31] audit: type=1326 audit(1790098553.687:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b19e159 code=0x7ffc0000 [ 199.390633][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 199.390651][ T31] audit: type=1400 audit(1790098558.087:459): avc: denied { read write } for pid=6527 comm="syz.4.168" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 199.390867][ T31] audit: type=1400 audit(1790098558.087:460): avc: denied { open } for pid=6527 comm="syz.4.168" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 199.483541][ T6529] bridge0: port 3(syz_tun) entered blocking state [ 199.483893][ T6529] bridge0: port 3(syz_tun) entered disabled state [ 199.484040][ T6529] syz_tun: entered allmulticast mode [ 199.492449][ T6529] syz_tun: entered promiscuous mode [ 199.493049][ T6529] bridge0: port 3(syz_tun) entered blocking state [ 199.493225][ T6529] bridge0: port 3(syz_tun) entered forwarding state [ 199.607247][ T31] audit: type=1400 audit(1790098558.307:461): avc: denied { read write } for pid=6530 comm="syz.0.170" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.612927][ T31] audit: type=1400 audit(1790098558.307:462): avc: denied { open } for pid=6530 comm="syz.0.170" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.716188][ T6529] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.306925][ T6536] Cannot find add_set index 2 as target [ 200.909571][ T31] audit: type=1400 audit(1790098558.877:463): avc: denied { ioctl } for pid=6532 comm="syz.3.169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 201.020370][ T5586] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 201.114950][ T5586] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.368521][ T6528] Bluetooth: hci0: command 0x0406 tx timeout [ 201.368641][ T6528] Bluetooth: hci3: command 0x0406 tx timeout [ 201.368677][ T6528] Bluetooth: hci2: command 0x0406 tx timeout [ 201.368710][ T6528] Bluetooth: hci1: command 0x0406 tx timeout [ 202.697596][ T6538] fido_id[6538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.764661][ T31] audit: type=1400 audit(1790098561.467:464): avc: denied { create } for pid=6541 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.791839][ T31] audit: type=1400 audit(1790098561.477:465): avc: denied { bind } for pid=6541 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.913817][ T31] audit: type=1400 audit(1790098561.607:466): avc: denied { setattr } for pid=6541 comm="syz.0.173" name="IEEE-802.15.4-MAC" dev="sockfs" ino=11654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.022698][ T31] audit: type=1400 audit(1790098561.717:467): avc: denied { getopt } for pid=6541 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.959773][ T31] audit: type=1400 audit(1790098562.657:468): avc: denied { read } for pid=6547 comm="syz.0.174" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.076181][ T6550] Trying to write to read-only block-device nullb0 [ 206.340222][ T6557] Cannot find add_set index 2 as target [ 211.802146][ T6581] Cannot find add_set index 2 as target [ 213.402640][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 213.402661][ T31] audit: type=1400 audit(1790098572.087:472): avc: denied { accept } for pid=6583 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.683708][ T31] audit: type=1400 audit(1790098572.094:473): avc: denied { create } for pid=6587 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.203318][ T31] audit: type=1400 audit(1790098572.984:474): avc: denied { bind } for pid=6595 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.214695][ T6604] Cannot find add_set index 2 as target [ 217.283393][ T31] audit: type=1400 audit(1790098574.974:475): avc: denied { write } for pid=6601 comm="syz.4.186" name="functions" dev="configfs" ino=9084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.330684][ T31] audit: type=1400 audit(1790098575.024:476): avc: denied { write } for pid=6601 comm="syz.4.186" name="c.1" dev="configfs" ino=10662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.331469][ T31] audit: type=1400 audit(1790098575.024:477): avc: denied { write } for pid=6601 comm="syz.4.186" name="c.1" dev="configfs" ino=10662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.382053][ T31] audit: type=1400 audit(1790098575.084:478): avc: denied { write } for pid=6601 comm="syz.4.186" name="os_desc" dev="configfs" ino=9087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.383882][ T31] audit: type=1400 audit(1790098575.084:479): avc: denied { write } for pid=6601 comm="syz.4.186" name="os_desc" dev="configfs" ino=9087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.454027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 218.644604][ T6609] Cannot find add_set index 2 as target [ 219.656582][ T31] audit: type=1400 audit(1790098577.354:480): avc: denied { append } for pid=6611 comm="syz.0.182" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.717337][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 221.126759][ T6620] o2cb: This node has not been configured. [ 221.126805][ T6620] o2cb: Cluster check failed. Fix errors before retrying. [ 221.126977][ T6620] (syz.0.188,6620,0):user_dlm_register:674 ERROR: status = -22 [ 221.127030][ T6620] (syz.0.188,6620,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 221.818669][ T31] audit: type=1400 audit(1790098578.814:481): avc: denied { write } for pid=6618 comm="syz.0.188" name="/" dev="ocfs2_dlmfs" ino=11784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.896974][ T31] audit: type=1400 audit(1790098579.584:482): avc: denied { mount } for pid=6614 comm="syz.1.185" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 222.195018][ T31] audit: type=1400 audit(1790098579.894:483): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 222.312051][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 222.496014][ T31] audit: type=1400 audit(1790098580.194:484): avc: denied { shutdown } for pid=6630 comm="syz.1.194" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.503444][ T31] audit: type=1400 audit(1790098580.194:485): avc: denied { read } for pid=6630 comm="syz.1.194" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.569539][ T31] audit: type=1400 audit(1790098580.264:486): avc: denied { write } for pid=6637 comm="syz.3.190" name="cluster" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.612205][ T31] audit: type=1400 audit(1790098580.304:487): avc: denied { write } for pid=6637 comm="syz.3.190" name="node" dev="configfs" ino=11231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.679809][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 222.733963][ T5709] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.883694][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 222.885967][ T5709] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 222.887240][ T5709] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 222.887266][ T5709] usb 5-1: config 0 has no interface number 0 [ 222.889594][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.889628][ T5709] usb 5-1: Product: syz [ 222.889641][ T5709] usb 5-1: Manufacturer: syz [ 222.889657][ T5709] usb 5-1: SerialNumber: syz [ 222.931900][ T31] audit: type=1400 audit(1790098580.624:488): avc: denied { write } for pid=6637 comm="syz.3.190" name="heartbeat" dev="configfs" ino=11232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.933004][ T5709] usb 5-1: config 0 descriptor?? [ 222.995446][ T5709] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 223.318466][ T5709] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 223.336866][ T31] audit: type=1400 audit(1790098581.034:489): avc: denied { ioctl } for pid=6649 comm="syz.1.196" path="socket:[11239]" dev="sockfs" ino=11239 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.381382][ T5709] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 224.246469][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 224.247167][ T5709] usb 5-1: USB disconnect, device number 6 [ 224.280166][ T5709] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 224.377083][ T5709] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 224.377924][ T5709] quatech2 5-1:0.51: device disconnected [ 224.685169][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 224.685187][ T31] audit: type=1400 audit(1790098582.384:495): avc: denied { write } for pid=6671 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.723917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 225.959332][ T5788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 226.165198][ T5788] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.169680][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.169711][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.169737][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.169777][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.226842][ T5788] usb 1-1: config 0 descriptor?? [ 226.551737][ T31] audit: type=1400 audit(1790098584.244:496): avc: denied { write } for pid=6686 comm="syz.1.203" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 226.580398][ T31] audit: type=1400 audit(1790098584.274:497): avc: denied { bind } for pid=6682 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.623886][ T31] audit: type=1400 audit(1790098584.324:498): avc: denied { read } for pid=6686 comm="syz.1.203" path="socket:[11944]" dev="sockfs" ino=11944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.681374][ T6691] FAULT_INJECTION: forcing a failure. [ 226.681374][ T6691] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 226.690161][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT(full) [ 226.690184][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 226.690192][ T6691] Call Trace: [ 226.690197][ T6691] [ 226.690202][ T6691] dump_stack_lvl+0x100/0x190 [ 226.690227][ T6691] should_fail_ex.cold+0x5/0xa [ 226.690250][ T6691] ? prepare_alloc_pages+0x16d/0x5b0 [ 226.690280][ T6691] should_fail_alloc_page+0xeb/0x140 [ 226.690309][ T6691] prepare_alloc_pages+0x1f0/0x5b0 [ 226.690329][ T6691] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.690342][ T6691] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 226.690376][ T6691] ? unwind_get_return_address+0x59/0xa0 [ 226.690406][ T6691] ? arch_stack_walk+0xa6/0xf0 [ 226.690447][ T6691] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 226.690468][ T6691] ? __pfx_stack_trace_save+0x10/0x10 [ 226.690479][ T6691] ? stack_depot_save_flags+0x27/0x9f0 [ 226.690494][ T6691] ? __pfx_debug_object_active_state+0x10/0x10 [ 226.690511][ T6691] ? kasan_save_stack+0x3f/0x50 [ 226.690526][ T6691] ? kasan_save_stack+0x30/0x50 [ 226.690547][ T6691] ? kasan_save_track+0x14/0x30 [ 226.690570][ T6691] ? __kasan_slab_alloc+0x89/0x90 [ 226.690593][ T6691] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 226.690613][ T6691] ? __pmd_alloc+0xbf/0x950 [ 226.690627][ T6691] ? __handle_mm_fault+0xa9d/0x2f60 [ 226.690642][ T6691] ? handle_mm_fault+0x363/0xa20 [ 226.690656][ T6691] ? do_user_addr_fault+0x745/0x12f0 [ 226.690671][ T6691] ? exc_page_fault+0x6f/0xd0 [ 226.690697][ T6691] ? asm_exc_page_fault+0x26/0x30 [ 226.690718][ T6691] ? strncpy_from_user+0xfd/0x2d0 [ 226.690754][ T6691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.690772][ T6691] ? policy_nodemask+0xed/0x4f0 [ 226.690789][ T6691] alloc_pages_mpol+0x201/0x550 [ 226.690805][ T6691] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 226.690831][ T6691] alloc_pages_noprof+0x1a/0x160 [ 226.690861][ T6691] pte_alloc_one+0x1c/0x3d0 [ 226.690890][ T6691] do_fault+0x960/0x1830 [ 226.690911][ T6691] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 226.690929][ T6691] ? __pfx_do_fault+0x10/0x10 [ 226.690944][ T6691] ? _raw_spin_unlock+0x28/0x50 [ 226.690959][ T6691] ? __pmd_alloc+0x3fb/0x950 [ 226.690982][ T6691] __handle_mm_fault+0x150b/0x2f60 [ 226.691019][ T6691] ? __pfx___handle_mm_fault+0x10/0x10 [ 226.691045][ T6691] ? __pfx_mt_find+0x10/0x10 [ 226.691068][ T6691] ? find_vma+0xbf/0x140 [ 226.691080][ T6691] ? __pfx_find_vma+0x10/0x10 [ 226.691094][ T6691] handle_mm_fault+0x363/0xa20 [ 226.691117][ T6691] do_user_addr_fault+0x745/0x12f0 [ 226.691153][ T6691] exc_page_fault+0x6f/0xd0 [ 226.691182][ T6691] asm_exc_page_fault+0x26/0x30 [ 226.691199][ T6691] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 226.691214][ T6691] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 72 be ab fc 48 83 fd 07 0f 86 bb 00 00 00 e8 c3 c3 ab fc <4d> 8b 24 1e e8 ba c3 ab fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 226.691224][ T6691] RSP: 0018:ffffc9000483fe68 EFLAGS: 00050283 [ 226.691234][ T6691] RAX: 0000000000000020 RBX: 0000000000000000 RCX: ffffc9000e812000 [ 226.691241][ T6691] RDX: 0000000000080000 RSI: ffffffff85605ecd RDI: ffff88802dad2580 [ 226.691249][ T6691] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 226.691255][ T6691] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 226.691266][ T6691] R13: ffff88802d438c18 R14: 0000000000000000 R15: 00000000000000a8 [ 226.691288][ T6691] ? strncpy_from_user+0xfd/0x2d0 [ 226.691315][ T6691] ? strncpy_from_user+0xfd/0x2d0 [ 226.691341][ T6691] do_getname+0x78/0x390 [ 226.691369][ T6691] __x64_sys_mkdirat+0x78/0xc0 [ 226.691386][ T6691] do_syscall_64+0x123/0x790 [ 226.691409][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.691429][ T6691] RIP: 0033:0x7f45f279e159 [ 226.691447][ T6691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.691464][ T6691] RSP: 002b:00007f45f371d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 226.691482][ T6691] RAX: ffffffffffffffda RBX: 00007f45f2a26090 RCX: 00007f45f279e159 [ 226.691495][ T6691] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffffffffffffff [ 226.691503][ T6691] RBP: 00007f45f283506b R08: 0000000000000000 R09: 0000000000000000 [ 226.691511][ T6691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.691517][ T6691] R13: 00007f45f2a26128 R14: 00007f45f2a26090 R15: 00007ffe518ff678 [ 226.691533][ T6691] [ 226.832551][ T31] audit: type=1400 audit(1790098584.524:499): avc: denied { write } for pid=6678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.057533][ T31] audit: type=1400 audit(1790098584.744:500): avc: denied { write } for pid=6695 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.212176][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212209][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212352][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212376][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212399][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212421][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212442][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x2 [ 227.212464][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212486][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.212508][ T5788] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 227.321620][ T5788] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 227.498697][ T6701] overlayfs: failed to clone lowerpath [ 228.035030][ T6707] o2cb: Local heartbeat has not been started. [ 228.035098][ T6707] o2cb: Cluster check failed. Fix errors before retrying. [ 228.035231][ T6707] (syz.1.204,6707,0):user_dlm_register:674 ERROR: status = -22 [ 228.035277][ T6707] (syz.1.204,6707,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 228.737288][ T31] audit: type=1400 audit(1790098585.724:501): avc: denied { write } for pid=6704 comm="syz.1.204" name="/" dev="ocfs2_dlmfs" ino=11977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.016884][ T31] audit: type=1400 audit(1790098586.714:502): avc: denied { append } for pid=6702 comm="syz.4.206" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.070499][ T6710] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 229.115367][ T5788] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 230.336055][ T30] usb 1-1: USB disconnect, device number 3 [ 232.122198][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.288212][ T31] audit: type=1400 audit(1790098589.984:503): avc: denied { bind } for pid=6727 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.316897][ T30] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 232.320755][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.320785][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.354687][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.354714][ T30] usb 1-1: Product: syz [ 232.354730][ T30] usb 1-1: Manufacturer: syz [ 232.354745][ T30] usb 1-1: SerialNumber: syz [ 232.413548][ T30] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 232.486721][ T30] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 232.486721][ T30] Please send a copy of this message to and [ 232.617486][ T31] audit: type=1400 audit(1790098590.314:504): avc: denied { connect } for pid=6727 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.721584][ T31] audit: type=1400 audit(1790098590.384:505): avc: denied { write } for pid=6727 comm="syz.4.212" path="socket:[12388]" dev="sockfs" ino=12388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.782280][ T31] audit: type=1400 audit(1790098590.484:506): avc: denied { read } for pid=6731 comm="syz.3.214" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 232.782339][ T31] audit: type=1400 audit(1790098590.484:507): avc: denied { open } for pid=6731 comm="syz.3.214" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 232.834045][ T31] audit: type=1400 audit(1790098590.534:508): avc: denied { ioctl } for pid=6731 comm="syz.3.214" path="/dev/usbmon9" dev="devtmpfs" ino=742 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 232.885493][ T31] audit: type=1400 audit(1790098590.584:509): avc: denied { ioctl } for pid=6731 comm="syz.3.214" path="socket:[12006]" dev="sockfs" ino=12006 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.920221][ T31] audit: type=1400 audit(1790098590.624:510): avc: denied { bind } for pid=6731 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.947847][ T31] audit: type=1400 audit(1790098590.644:511): avc: denied { connect } for pid=6731 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.739203][ T30] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 235.810671][ T30] usb 1-1: USB disconnect, device number 4 [ 241.627872][ T6783] serio: Serial port ptm0 [ 241.784721][ T6787] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 247.161089][ T6807] netlink: 'syz.2.227': attribute type 15 has an invalid length. [ 247.161191][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 247.473833][ T5709] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 247.896526][ T6813] jffs2: notice: (6813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.980020][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 247.984230][ T5709] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.083353][ T5709] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 248.083384][ T5709] usb 1-1: config 0 has no interface number 0 [ 248.186033][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.186061][ T5709] usb 1-1: Product: syz [ 248.186077][ T5709] usb 1-1: Manufacturer: syz [ 248.186092][ T5709] usb 1-1: SerialNumber: syz [ 248.223769][ T5724] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 248.385311][ T5724] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 248.404417][ T5724] usb 4-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 248.436746][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.436826][ T5724] usb 4-1: Product: syz [ 248.436904][ T5724] usb 4-1: Manufacturer: syz [ 248.436920][ T5724] usb 4-1: SerialNumber: syz [ 248.489320][ T5709] usb 1-1: config 0 descriptor?? [ 248.814091][ T5724] usb-storage 4-1:1.0: USB Mass Storage device detected [ 248.883032][ T5709] usb 1-1: can't set config #0, error -71 [ 249.174986][ T5709] usb 1-1: USB disconnect, device number 5 [ 249.195338][ T5724] scsi host1: usb-storage 4-1:1.0 [ 250.741838][ T31] audit: type=1400 audit(1790098608.414:512): avc: denied { mounton } for pid=6821 comm="syz.0.232" path="/50/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 251.419826][ T5709] usb 4-1: USB disconnect, device number 6 [ 252.784982][ C0] Unknown status report in ack skb [ 252.886466][ T6830] FAULT_INJECTION: forcing a failure. [ 252.886466][ T6830] name fail_futex, interval 1, probability 0, space 0, times 1 [ 252.886493][ T6830] CPU: 0 UID: 0 PID: 6830 Comm: syz.1.231 Not tainted syzkaller #0 PREEMPT(full) [ 252.886508][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 252.886516][ T6830] Call Trace: [ 252.886521][ T6830] [ 252.886527][ T6830] dump_stack_lvl+0x100/0x190 [ 252.886550][ T6830] should_fail_ex.cold+0x5/0xa [ 252.886569][ T6830] get_futex_key+0x1d0/0x14f0 [ 252.886587][ T6830] ? __pfx_get_futex_key+0x10/0x10 [ 252.886607][ T6830] futex_wake+0xf4/0x5e0 [ 252.886622][ T6830] ? __pfx_futex_wake+0x10/0x10 [ 252.886633][ T6830] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 252.886655][ T6830] do_futex+0x2b2/0x440 [ 252.886671][ T6830] ? __pfx_do_futex+0x10/0x10 [ 252.886686][ T6830] ? __pfx___might_resched+0x10/0x10 [ 252.886698][ T6830] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 252.886720][ T6830] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.886739][ T6830] __x64_sys_futex+0x34f/0x4d0 [ 252.886758][ T6830] ? __pfx___x64_sys_futex+0x10/0x10 [ 252.886780][ T6830] do_syscall_64+0x123/0x790 [ 252.886799][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.886812][ T6830] RIP: 0033:0x7f45f279e159 [ 252.886822][ T6830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.886833][ T6830] RSP: 002b:00007f45f373e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 252.886844][ T6830] RAX: ffffffffffffffda RBX: 00007f45f2a25fa8 RCX: 00007f45f279e159 [ 252.886852][ T6830] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f45f2a25fac [ 252.886859][ T6830] RBP: 00007f45f2a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 252.886866][ T6830] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 252.886873][ T6830] R13: 00007f45f2a26038 R14: 00007ffe518ff590 R15: 00007ffe518ff678 [ 252.886889][ T6830] [ 255.604934][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.604984][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.398526][ T31] audit: type=1400 audit(1790098615.094:513): avc: denied { open } for pid=6857 comm="syz.0.250" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 257.592328][ T6863] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 258.478481][ T31] audit: type=1400 audit(1790098616.174:514): avc: denied { accept } for pid=6871 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 258.507924][ T6193] IPVS: starting estimator thread 0... [ 258.541250][ T31] audit: type=1400 audit(1790098616.234:515): avc: denied { read } for pid=6864 comm="syz.4.244" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 258.541302][ T31] audit: type=1400 audit(1790098616.234:516): avc: denied { open } for pid=6864 comm="syz.4.244" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 258.557093][ T31] audit: type=1400 audit(1790098616.254:517): avc: denied { read } for pid=6864 comm="syz.4.244" path="socket:[12199]" dev="sockfs" ino=12199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.594290][ T6873] IPVS: using max 38 ests per chain, 91200 per kthread [ 259.213987][ T6877] Cannot find add_set index 2 as target [ 260.028038][ T6881] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 262.619216][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 262.715933][ T31] audit: type=1400 audit(1790098620.404:518): avc: denied { read } for pid=6887 comm="syz.1.249" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 262.717557][ T31] audit: type=1400 audit(1790098620.414:519): avc: denied { open } for pid=6887 comm="syz.1.249" path="/51/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 262.804726][ T31] audit: type=1400 audit(1790098620.444:520): avc: denied { ioctl } for pid=6887 comm="syz.1.249" path="/51/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 262.935334][ T31] audit: type=1400 audit(1790098620.624:521): avc: denied { write } for pid=6894 comm="syz.4.251" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 263.276661][ T6901] block nbd4: NBD_DISCONNECT [ 263.280301][ T31] audit: type=1400 audit(1790098620.924:522): avc: denied { create } for pid=6894 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.280658][ T31] audit: type=1400 audit(1790098620.934:523): avc: denied { connect } for pid=6894 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.280974][ T31] audit: type=1400 audit(1790098620.944:524): avc: denied { name_bind } for pid=6894 comm="syz.4.251" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 263.281417][ T31] audit: type=1400 audit(1790098620.954:525): avc: denied { append } for pid=6894 comm="syz.4.251" name="nbd4" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.975825][ T6915] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 265.975851][ T6915] netlink: 59 bytes leftover after parsing attributes in process `syz.1.256'. [ 265.975866][ T6915] netlink: 59 bytes leftover after parsing attributes in process `syz.1.256'. [ 269.188579][ T6934] Cannot find add_set index 2 as target [ 269.999653][ T5604] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 269.999698][ T5604] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 273.426545][ T31] audit: type=1400 audit(1790098631.124:526): avc: denied { connect } for pid=6959 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.438442][ T31] audit: type=1400 audit(1790098631.134:527): avc: denied { bind } for pid=6959 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.325146][ T6978] Cannot find add_set index 2 as target [ 277.955298][ T6976] random: crng reseeded on system resumption [ 278.087379][ T31] audit: type=1400 audit(1790098635.784:528): avc: denied { ioctl } for pid=6968 comm="syz.1.269" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 279.044492][ T31] audit: type=1400 audit(1790098636.724:529): avc: denied { ioctl } for pid=6987 comm="syz.1.276" path="socket:[13408]" dev="sockfs" ino=13408 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.763820][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 279.769820][ T6995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6995 comm=syz.1.276 [ 279.974285][ T31] audit: type=1400 audit(1790098637.554:530): avc: denied { setopt } for pid=6982 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.974343][ T31] audit: type=1400 audit(1790098637.574:531): avc: denied { read } for pid=6982 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.561077][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 286.044218][ T31] audit: type=1400 audit(1790098643.694:532): avc: denied { accept } for pid=7014 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.056192][ T31] audit: type=1400 audit(1790098644.254:533): avc: denied { listen } for pid=7021 comm="syz.0.283" lport=54274 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.056246][ T31] audit: type=1400 audit(1790098644.274:534): avc: denied { write } for pid=7021 comm="syz.0.283" path="socket:[13444]" dev="sockfs" ino=13444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 287.056282][ T31] audit: type=1400 audit(1790098644.294:535): avc: denied { setopt } for pid=7021 comm="syz.0.283" lport=54274 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 287.703827][ T7029] Cannot find add_set index 2 as target [ 289.124258][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 289.923917][ T31] audit: type=1400 audit(1790098647.354:536): avc: denied { write } for pid=7037 comm="syz.3.274" name="functions" dev="configfs" ino=9084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.058938][ T7042] configfs-gadget.g1 gadget.0: HOST MAC 2a:88:73:70:59:00 [ 290.058962][ T7042] configfs-gadget.g1 gadget.0: MAC de:0e:e4:f7:e2:d4 [ 290.944618][ T1009] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 292.243992][ T1009] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 292.244708][ T1009] usb 1-1: Dual-Role OTG device on HNP port [ 292.244998][ T1009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.395874][ T1009] gspca_main: spca501-2.14.0 probing 0000:0000 [ 292.397532][ T1009] gspca_spca501: reg write: error -32 [ 292.397548][ T1009] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 292.397641][ T1009] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 292.401964][ T1009] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.748802][ T1009] cdc_ncm 1-1:1.2: MAC-Address: 2a:88:73:70:59:00 [ 293.818660][ T1009] cdc_ncm 1-1:1.2 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 2a:88:73:70:59:00 [ 293.956039][ T7062] netlink: 14 bytes leftover after parsing attributes in process `syz.2.290'. [ 294.014041][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 294.165169][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 294.166267][ T30] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 294.167394][ T30] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 294.167411][ T30] usb 2-1: config 0 has no interface number 0 [ 294.167433][ T30] usb 2-1: config 0 interface 12 has no altsetting 0 [ 294.170099][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.170115][ T30] usb 2-1: Product: syz [ 294.170124][ T30] usb 2-1: Manufacturer: syz [ 294.170132][ T30] usb 2-1: SerialNumber: syz [ 294.180456][ T30] usb 2-1: config 0 descriptor?? [ 294.313225][ T5586] Process accounting resumed [ 294.441241][ T7081] netlink: 1320 bytes leftover after parsing attributes in process `syz.3.294'. [ 294.470159][ T31] audit: type=1400 audit(1790098652.164:537): avc: denied { write } for pid=7067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.840502][ T31] audit: type=1400 audit(1790098652.534:538): avc: denied { create } for pid=7069 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 294.868310][ T31] audit: type=1400 audit(1790098652.564:539): avc: denied { write } for pid=7069 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 294.955580][ T7091] Invalid ELF header magic: != ELF [ 295.545566][ T31] audit: type=1400 audit(1790098652.644:540): avc: denied { module_load } for pid=7087 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 295.589257][ T30] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 295.589315][ T30] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 295.589333][ T30] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 295.589405][ T30] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 295.629643][ T30] usb 2-1: USB disconnect, device number 5 [ 295.802811][ T31] audit: type=1400 audit(1790098653.494:541): avc: denied { write } for pid=7089 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.721649][ T31] audit: type=1400 audit(1790098656.374:542): avc: denied { write } for pid=7107 comm="syz.0.292" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 298.901632][ T31] audit: type=1400 audit(1790098656.374:543): avc: denied { open } for pid=7107 comm="syz.0.292" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 298.902143][ T31] audit: type=1400 audit(1790098656.564:544): avc: denied { mount } for pid=7114 comm="syz.1.301" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 300.595963][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'. [ 300.711494][ T31] audit: type=1800 audit(1790098657.104:545): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.301" name="/" dev="fuse" ino=1 res=0 errno=0 [ 300.711901][ T31] audit: type=1400 audit(1790098658.304:546): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 301.606687][ T5599] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 301.609077][ T5599] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 301.832546][ T31] audit: type=1400 audit(1790098659.524:547): avc: denied { write } for pid=7102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.883740][ T5723] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.035094][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 302.037295][ T5723] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 302.038783][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.038818][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.042642][ T31] audit: type=1400 audit(1790098659.734:548): avc: denied { write } for pid=7144 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.066774][ T5723] usb 2-1: config 0 descriptor?? [ 302.428843][ T31] audit: type=1400 audit(1790098660.114:549): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 303.489189][ T31] audit: type=1400 audit(1790098661.184:550): avc: denied { ioctl } for pid=7136 comm="syz.1.304" path="socket:[13641]" dev="sockfs" ino=13641 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.611897][ T5723] usbhid 2-1:0.0: can't add hid device: -71 [ 303.611991][ T5723] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.494768][ T5723] usb 2-1: USB disconnect, device number 6 [ 307.010048][ T31] audit: type=1400 audit(1790098664.704:551): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 307.433864][ T31] audit: type=1400 audit(1790098665.114:552): avc: denied { bind } for pid=7176 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 307.446961][ T31] audit: type=1400 audit(1790098665.134:553): avc: denied { accept } for pid=7176 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 308.562811][ T31] audit: type=1400 audit(1790098665.784:554): avc: denied { read write } for pid=7184 comm="syz.3.314" name="sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.601357][ T31] audit: type=1400 audit(1790098665.784:555): avc: denied { open } for pid=7184 comm="syz.3.314" path="/dev/sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.638282][ T31] audit: type=1400 audit(1790098665.954:556): avc: denied { ioctl } for pid=7184 comm="syz.3.314" path="/dev/sg0" dev="devtmpfs" ino=1087 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.920262][ T31] audit: type=1400 audit(1790098666.614:557): avc: denied { write } for pid=7166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.562184][ T31] audit: type=1400 audit(1790098667.254:558): avc: denied { write } for pid=7190 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.796775][ T31] audit: type=1400 audit(1790098667.494:559): avc: denied { write } for pid=7198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.853354][ T5860] IPVS: starting estimator thread 0... [ 312.038873][ T7215] overlayfs: failed to clone lowerpath [ 312.042881][ T7213] IPVS: using max 35 ests per chain, 84000 per kthread [ 313.260670][ T7222] netlink: 356 bytes leftover after parsing attributes in process `syz.1.321'. [ 315.887004][ T7235] Cannot find add_set index 2 as target [ 316.045337][ T31] audit: type=1400 audit(1790098673.744:560): avc: denied { write } for pid=7240 comm="syz.0.313" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 316.046548][ T31] audit: type=1400 audit(1790098673.744:561): avc: denied { open } for pid=7240 comm="syz.0.313" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 316.328092][ T7244] 0x000000000006-0x000000020000 : "" [ 316.357956][ T31] audit: type=1400 audit(1790098674.024:562): avc: denied { ioctl } for pid=7240 comm="syz.0.313" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 316.662890][ T7244] ftl_cs: FTL header corrupt! [ 317.012609][ T31] audit: type=1400 audit(1790098674.704:563): avc: denied { write } for pid=7224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.049311][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.049363][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.766356][ T31] audit: type=1400 audit(1790098675.454:564): avc: denied { mounton } for pid=7247 comm="syz.4.326" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 317.832989][ T31] audit: type=1400 audit(1790098675.524:565): avc: denied { mount } for pid=7252 comm="syz.0.327" name="/" dev="ramfs" ino=13784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 317.855435][ T31] audit: type=1400 audit(1790098675.544:566): avc: denied { firmware_load } for pid=7247 comm="syz.4.326" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 317.858310][ T7250] XFS (nullb0): Invalid superblock magic number [ 317.951381][ T7253] jffs2: notice: (7253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.050847][ T7254] syz.4.326 (7254) used greatest stack depth: 19880 bytes left [ 318.199417][ T31] audit: type=1400 audit(1790098675.894:568): avc: denied { write } for pid=7252 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 318.250337][ T31] audit: type=1400 audit(1790098675.704:567): avc: denied { write } for pid=7252 comm="syz.0.327" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.255726][ T31] audit: type=1400 audit(1790098675.944:569): avc: denied { add_name } for pid=7252 comm="syz.0.327" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.262216][ T7267] 9pnet_fd: Insufficient options for proto=fd [ 318.994777][ T7271] Cannot find add_set index 2 as target [ 324.313304][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 324.313322][ T31] audit: type=1400 audit(1790098682.004:573): avc: denied { connect } for pid=7292 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.582919][ T7320] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 327.693216][ T7321] nbd: must specify a device to reconfigure [ 328.390372][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.411244][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.482213][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.518799][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.142080][ T31] audit: type=1400 audit(1790098687.834:574): avc: denied { write } for pid=7311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.170508][ T31] audit: type=1400 audit(1790098687.864:575): avc: denied { write } for pid=7323 comm="syz.4.329" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.509027][ T31] audit: type=1400 audit(1790098688.204:576): avc: denied { write } for pid=7339 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.626330][ T31] audit: type=1400 audit(1790098688.324:577): avc: denied { name_bind } for pid=7341 comm="syz.2.337" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 330.756313][ T7345] mmap: syz.2.337 (7345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 335.167962][ T7375] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 338.503589][ T7392] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 338.503589][ T7392] [ 338.503825][ T7392] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 338.503880][ T7392] CIFS: Attempting to mount //127.0.0.1/share [ 341.214342][ T7392] CIFS: VFS: Error connecting to socket. Aborting operation. [ 341.214390][ T7392] CIFS: VFS: cifs_mount failed w/return code = -4 [ 341.459581][ T7400] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 341.459581][ T7400] program syz.0.343 not setting count and/or reply_len properly [ 341.520635][ T31] audit: type=1400 audit(1790098699.214:578): avc: denied { read } for pid=7395 comm="syz.2.352" path="socket:[14521]" dev="sockfs" ino=14521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.532383][ T7407] netlink: 296 bytes leftover after parsing attributes in process `syz.3.353'. [ 341.553677][ T31] audit: type=1400 audit(1790098699.224:579): avc: denied { nlmsg_read } for pid=7406 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.659399][ T7407] ip_tables: iptables: counters copy to user failed while replacing table [ 341.773749][ T31] audit: type=1400 audit(1790098699.474:580): avc: denied { write } for pid=7381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.808484][ T7407] ip_tables: iptables: counters copy to user failed while replacing table [ 341.914536][ T31] audit: type=1400 audit(1790098699.614:581): avc: denied { sqpoll } for pid=7406 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 342.453153][ T7419] FAULT_INJECTION: forcing a failure. [ 342.453153][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 342.453211][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) [ 342.453233][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 342.453244][ T7419] Call Trace: [ 342.453250][ T7419] [ 342.453259][ T7419] dump_stack_lvl+0x100/0x190 [ 342.453297][ T7419] should_fail_ex.cold+0x5/0xa [ 342.453324][ T7419] should_failslab+0xc2/0x120 [ 342.453351][ T7419] __kmalloc_noprof+0xfc/0x840 [ 342.453369][ T7419] ? rcu_is_watching+0x13/0xc0 [ 342.453398][ T7419] ? tomoyo_realpath_from_path+0xb6/0x690 [ 342.453431][ T7419] tomoyo_realpath_from_path+0xb6/0x690 [ 342.453464][ T7419] tomoyo_check_open_permission+0x2af/0x3c0 [ 342.453488][ T7419] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 342.453508][ T7419] ? do_syscall_64+0x123/0x790 [ 342.453547][ T7419] ? hook_file_open+0x248/0x8e0 [ 342.453591][ T7419] ? path_get+0x61/0x80 [ 342.453620][ T7419] tomoyo_file_open+0x6b/0x90 [ 342.453650][ T7419] security_file_open+0xb5/0x1e0 [ 342.453676][ T7419] do_dentry_open+0x588/0x14d0 [ 342.453708][ T7419] vfs_open+0x82/0x3f0 [ 342.453737][ T7419] path_openat+0x19fa/0x2440 [ 342.453768][ T7419] ? __pfx_path_openat+0x10/0x10 [ 342.453802][ T7419] do_file_open+0x20e/0x430 [ 342.453840][ T7419] ? __pfx_do_file_open+0x10/0x10 [ 342.453891][ T7419] ? alloc_fd+0x471/0x7a0 [ 342.453921][ T7419] ? do_getname+0x191/0x390 [ 342.453954][ T7419] do_sys_openat2+0x10f/0x1e0 [ 342.453982][ T7419] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.454021][ T7419] __x64_sys_open+0xfe/0x1d0 [ 342.454049][ T7419] ? __pfx___x64_sys_open+0x10/0x10 [ 342.454088][ T7419] do_syscall_64+0x123/0x790 [ 342.454120][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.454142][ T7419] RIP: 0033:0x7f470cf9e159 [ 342.454161][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.454179][ T7419] RSP: 002b:00007f470de43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 342.454291][ T7419] RAX: ffffffffffffffda RBX: 00007f470d225fa0 RCX: 00007f470cf9e159 [ 342.454307][ T7419] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 342.454320][ T7419] RBP: 00007f470d03506b R08: 0000000000000000 R09: 0000000000000000 [ 342.454334][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.454345][ T7419] R13: 00007f470d226038 R14: 00007f470d225fa0 R15: 00007ffe784e5388 [ 342.454375][ T7419] [ 343.094081][ T31] audit: type=1400 audit(1790098700.764:582): avc: denied { write } for pid=7416 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.696700][ T7419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 346.394857][ T31] audit: type=1400 audit(1790098704.094:583): avc: denied { write } for pid=7428 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.097458][ T31] audit: type=1400 audit(1790098704.684:584): avc: denied { ioctl } for pid=7427 comm="syz.1.357" path="socket:[14561]" dev="sockfs" ino=14561 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.154617][ T31] audit: type=1400 audit(1790098711.694:585): avc: denied { lock } for pid=7455 comm="syz.4.364" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 355.548780][ T7469] netlink: 144 bytes leftover after parsing attributes in process `syz.3.366'. [ 357.177881][ T31] audit: type=1400 audit(1790098714.874:586): avc: denied { write } for pid=7435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.625574][ T31] audit: type=1800 audit(1790098715.254:587): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.368" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 357.963713][ T31] audit: type=1400 audit(1790098715.654:588): avc: denied { write } for pid=7478 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.213277][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.225513][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.226447][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.227564][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.228294][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.391907][ T7470] Cannot find add_set index 2 as target [ 358.471853][ T7487] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 359.561803][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 359.603798][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 359.604137][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 359.605078][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 359.612398][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 360.222744][ T7506] Cannot find add_set index 2 as target [ 361.229700][ T5599] Bluetooth: hci5: command tx timeout [ 361.919511][ T31] audit: type=1400 audit(1790098719.614:589): avc: denied { write } for pid=7488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.347616][ T5599] Bluetooth: hci5: command tx timeout [ 363.706156][ T31] audit: type=1400 audit(1790098721.394:590): avc: denied { write } for pid=7524 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.925541][ T31] audit: type=1400 audit(1790098721.624:591): avc: denied { create } for pid=7513 comm="syz.4.373" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 363.987642][ T7414] syz_tun (unregistering): left allmulticast mode [ 363.991364][ T7414] bridge0: port 3(syz_tun) entered disabled state [ 364.449855][ T7546] netlink: 144 bytes leftover after parsing attributes in process `syz.3.370'. [ 366.873803][ T5599] Bluetooth: hci5: command tx timeout [ 366.882160][ T7547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.885246][ T31] audit: type=1400 audit(1790098724.574:592): avc: denied { create } for pid=7539 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.885282][ T31] audit: type=1400 audit(1790098724.574:593): avc: denied { setopt } for pid=7539 comm="syz.1.372" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.885307][ T31] audit: type=1400 audit(1790098724.574:594): avc: denied { connect } for pid=7539 comm="syz.1.372" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.885341][ T31] audit: type=1400 audit(1790098724.584:595): avc: denied { write } for pid=7539 comm="syz.1.372" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 367.903748][ T31] audit: type=1400 audit(1790098725.594:596): avc: denied { unlink } for pid=5601 comm="syz-executor" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 370.146668][ T5604] Bluetooth: hci5: command tx timeout [ 370.340140][ T7577] netlink: 144 bytes leftover after parsing attributes in process `syz.2.379'. [ 371.205567][ T7577] Cannot find add_set index 2 as target [ 371.578278][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.578369][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.578576][ T7482] bridge_slave_0: entered allmulticast mode [ 371.580480][ T7482] bridge_slave_0: entered promiscuous mode [ 371.658796][ T7482] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.661305][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.685695][ T7482] bridge_slave_1: entered allmulticast mode [ 371.724957][ T31] audit: type=1400 audit(1790098729.414:597): avc: denied { create } for pid=7580 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.730542][ T7482] bridge_slave_1: entered promiscuous mode [ 371.744197][ T7582] CIFS: Attempting to mount //127.0.0.1/share [ 371.753927][ T31] audit: type=1400 audit(1790098729.434:598): avc: denied { setopt } for pid=7580 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.753972][ T31] audit: type=1400 audit(1790098729.434:599): avc: denied { write } for pid=7580 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.754007][ T31] audit: type=1400 audit(1790098729.434:600): avc: denied { shutdown } for pid=7580 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.450662][ T7482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.470954][ T7482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.732502][ T7482] team0: Port device team_slave_0 added [ 372.876151][ T7582] CIFS: VFS: Error connecting to socket. Aborting operation. [ 372.876196][ T7582] CIFS: VFS: cifs_mount failed w/return code = -4 [ 372.902465][ T7482] team0: Port device team_slave_1 added [ 373.040302][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.040340][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.040363][ T7482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.157423][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.157441][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.157465][ T7482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.467196][ T7482] hsr_slave_0: entered promiscuous mode [ 373.469032][ T7482] hsr_slave_1: entered promiscuous mode [ 373.471418][ T7482] debugfs: 'hsr0' already exists in 'hsr' [ 373.471444][ T7482] Cannot create hsr debugfs directory [ 373.515087][ T31] audit: type=1400 audit(1790098731.214:601): avc: denied { ioctl } for pid=7584 comm="syz.3.383" path="/66/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=14824 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 375.794462][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 376.228633][ T9] usb 4-1: device descriptor read/all, error -71 [ 376.563046][ T31] audit: type=1400 audit(1790098734.254:602): avc: denied { bind } for pid=7601 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.594422][ T31] audit: type=1400 audit(1790098734.284:603): avc: denied { connect } for pid=7601 comm="syz.1.380" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.696154][ T7602] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 376.696438][ T7602] block device autoloading is deprecated and will be removed. [ 376.697630][ T7609] tipc: Failed to obtain node identity [ 376.697660][ T7609] tipc: Enabling of bearer rejected, failed to enable media [ 377.096072][ T1043] bridge_slave_1: left allmulticast mode [ 377.097908][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.121186][ T1043] bridge_slave_0: left allmulticast mode [ 377.130703][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.412304][ T7615] overlayfs: missing 'lowerdir' [ 377.500810][ T7616] xt_HMARK: spi-set and port-set can't be combined [ 378.490344][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.490385][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.729870][ T7625] netlink: 144 bytes leftover after parsing attributes in process `syz.3.390'. [ 379.216567][ T7627] Cannot find add_set index 2 as target [ 381.944725][ T1043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.442877][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.477639][ T1043] bond0 (unregistering): Released all slaves [ 383.619934][ T31] audit: type=1400 audit(1790098741.314:604): avc: denied { write } for pid=7617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.731517][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.732571][ T7634] bridge0: port 3(bond1) entered blocking state [ 383.732628][ T7634] bridge0: port 3(bond1) entered disabled state [ 383.732724][ T7634] bond1: entered allmulticast mode [ 383.734303][ T7634] bond1: entered promiscuous mode [ 383.734763][ T7634] bridge0: port 3(bond1) entered blocking state [ 383.736055][ T7634] bridge0: port 3(bond1) entered forwarding state [ 383.798543][ T1111] bridge0: port 3(bond1) entered disabled state [ 383.824538][ T31] audit: type=1400 audit(1790098741.524:605): avc: denied { write } for pid=7645 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.121619][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 384.760843][ T31] audit: type=1400 audit(1790098742.454:606): avc: denied { mount } for pid=7648 comm="syz.2.395" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 384.860216][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.871968][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.944972][ T31] audit: type=1400 audit(17 ** replaying previous printk message ** [ 385.944972][ T31] audit: type=1400 audit(1790098743.644:607): avc: denied { write } for pid=7669 comm="syz.1.393" name="functions" dev="configfs" ino=9084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.955099][ T31] audit: type=1400 audit(1790098743.654:608): avc: denied { write } for pid=7669 comm="syz.1.393" name="header" dev="configfs" ino=15255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.959211][ T7670] [ 386.012082][ T7670] ====================================================== [ 386.012683][ T31] audit: type=1400 audit(1790098743.654:609): avc: denied { write } for pid=7669 comm="syz.1.393" name="h" dev="configfs" ino=15265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.012720][ T31] audit: type=1400 audit(1790098743.654:610): avc: denied { write } for pid=7669 comm="syz.1.393" name="h" dev="configfs" ino=15265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.063679][ T7670] WARNING: possible circular locking dependency detected [ 386.070711][ T7670] syzkaller #0 Tainted: G L [ 386.076763][ T7670] ------------------------------------------------------ [ 386.084118][ T7670] syz.1.393/7670 is trying to acquire lock: [ 386.089996][ T7670] ffffffff903fde68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.101213][ T7670] [ 386.101213][ T7670] but task is already holding lock: [ 386.108574][ T7670] ffff8880430d0f80 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 386.119545][ T7670] [ 386.119545][ T7670] which lock already depends on the new lock. [ 386.119545][ T7670] [ 386.129942][ T7670] [ 386.129942][ T7670] the existing dependency chain (in reverse order) is: [ 386.138946][ T7670] [ 386.138946][ T7670] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 386.147653][ T7670] lock_acquire+0x1d1/0x380 [ 386.152678][ T7670] down_write+0x8b/0x1f0 [ 386.157432][ T7670] configfs_depend_item_unlocked+0xf3/0x6a0 [ 386.163850][ T7670] usbg_make_tpg+0x251/0x610 [ 386.169056][ T7670] target_fabric_make_tpg+0xab/0x8c0 [ 386.174879][ T7670] configfs_mkdir+0x525/0xd40 [ 386.180165][ T7670] vfs_mkdir+0x364/0x850 [ 386.184933][ T7670] filename_mkdirat+0x48b/0x5e0 [ 386.190301][ T7670] __x64_sys_mkdirat+0x89/0xc0 [ 386.195576][ T7670] do_syscall_64+0x123/0x790 [ 386.200785][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.208058][ T7670] [ 386.208058][ T7670] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 386.215952][ T7670] lock_acquire+0x1d1/0x380 [ 386.220967][ T7670] __mutex_lock+0x1a4/0x1bd0 [ 386.226073][ T7670] tcm_alloc_inst+0x5f/0x1e0 [ 386.231261][ T7670] try_get_usb_function_instance+0x136/0x1f0 [ 386.238391][ T7670] usb_get_function_instance+0x16/0x70 [ 386.245262][ T7670] function_make+0x18c/0x3f0 [ 386.251203][ T7670] configfs_mkdir+0x525/0xd40 [ 386.257389][ T7670] vfs_mkdir+0x364/0x850 [ 386.263020][ T7670] filename_mkdirat+0x48b/0x5e0 [ 386.268756][ T7670] __x64_sys_mkdirat+0x89/0xc0 [ 386.274327][ T7670] do_syscall_64+0x123/0x790 [ 386.280144][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.286787][ T7670] [ 386.286787][ T7670] -> #1 (func_lock){+.+.}-{4:4}: [ 386.293931][ T7670] lock_acquire+0x1d1/0x380 [ 386.298948][ T7670] __mutex_lock+0x1a4/0x1bd0 [ 386.304603][ T7670] try_get_usb_function_instance+0x26/0x1f0 [ 386.311098][ T7670] usb_get_function_instance+0x16/0x70 [ 386.317263][ T7670] function_make+0x18c/0x3f0 [ 386.322909][ T7670] configfs_mkdir+0x525/0xd40 [ 386.328097][ T7670] vfs_mkdir+0x364/0x850 [ 386.332844][ T7670] filename_mkdirat+0x48b/0x5e0 [ 386.338214][ T7670] __x64_sys_mkdirat+0x89/0xc0 [ 386.343516][ T7670] do_syscall_64+0x123/0x790 [ 386.348805][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.355216][ T7670] [ 386.355216][ T7670] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 386.363494][ T7670] check_prev_add+0xeb/0xe60 [ 386.368606][ T7670] __lock_acquire+0x1528/0x1f40 [ 386.374140][ T7670] lock_acquire+0x1d1/0x380 [ 386.379615][ T7670] __mutex_lock+0x1a4/0x1bd0 [ 386.384734][ T7670] uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.391424][ T7670] configfs_symlink+0x695/0x1340 [ 386.396904][ T7670] vfs_symlink+0x178/0x4d0 [ 386.401842][ T7670] filename_symlinkat+0x2a6/0x560 [ 386.407643][ T7670] __x64_sys_symlinkat+0x9c/0xe0 [ 386.413101][ T7670] do_syscall_64+0x123/0x790 [ 386.418401][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.424849][ T7670] [ 386.424849][ T7670] other info that might help us debug this: [ 386.424849][ T7670] [ 386.435067][ T7670] Chain exists of: [ 386.435067][ T7670] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#26 [ 386.435067][ T7670] [ 386.450001][ T7670] Possible unsafe locking scenario: [ 386.450001][ T7670] [ 386.457436][ T7670] CPU0 CPU1 [ 386.462870][ T7670] ---- ---- [ 386.468216][ T7670] lock(&sb->s_type->i_mutex_key#26); [ 386.473666][ T7670] lock(tpg_instances_lock); [ 386.481022][ T7670] lock(&sb->s_type->i_mutex_key#26); [ 386.489084][ T7670] lock(gadget_subsys.su_mutex); [ 386.494130][ T7670] [ 386.494130][ T7670] *** DEADLOCK *** [ 386.494130][ T7670] [ 386.502468][ T7670] locks held by syz.1.393/7670: 2, last CPU#1: [ 386.508624][ T7670] #0: ffff88801ef2e460 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 386.518296][ T7670] #1: ffff8880430d0f80 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 386.529554][ T7670] [ 386.529554][ T7670] stack backtrace: [ 386.535446][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.1.393 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.546206][ T7670] Tainted: [L]=SOFTLOCKUP [ 386.550697][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 386.561111][ T7670] Call Trace: [ 386.564380][ T7670] [ 386.567295][ T7670] dump_stack_lvl+0x100/0x190 [ 386.571974][ T7670] print_circular_bug.cold+0x178/0x1be [ 386.577436][ T7670] check_noncircular+0x146/0x160 [ 386.582356][ T7670] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 386.588338][ T7670] check_prev_add+0xeb/0xe60 [ 386.593110][ T7670] __lock_acquire+0x1528/0x1f40 [ 386.598036][ T7670] ? kasan_save_track+0x14/0x30 [ 386.603313][ T7670] ? kasan_save_free_info+0x3b/0x70 [ 386.608511][ T7670] lock_acquire+0x1d1/0x380 [ 386.613003][ T7670] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.619325][ T7670] ? __pfx___might_resched+0x10/0x10 [ 386.624608][ T7670] ? audit_inode_permission+0x1ea/0x2a0 [ 386.630279][ T7670] __mutex_lock+0x1a4/0x1bd0 [ 386.634863][ T7670] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.641180][ T7670] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.647517][ T7670] ? __lock_acquire+0x5c0/0x1f40 [ 386.652448][ T7670] ? __pfx___mutex_lock+0x10/0x10 [ 386.657468][ T7670] ? selinux_inode_permission+0x14a/0x1130 [ 386.663829][ T7670] ? __pfx___might_resched+0x10/0x10 [ 386.670417][ T7670] ? make_vfsgid+0xf1/0x140 [ 386.674943][ T7670] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.681633][ T7670] ? security_inode_permission+0xbf/0x250 [ 386.687349][ T7670] uvcg_streaming_header_allow_link+0x7c/0x650 [ 386.693502][ T7670] ? inode_permission+0x374/0x620 [ 386.698633][ T7670] ? mntput_no_expire+0xe7/0x220 [ 386.703583][ T7670] configfs_symlink+0x695/0x1340 [ 386.708529][ T7670] ? __pfx_configfs_symlink+0x10/0x10 [ 386.713903][ T7670] vfs_symlink+0x178/0x4d0 [ 386.718324][ T7670] filename_symlinkat+0x2a6/0x560 [ 386.723355][ T7670] ? __pfx_filename_symlinkat+0x10/0x10 [ 386.728913][ T7670] ? strncpy_from_user+0x19d/0x2d0 [ 386.734028][ T7670] ? do_getname+0x191/0x390 [ 386.738528][ T7670] __x64_sys_symlinkat+0x9c/0xe0 [ 386.743460][ T7670] do_syscall_64+0x123/0x790 [ 386.748057][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.753956][ T7670] RIP: 0033:0x7f45f279e159 [ 386.758374][ T7670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.777992][ T7670] RSP: 002b:00007f45f373e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 386.786416][ T7670] RAX: ffffffffffffffda RBX: 00007f45f2a25fa0 RCX: 00007f45f279e159 [ 386.794389][ T7670] RDX: 00002000000003c0 RSI: ffffffffffffff9c RDI: 0000200000000380 [ 386.802372][ T7670] RBP: 00007f45f283506b R08: 0000000000000000 R09: 0000000000000000 [ 386.810356][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.818336][ T7670] R13: 00007f45f2a26038 R14: 00007f45f2a25fa0 R15: 00007ffe518ff678 [ 386.826307][ T7670] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.007131][ T31] audit: type=1400 audit(1790098744.644:611): avc: denied { write } for pid=7653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.038576][ T1043] team0 (unregistering): Port device team_slave_1 removed [ 387.084589][ T31] audit: type=1400 audit(1790098744.744:612): avc: denied { write } for pid=7669 comm="syz.1.393" name="hs" dev="configfs" ino=15263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.084635][ T31] audit: type=1400 audit(1790098744.764:613): avc: denied { write } for pid=7680 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.087139][ T1043] team0 (unregistering): Port device team_slave_0 removed [ 387.326708][ T7678] dummy0: entered allmulticast mode [ 387.345774][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 387.610038][ T5601] bridge0: port 3(syz_tun) entered disabled state [ 387.625279][ T5601] syz_tun (unregistering): left allmulticast mode [ 387.625304][ T5601] syz_tun (unregistering): left promiscuous mode [ 387.625355][ T5601] bridge0: port 3(syz_tun) entered disabled state [ 387.694634][ T7678] dummy0: left allmulticast mode [ 388.105389][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 388.362099][ T1043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.417341][ T1043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.470235][ T1043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.507409][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 388.626309][ T1043] bridge_slave_1: left allmulticast mode [ 388.626332][ T1043] bridge_slave_1: left promiscuous mode [ 388.626471][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.628374][ T1043] bridge_slave_0: left allmulticast mode [ 388.628397][ T1043] bridge_slave_0: left promiscuous mode [ 388.628537][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.673942][ T1043] bridge_slave_1: left allmulticast mode [ 388.673967][ T1043] bridge_slave_1: left promiscuous mode [ 388.674100][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.675861][ T1043] bridge_slave_0: left allmulticast mode [ 388.675882][ T1043] bridge_slave_0: left promiscuous mode [ 388.676006][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.780570][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 388.780588][ T31] audit: type=1400 audit(1790098746.474:622): avc: denied { write } for pid=7714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.830257][ T1043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.832122][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.833215][ T1043] bond0 (unregistering): Released all slaves [ 388.887623][ T31] audit: type=1400 audit(1790098746.584:623): avc: denied { write } for pid=7725 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.945928][ T1043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.947629][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.950299][ T1043] bond0 (unregistering): Released all slaves [ 388.972754][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 389.180580][ T31] audit: type=1400 audit(1790098746.874:624): avc: denied { write } for pid=7728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.225768][ T1043] hsr_slave_0: left promiscuous mode [ 389.226326][ T1043] hsr_slave_1: left promiscuous mode [ 389.226817][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.227305][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.230109][ T1043] hsr_slave_0: left promiscuous mode [ 389.230534][ T1043] hsr_slave_1: left promiscuous mode [ 389.230938][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.230953][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.231490][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.231505][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.240996][ T1043] veth1_macvtap: left promiscuous mode [ 389.241023][ T1043] veth0_macvtap: left promiscuous mode [ 389.241079][ T1043] veth1_vlan: left promiscuous mode [ 389.241127][ T1043] veth0_vlan: left promiscuous mode [ 389.300810][ T31] audit: type=1400 audit(1790098746.994:625): avc: denied { write } for pid=7739 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.402741][ T1043] team0 (unregistering): Port device team_slave_1 removed [ 389.413116][ T1043] team0 (unregistering): Port device team_slave_0 removed [ 389.506033][ T1043] team0 (unregistering): Port device team_slave_1 removed [ 389.508721][ T1043] team0 (unregistering): Port device team_slave_0 removed [ 389.573268][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 389.750172][ T31] audit: type=1400 audit(1790098747.444:626): avc: denied { write } for pid=7743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.808922][ T31] audit: type=1400 audit(1790098747.504:627): avc: denied { write } for pid=7754 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.892964][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 390.012767][ T1043] IPVS: stop unused estimator thread 0... [ 390.061238][ T1043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.079933][ T31] audit: type=1400 audit(1790098747.784:628): avc: denied { write } for pid=7757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.121995][ T1043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.150542][ T1043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.166074][ T31] audit: type=1400 audit(1790098747.854:629): avc: denied { write } for pid=7768 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.199421][ T1043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.208106][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 390.296508][ T1043] bond1: left allmulticast mode [ 390.296849][ T1043] bond1: left promiscuous mode [ 390.297100][ T1043] bridge0: port 3(bond1) entered disabled state [ 390.298472][ T1043] bridge_slave_1: left allmulticast mode [ 390.298494][ T1043] bridge_slave_1: left promiscuous mode [ 390.298645][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.300248][ T1043] bridge_slave_0: left allmulticast mode [ 390.300269][ T1043] bridge_slave_0: left promiscuous mode [ 390.300373][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.422345][ T1043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.436838][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.437978][ T1043] bond0 (unregistering): Released all slaves [ 390.440491][ T1043] bond1 (unregistering): Released all slaves [ 390.441363][ T31] audit: type=1400 audit(1790098748.134:630): avc: denied { write } for pid=7771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.504824][ T31] audit: type=1400 audit(1790098748.204:631): avc: denied { write } for pid=7782 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.572911][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 390.636801][ T1043] hsr_slave_0: left promiscuous mode [ 390.637295][ T1043] hsr_slave_1: left promiscuous mode [ 390.637770][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.637787][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.638378][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.638392][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.640516][ T1043] veth1_macvtap: left promiscuous mode [ 390.640561][ T1043] veth0_macvtap: left promiscuous mode [ 390.640636][ T1043] veth1_vlan: left promiscuous mode [ 390.640694][ T1043] veth0_vlan: left promiscuous mode [ 390.777038][ T1043] team0 (unregistering): Port device team_slave_1 removed [ 390.782195][ T1043] team0 (unregistering): Port device team_slave_0 removed [ 390.989808][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 391.138857][ T1043] IPVS: stop unused estimator thread 0... [ 391.244777][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 391.448291][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 391.700689][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 391.916522][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 392.133372][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15 [ 392.344619][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16