last executing test programs: 6.143796325s ago: executing program 0 (id=803): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 5.859303344s ago: executing program 1 (id=810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.784696536s ago: executing program 2 (id=812): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) 5.784428756s ago: executing program 2 (id=813): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x238, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x9}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xffff}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x104}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.759464377s ago: executing program 2 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x2) 5.573655183s ago: executing program 2 (id=815): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$watch_queue(r1, &(0x7f0000000540)=""/222, 0xe80) 5.288922233s ago: executing program 0 (id=816): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b875a1431a05b931", 0x8}, {&(0x7f0000002a40)="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", 0x379}], 0x2}}], 0x1, 0x0) 5.254067334s ago: executing program 0 (id=817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x0, @local, 0x2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x3, 0xfff7, 0x8001, 0x4, 0x7ff, 0x7, 0x70aa, 0x1, r2}, &(0x7f0000000080)=0x20) 4.986419393s ago: executing program 1 (id=822): add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x1, 0x41, &(0x7f0000000000), 0x0, 0x6, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) 4.481364311s ago: executing program 3 (id=826): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 4.216609599s ago: executing program 0 (id=827): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000000) 4.038805425s ago: executing program 0 (id=828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 4.028714626s ago: executing program 1 (id=829): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x4, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffd11, &(0x7f0000000180)=ANY=[]) 3.498464703s ago: executing program 3 (id=836): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136", 0x64}], 0x1}}], 0x2, 0x2090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000730187000000000095"], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000580)='1', 0xfffffffffffffc21, 0x10008095, 0x0, 0x21) 3.340235658s ago: executing program 4 (id=837): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.29228774s ago: executing program 1 (id=838): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010f2abd7000000064000b00000008020300d7ef683501790752d62311a17b410490d171fc36", @ANYRES32=r4, @ANYBLOB="200050800800030001ac0f00090001001678930ed10000000500020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000180)=0xfffffffffffffff0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r8 = getpid() r9 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r9, &(0x7f0000000180)={r9, 0xffffffffffffffff, 0xaa}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) r10 = socket(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 3.254157281s ago: executing program 4 (id=839): add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x1, 0x41, &(0x7f0000000000), 0x0, 0x6, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) 1.980975074s ago: executing program 3 (id=840): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.354193715s ago: executing program 2 (id=841): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4d, 0x60, 0x31, 0x6, "05a61722", "3d9e2963"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f0000000240)) 1.349242655s ago: executing program 4 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c844}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 1.278202227s ago: executing program 3 (id=843): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = eventfd2(0x8, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) 1.129031192s ago: executing program 1 (id=844): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="ebeb63", 0xfdef}], 0x1}, 0x14000800) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r7) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_batadv\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x4000c704) 1.084620544s ago: executing program 4 (id=845): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000002900000004000000840200000007000005020003"], 0x30}, 0x0) 640.029339ms ago: executing program 4 (id=846): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91", 0x216}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 603.08926ms ago: executing program 0 (id=847): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, 0x0, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008010}, 0x400c004) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x8000) 512.040513ms ago: executing program 4 (id=848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 310.80919ms ago: executing program 3 (id=849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) setreuid(0x0, 0xee00) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[], 0x9) 189.682114ms ago: executing program 3 (id=850): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136", 0x64}], 0x1}}], 0x2, 0x2090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000730187000000000095"], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000580)='1', 0xfffffffffffffc21, 0x10008095, 0x0, 0x21) 436µs ago: executing program 1 (id=851): r0 = socket$kcm(0x2d, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) 0s ago: executing program 2 (id=852): add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x1, 0x41, &(0x7f0000000000), 0x0, 0x6, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) kernel console output (not intermixed with test programs): [ 24.950625][ T28] audit: type=1400 audit(1779199006.414:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.982668][ T28] audit: type=1400 audit(1779199006.414:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.134556][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 27.134575][ T28] audit: type=1400 audit(1779199008.604:118): avc: denied { write } for pid=3222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.182215][ T28] audit: type=1400 audit(1779199008.644:119): avc: denied { write } for pid=3233 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.274716][ T28] audit: type=1400 audit(1779199008.744:120): avc: denied { write } for pid=3236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.314878][ T28] audit: type=1400 audit(1779199008.784:121): avc: denied { write } for pid=3247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.672734][ T28] audit: type=1400 audit(1779199009.134:122): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.712045][ T28] audit: type=1400 audit(1779199009.174:123): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.814216][ T28] audit: type=1400 audit(1779199009.284:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.851333][ T28] audit: type=1400 audit(1779199009.314:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 31.629611][ T28] audit: type=1400 audit(1779199013.094:126): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.658999][ T28] audit: type=1400 audit(1779199013.124:127): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.662671][ T3282] cgroup: Unknown subsys name 'net' [ 31.794677][ T3282] cgroup: Unknown subsys name 'cpuset' [ 31.803751][ T3282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.986604][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.040350][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.757857][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 32.757877][ T28] audit: type=1400 audit(1779199014.224:140): avc: denied { execmem } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 33.012559][ T28] audit: type=1400 audit(1779199014.474:141): avc: denied { read } for pid=3297 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.113679][ T28] audit: type=1400 audit(1779199014.474:142): avc: denied { open } for pid=3297 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.203493][ T28] audit: type=1400 audit(1779199014.514:143): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 33.281611][ T28] audit: type=1400 audit(1779199014.524:144): avc: denied { module_request } for pid=3297 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 33.345164][ T28] audit: type=1400 audit(1779199014.564:145): avc: denied { sys_module } for pid=3301 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 33.751489][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.768706][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.780154][ T3297] bridge_slave_0: entered allmulticast mode [ 33.787013][ T3297] bridge_slave_0: entered promiscuous mode [ 33.812579][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.822283][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.831399][ T3297] bridge_slave_1: entered allmulticast mode [ 33.839232][ T3297] bridge_slave_1: entered promiscuous mode [ 33.919831][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.933194][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.985075][ T3297] team0: Port device team_slave_0 added [ 34.013896][ T3297] team0: Port device team_slave_1 added [ 34.055080][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.063780][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.073613][ T3298] bridge_slave_0: entered allmulticast mode [ 34.082068][ T3298] bridge_slave_0: entered promiscuous mode [ 34.104911][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.118085][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.158313][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.175178][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.183518][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.193034][ T3298] bridge_slave_1: entered allmulticast mode [ 34.201127][ T3298] bridge_slave_1: entered promiscuous mode [ 34.229055][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.236176][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.271038][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.330643][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.350043][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.361718][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.370670][ T3301] bridge_slave_0: entered allmulticast mode [ 34.378810][ T3301] bridge_slave_0: entered promiscuous mode [ 34.392282][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.424341][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.433881][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.442673][ T3301] bridge_slave_1: entered allmulticast mode [ 34.451954][ T3301] bridge_slave_1: entered promiscuous mode [ 34.501833][ T3298] team0: Port device team_slave_0 added [ 34.515190][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.524068][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.534950][ T3303] bridge_slave_0: entered allmulticast mode [ 34.546156][ T3303] bridge_slave_0: entered promiscuous mode [ 34.563727][ T3297] hsr_slave_0: entered promiscuous mode [ 34.572647][ T3297] hsr_slave_1: entered promiscuous mode [ 34.583883][ T3298] team0: Port device team_slave_1 added [ 34.591428][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.605256][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.614345][ T3299] bridge_slave_0: entered allmulticast mode [ 34.623346][ T3299] bridge_slave_0: entered promiscuous mode [ 34.631806][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.640581][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.650601][ T3299] bridge_slave_1: entered allmulticast mode [ 34.660923][ T3299] bridge_slave_1: entered promiscuous mode [ 34.671592][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.681827][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.690603][ T3303] bridge_slave_1: entered allmulticast mode [ 34.699749][ T3303] bridge_slave_1: entered promiscuous mode [ 34.711371][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.727567][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.801512][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.814575][ T3301] team0: Port device team_slave_0 added [ 34.823656][ T3301] team0: Port device team_slave_1 added [ 34.834327][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.844941][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.886447][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.902770][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.918372][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.947894][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.956223][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.993679][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.013251][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.076491][ T3303] team0: Port device team_slave_0 added [ 35.084251][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.094535][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.137603][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.157356][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.168207][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.210400][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.225810][ T3299] team0: Port device team_slave_0 added [ 35.240293][ T3303] team0: Port device team_slave_1 added [ 35.261951][ T3299] team0: Port device team_slave_1 added [ 35.287023][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.298229][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.334287][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.352195][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.362428][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.400823][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.444981][ T3298] hsr_slave_0: entered promiscuous mode [ 35.455876][ T3298] hsr_slave_1: entered promiscuous mode [ 35.468727][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 35.478420][ T3298] Cannot create hsr debugfs directory [ 35.495673][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.505340][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.554676][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.591669][ T3301] hsr_slave_0: entered promiscuous mode [ 35.601065][ T3301] hsr_slave_1: entered promiscuous mode [ 35.609134][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 35.618440][ T3301] Cannot create hsr debugfs directory [ 35.626512][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.640542][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.683028][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.761199][ T3303] hsr_slave_0: entered promiscuous mode [ 35.771242][ T3303] hsr_slave_1: entered promiscuous mode [ 35.783349][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 35.794036][ T3303] Cannot create hsr debugfs directory [ 35.869062][ T3299] hsr_slave_0: entered promiscuous mode [ 35.877676][ T3299] hsr_slave_1: entered promiscuous mode [ 35.888998][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 35.899479][ T3299] Cannot create hsr debugfs directory [ 36.078013][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.090570][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.126260][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.138213][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.163474][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.174563][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.195182][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.209655][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.257871][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.268574][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.279183][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.293320][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.303500][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.321152][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.332577][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.343104][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.392119][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.403112][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.416977][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.428451][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.456533][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.469749][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.488338][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.500610][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.526059][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.539094][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.550348][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.563199][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.576530][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.592978][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.614719][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.625942][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.690108][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.698915][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.712304][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.726204][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.737251][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.749711][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.760643][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.781843][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.794339][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.819296][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.840467][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.860681][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.870255][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.897433][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.909334][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.924552][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.961237][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.973113][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.004941][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.013383][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.041923][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.091491][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.105138][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.119801][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.139733][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.174540][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.185123][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.211544][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.231983][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.241005][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.264208][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.312061][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.321032][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.336576][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.367214][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.391447][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.428352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.437073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.487537][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.498057][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.636622][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.770190][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.859255][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.926183][ T3297] veth0_vlan: entered promiscuous mode [ 37.961824][ T3297] veth1_vlan: entered promiscuous mode [ 37.998557][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.045988][ T3297] veth0_macvtap: entered promiscuous mode [ 38.078021][ T3297] veth1_macvtap: entered promiscuous mode [ 38.099519][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.126179][ T3298] veth0_vlan: entered promiscuous mode [ 38.148182][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.174280][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.190537][ T3298] veth1_vlan: entered promiscuous mode [ 38.209485][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.242357][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.255733][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.280419][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.309756][ T3303] veth0_vlan: entered promiscuous mode [ 38.335882][ T28] audit: type=1400 audit(1779199019.804:146): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.GxaztQ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.376948][ T28] audit: type=1400 audit(1779199019.804:147): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.400735][ T3303] veth1_vlan: entered promiscuous mode [ 38.435162][ T28] audit: type=1400 audit(1779199019.814:148): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.GxaztQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.472458][ T28] audit: type=1400 audit(1779199019.824:149): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.505083][ T3298] veth0_macvtap: entered promiscuous mode [ 38.524516][ T3298] veth1_macvtap: entered promiscuous mode [ 38.529391][ T28] audit: type=1400 audit(1779199019.824:150): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.GxaztQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.603268][ T28] audit: type=1400 audit(1779199019.824:151): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.GxaztQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.647978][ T28] audit: type=1400 audit(1779199019.824:152): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.650576][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.711722][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.740887][ T28] audit: type=1400 audit(1779199019.844:153): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.768036][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.810502][ T28] audit: type=1400 audit(1779199019.844:154): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.876862][ T3301] veth0_vlan: entered promiscuous mode [ 38.884040][ T28] audit: type=1400 audit(1779199020.344:155): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.943297][ T3299] veth0_vlan: entered promiscuous mode [ 38.962844][ T3303] veth0_macvtap: entered promiscuous mode [ 38.979747][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.995068][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.008304][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028507][ T3301] veth1_vlan: entered promiscuous mode [ 39.036156][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.047348][ T3303] veth1_macvtap: entered promiscuous mode [ 39.065315][ T3299] veth1_vlan: entered promiscuous mode [ 39.098642][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.127600][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.141913][ T3301] veth0_macvtap: entered promiscuous mode [ 39.157458][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.175059][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.192052][ T3301] veth1_macvtap: entered promiscuous mode [ 39.203814][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.216950][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.265301][ T3299] veth0_macvtap: entered promiscuous mode [ 39.286554][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.323534][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.342957][ T3299] veth1_macvtap: entered promiscuous mode [ 39.382310][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.402934][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.415135][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.440447][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.454293][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.475557][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.492105][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.503334][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.522584][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.537071][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.935040][ T3540] loop3: detected capacity change from 0 to 128 [ 39.955435][ T3540] ======================================================= [ 39.955435][ T3540] WARNING: The mand mount option has been deprecated and [ 39.955435][ T3540] and is ignored by this kernel. Remove the mand [ 39.955435][ T3540] option from the mount to silence this warning. [ 39.955435][ T3540] ======================================================= [ 40.075217][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.089251][ T3540] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.107158][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.134080][ T3540] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.319628][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.852015][ T3559] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.708773][ T3566] tipc: Started in network mode [ 41.726390][ T3566] tipc: Node identity 3e62c55eb67e, cluster identity 4711 [ 41.762090][ T3566] tipc: Enabled bearer , priority 0 [ 41.789056][ T3573] syzkaller0: entered promiscuous mode [ 41.802181][ T3573] syzkaller0: entered allmulticast mode [ 41.846841][ T3564] tipc: Resetting bearer [ 41.871168][ T3564] tipc: Disabling bearer [ 42.272655][ T3588] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 43.091980][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.147590][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.170322][ T3598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.272301][ T3598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.471381][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 43.471425][ T28] audit: type=1400 audit(1779199024.924:199): avc: denied { map_read map_write } for pid=3603 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 43.861131][ T28] audit: type=1400 audit(1779199025.324:200): avc: denied { listen } for pid=3618 comm="syz.1.38" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.030491][ T28] audit: type=1400 audit(1779199025.494:201): avc: denied { create } for pid=3624 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.067585][ T28] audit: type=1400 audit(1779199025.504:202): avc: denied { write } for pid=3624 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.482715][ T28] audit: type=1400 audit(1779199025.944:203): avc: denied { create } for pid=3652 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.557407][ T28] audit: type=1400 audit(1779199025.974:204): avc: denied { connect } for pid=3652 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.626983][ T28] audit: type=1400 audit(1779199026.084:205): avc: denied { kexec_image_load } for pid=3657 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.691731][ T28] audit: type=1400 audit(1779199026.154:206): avc: denied { tracepoint } for pid=3655 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.123558][ T3671] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.134638][ T3671] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.169693][ T3671] bridge0: entered allmulticast mode [ 45.279323][ T3673] bridge_slave_1: left allmulticast mode [ 45.335861][ T3673] bridge_slave_1: left promiscuous mode [ 45.386718][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.474330][ T3673] bridge_slave_0: left allmulticast mode [ 45.498105][ T3673] bridge_slave_0: left promiscuous mode [ 45.529570][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.582064][ T28] audit: type=1400 audit(1779199027.044:207): avc: denied { read } for pid=3668 comm="syz.1.55" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.668465][ T28] audit: type=1400 audit(1779199027.044:208): avc: denied { open } for pid=3668 comm="syz.1.55" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 46.141311][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.177081][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.191956][ T3686] syzkaller0: entered promiscuous mode [ 46.211316][ T3686] syzkaller0: entered allmulticast mode [ 46.362297][ T3706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.394264][ T3706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.513158][ T3708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.532472][ T3708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.697450][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.712334][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.189204][ T3730] syzkaller0: entered promiscuous mode [ 47.216762][ T3730] syzkaller0: entered allmulticast mode [ 47.611774][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 48.669950][ T3779] syzkaller0: entered promiscuous mode [ 48.720589][ T3779] syzkaller0: entered allmulticast mode [ 48.749077][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 48.749096][ T28] audit: type=1400 audit(1779199030.214:218): avc: denied { create } for pid=3781 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.950733][ T3787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.015353][ T28] audit: type=1400 audit(1779199030.264:219): avc: denied { ioctl } for pid=3781 comm="syz.4.96" path="socket:[5622]" dev="sockfs" ino=5622 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.098431][ T3787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.414381][ T3787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.480650][ T3787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.495467][ T3805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 49.630512][ T28] audit: type=1400 audit(1779199030.674:220): avc: denied { write } for pid=3790 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.661645][ T28] audit: type=1400 audit(1779199030.714:221): avc: denied { read } for pid=3798 comm="syz.4.103" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.692622][ T28] audit: type=1400 audit(1779199030.774:222): avc: denied { setopt } for pid=3801 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.694634][ T3809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.716420][ T28] audit: type=1400 audit(1779199030.774:223): avc: denied { read } for pid=3801 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.716455][ T28] audit: type=1400 audit(1779199030.834:224): avc: denied { write } for pid=3801 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.808493][ T28] audit: type=1400 audit(1779199031.274:225): avc: denied { write } for pid=3810 comm="syz.4.108" name="ip6_flowlabel" dev="proc" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.847915][ T3809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.961667][ T28] audit: type=1400 audit(1779199031.424:226): avc: denied { write } for pid=3821 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.019909][ T3826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.035311][ T28] audit: type=1400 audit(1779199031.424:227): avc: denied { read } for pid=3821 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.073958][ T3826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.534446][ T3843] syzkaller0: entered promiscuous mode [ 50.553918][ T3843] syzkaller0: entered allmulticast mode [ 50.822632][ T3864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 50.971311][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.992624][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.146686][ T3879] loop0: detected capacity change from 0 to 1024 [ 51.169307][ T3879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.236992][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.490995][ T3925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.548317][ T3925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.587413][ T3938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.647236][ T3938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.726907][ T3947] loop3: detected capacity change from 0 to 1024 [ 52.748642][ T3947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.820405][ T3960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.833160][ T3960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.985286][ T3963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.996660][ T3963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.334083][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.581323][ T3993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.608063][ T3993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.784639][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.806170][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.426205][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 54.572329][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 54.572349][ T28] audit: type=1400 audit(1779199036.034:239): avc: denied { create } for pid=4051 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.834373][ T28] audit: type=1400 audit(1779199036.294:240): avc: denied { getopt } for pid=4069 comm="syz.2.205" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.113674][ T4095] loop3: detected capacity change from 0 to 1024 [ 55.174736][ T4095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.258675][ T28] audit: type=1400 audit(1779199036.724:241): avc: denied { write } for pid=4093 comm="syz.3.214" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.303676][ T4104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 55.325596][ T4093] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.214: bit already cleared for inode 15 [ 55.327125][ T28] audit: type=1400 audit(1779199036.794:242): avc: denied { write } for pid=4093 comm="syz.3.214" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.377276][ T28] audit: type=1400 audit(1779199036.794:243): avc: denied { write } for pid=4093 comm="syz.3.214" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.404269][ T28] audit: type=1400 audit(1779199036.794:244): avc: denied { remove_name } for pid=4093 comm="syz.3.214" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.441951][ T28] audit: type=1400 audit(1779199036.794:245): avc: denied { rename } for pid=4093 comm="syz.3.214" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.479691][ T28] audit: type=1400 audit(1779199036.794:246): avc: denied { unlink } for pid=4093 comm="syz.3.214" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.829468][ T4131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.853790][ T4131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.889274][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.920771][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.932228][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.942495][ T4137] bridge0: entered allmulticast mode [ 55.968864][ T4137] bridge_slave_1: left allmulticast mode [ 55.988629][ T4137] bridge_slave_1: left promiscuous mode [ 56.001088][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.012951][ T4137] bridge_slave_0: left allmulticast mode [ 56.020886][ T4137] bridge_slave_0: left promiscuous mode [ 56.030949][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.084209][ T4131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.095771][ T4131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.276610][ T28] audit: type=1400 audit(1779199037.744:247): avc: denied { ioctl } for pid=4147 comm="syz.2.234" path="socket:[6126]" dev="sockfs" ino=6126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.329348][ T28] audit: type=1400 audit(1779199037.774:248): avc: denied { bind } for pid=4147 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.563796][ T4162] loop1: detected capacity change from 0 to 1024 [ 56.598827][ T4162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.671028][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.713497][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.726144][ T4161] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.240: bit already cleared for inode 15 [ 56.805053][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.822339][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.260985][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.512643][ T4229] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 57.720676][ T4247] Zero length message leads to an empty skb [ 57.897044][ T4257] mmap: syz.2.280 (4257) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.186122][ T4275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.219442][ T4275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.002303][ T4301] loop4: detected capacity change from 0 to 1024 [ 59.181051][ T4301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.290048][ T4319] 9p: Bad value for 'afid' [ 59.426574][ T4301] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.300: bit already cleared for inode 15 [ 59.586809][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.649788][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.086975][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 60.086993][ T28] audit: type=1400 audit(1779199041.554:259): avc: denied { execute } for pid=4334 comm="syz.2.314" name="file2" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.133939][ T4335] process 'syz.2.314' launched './file2' with NULL argv: empty string added [ 60.144606][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.167167][ T28] audit: type=1400 audit(1779199041.624:260): avc: denied { execute_no_trans } for pid=4334 comm="syz.2.314" path="/68/file2" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.255663][ T4342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.289567][ T4342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.372136][ T28] audit: type=1400 audit(1779199042.834:261): avc: denied { bind } for pid=4378 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.459973][ T28] audit: type=1400 audit(1779199042.834:262): avc: denied { ioctl } for pid=4378 comm="syz.1.332" path="socket:[6816]" dev="sockfs" ino=6816 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.493446][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'. [ 61.803654][ T28] audit: type=1400 audit(1779199043.264:263): avc: denied { read write } for pid=4399 comm="syz.1.342" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.836642][ T28] audit: type=1400 audit(1779199043.264:264): avc: denied { open } for pid=4399 comm="syz.1.342" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.849862][ T1038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.402936][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.582285][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.703504][ T1038] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.838625][ T4418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'. [ 62.871165][ T4420] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 62.940979][ T4420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.978443][ T4420] team0: Port device bond0 added [ 63.261752][ T28] audit: type=1400 audit(1779199044.724:265): avc: denied { name_bind } for pid=4434 comm="syz.4.358" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 63.345481][ T28] audit: type=1400 audit(1779199044.764:266): avc: denied { setopt } for pid=4434 comm="syz.4.358" laddr=172.20.20.170 lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.540384][ T4452] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.552223][ T4452] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.593293][ T4452] bridge0: entered allmulticast mode [ 63.647532][ T4457] bridge_slave_1: left allmulticast mode [ 63.673887][ T4457] bridge_slave_1: left promiscuous mode [ 63.703125][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.766141][ T4457] bridge_slave_0: left allmulticast mode [ 63.787797][ T4457] bridge_slave_0: left promiscuous mode [ 63.820330][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.086810][ T28] audit: type=1400 audit(1779199045.554:267): avc: denied { bind } for pid=4469 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.113849][ T28] audit: type=1400 audit(1779199045.554:268): avc: denied { listen } for pid=4469 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.144738][ T4471] netlink: 68 bytes leftover after parsing attributes in process `syz.3.371'. [ 64.335126][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.398537][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.377513][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 65.377539][ T28] audit: type=1400 audit(1779199046.844:272): avc: denied { read } for pid=4531 comm="syz.3.394" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.470478][ T28] audit: type=1400 audit(1779199046.844:273): avc: denied { open } for pid=4531 comm="syz.3.394" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.442659][ T28] audit: type=1400 audit(1779199047.894:274): avc: denied { read write } for pid=4543 comm="syz.0.398" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.475159][ T28] audit: type=1400 audit(1779199047.894:275): avc: denied { open } for pid=4543 comm="syz.0.398" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.513954][ T28] audit: type=1400 audit(1779199047.904:276): avc: denied { ioctl } for pid=4543 comm="syz.0.398" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.643571][ T4554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.402'. [ 66.673207][ T4557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.691523][ T4557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.736164][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.754039][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.250107][ T28] audit: type=1400 audit(1779199048.714:277): avc: denied { listen } for pid=4564 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.278068][ T28] audit: type=1400 audit(1779199048.744:278): avc: denied { setopt } for pid=4564 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.360493][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 67.426255][ T28] audit: type=1400 audit(1779199048.894:279): avc: denied { create } for pid=4578 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.489370][ T4582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.416'. [ 67.578789][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.608619][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.629379][ T28] audit: type=1400 audit(1779199049.084:280): avc: denied { mount } for pid=4591 comm="syz.0.421" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.680322][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.694894][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.941835][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 67.969505][ T4611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'. [ 68.042850][ T28] audit: type=1400 audit(1779199049.504:281): avc: denied { create } for pid=4614 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.042926][ T4615] capability: warning: `syz.2.430' uses deprecated v2 capabilities in a way that may be insecure [ 68.464999][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.493816][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.942487][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 68.972388][ T4643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 69.108892][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.148047][ T3406] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.188784][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 69.574903][ T4678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.451'. [ 69.608953][ T4678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.451'. [ 70.440119][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 70.440212][ T28] audit: type=1400 audit(1779199051.904:288): avc: denied { connect } for pid=4702 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.519152][ T28] audit: type=1400 audit(1779199051.974:289): avc: denied { perfmon } for pid=4706 comm="syz.0.464" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.599233][ T28] audit: type=1400 audit(1779199051.994:290): avc: denied { module_request } for pid=4704 comm="syz.4.462" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.653098][ T28] audit: type=1400 audit(1779199052.024:291): avc: denied { bpf } for pid=4706 comm="syz.0.464" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.965066][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.010130][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.283998][ T28] audit: type=1400 audit(1779199053.754:292): avc: denied { ioctl } for pid=4766 comm="syz.2.486" path="socket:[8301]" dev="sockfs" ino=8301 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.397112][ T28] audit: type=1400 audit(1779199053.794:293): avc: denied { create } for pid=4766 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.462896][ T28] audit: type=1400 audit(1779199053.804:294): avc: denied { write } for pid=4766 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.494066][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.584073][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.926827][ T28] audit: type=1400 audit(1779199054.394:295): avc: denied { connect } for pid=4786 comm="syz.4.494" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.149574][ T4797] __vm_enough_memory: pid: 4797, comm: syz.0.499, bytes: 21199906979840 not enough memory for the allocation [ 73.642858][ T28] audit: type=1400 audit(1779199055.104:296): avc: denied { write } for pid=4810 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.767803][ T28] audit: type=1400 audit(1779199055.234:297): avc: denied { execute } for pid=4812 comm="syz.1.508" path=2F6D656D66643A024101202864656C6574656429 dev="hugetlbfs" ino=8385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 74.338613][ T4829] __nla_validate_parse: 2 callbacks suppressed [ 74.338636][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 74.854001][ T4853] 9p: Bad value for 'wfdno' [ 74.909107][ T4857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.969881][ T4857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.393126][ T4869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.409688][ T4869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.597838][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.634667][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.364569][ T3385] IPVS: starting estimator thread 0... [ 77.382401][ T4960] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 77.483821][ T4961] IPVS: using max 1920 ests per chain, 96000 per kthread [ 77.653071][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 78.188629][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 78.188647][ T28] audit: type=1400 audit(1779199059.654:304): avc: denied { bind } for pid=4989 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.511255][ T28] audit: type=1400 audit(1779199059.974:305): avc: denied { create } for pid=5005 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 78.565997][ T28] audit: type=1400 audit(1779199060.014:306): avc: denied { sys_admin } for pid=5005 comm="syz.2.586" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 78.640353][ T28] audit: type=1400 audit(1779199060.024:307): avc: denied { remount } for pid=5005 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.878929][ T28] audit: type=1400 audit(1779199060.344:308): avc: denied { shutdown } for pid=5025 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.958094][ T28] audit: type=1400 audit(1779199060.354:309): avc: denied { getopt } for pid=5025 comm="syz.0.593" lport=58744 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.248704][ T5028] usb usb7: usbfs: process 5028 (syz.2.595) did not claim interface 0 before use [ 79.260911][ T5028] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.042903][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 80.304169][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 80.625791][ T5095] usb usb7: usbfs: process 5095 (syz.0.611) did not claim interface 0 before use [ 80.641047][ T5095] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.363429][ T5118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.455589][ T5118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.467924][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.500305][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.259377][ T5156] usb usb7: usbfs: process 5156 (syz.4.634) did not claim interface 0 before use [ 82.272074][ T5156] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.086217][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 83.387844][ T5196] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.121522][ T5211] usb usb7: usbfs: process 5211 (syz.0.654) did not claim interface 0 before use [ 84.135600][ T5211] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.814606][ T5223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 84.829829][ T28] audit: type=1400 audit(1779199066.284:310): avc: denied { bind } for pid=5222 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.871256][ T28] audit: type=1400 audit(1779199066.284:311): avc: denied { setopt } for pid=5222 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.227046][ T28] audit: type=1400 audit(1779199066.694:312): avc: denied { create } for pid=5243 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.856687][ T5260] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.272790][ T5267] usb usb7: usbfs: process 5267 (syz.2.669) did not claim interface 0 before use [ 86.410250][ T5266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.478854][ T5266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.667247][ T28] audit: type=1400 audit(1779199068.134:313): avc: denied { create } for pid=5275 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.785522][ T5281] loop8: detected capacity change from 0 to 7 [ 87.299149][ T5310] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.295017][ T5334] loop1: detected capacity change from 0 to 1024 [ 88.367823][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.456346][ T28] audit: type=1400 audit(1779199069.924:314): avc: denied { map } for pid=5342 comm="syz.4.702" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 88.568811][ T5334] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.699: bit already cleared for inode 15 [ 88.586452][ T28] audit: type=1400 audit(1779199070.034:315): avc: denied { write } for pid=5333 comm="syz.1.699" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.621162][ T28] audit: type=1400 audit(1779199070.034:316): avc: denied { write } for pid=5333 comm="syz.1.699" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.178624][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.245569][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.275059][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.818452][ T5401] loop3: detected capacity change from 0 to 1024 [ 89.857535][ T5401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.964836][ T5401] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.726: bit already cleared for inode 15 [ 89.967381][ T28] audit: type=1400 audit(1779199071.434:317): avc: denied { write } for pid=5400 comm="syz.3.726" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.019399][ T28] audit: type=1400 audit(1779199071.434:318): avc: denied { write } for pid=5400 comm="syz.3.726" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.139976][ T5421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.156750][ T5421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.565058][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.780228][ T28] audit: type=1400 audit(1779199072.244:319): avc: denied { append } for pid=5450 comm="syz.2.747" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.820863][ T5451] program syz.2.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.885139][ T28] audit: type=1400 audit(1779199072.354:320): avc: denied { name_connect } for pid=5455 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 91.020892][ T28] audit: type=1400 audit(1779199072.484:321): avc: denied { write } for pid=5463 comm="syz.1.752" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.102290][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 91.117957][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 91.144999][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 91.232025][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.271231][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.304467][ T28] audit: type=1400 audit(1779199072.774:322): avc: denied { write } for pid=5480 comm="syz.4.760" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.356635][ T28] audit: type=1400 audit(1779199072.774:323): avc: denied { open } for pid=5480 comm="syz.4.760" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.405030][ T5485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.418363][ T5485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.429272][ T28] audit: type=1400 audit(1779199072.774:324): avc: denied { ioctl } for pid=5480 comm="syz.4.760" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.717555][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 91.734681][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 92.039544][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.054619][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.078328][ T5514] bridge0: entered allmulticast mode [ 92.142945][ T5518] loop1: detected capacity change from 0 to 1024 [ 92.171594][ T5518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.224874][ T5518] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.776: bit already cleared for inode 15 [ 92.237039][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.240482][ T28] audit: type=1400 audit(1779199073.694:325): avc: denied { write } for pid=5517 comm="syz.1.776" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.261318][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.301002][ T28] audit: type=1400 audit(1779199073.694:326): avc: denied { write } for pid=5517 comm="syz.1.776" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.420475][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 92.493980][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 92.645055][ T5541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.665064][ T5541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.819783][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.511169][ T5574] veth0: entered promiscuous mode [ 93.546865][ T5574] veth0: left promiscuous mode [ 93.605763][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 93.892386][ T263] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 94.650252][ T5589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.734763][ T5625] tipc: Started in network mode [ 94.742820][ T5625] tipc: Node identity 4, cluster identity 4711 [ 94.753738][ T5625] tipc: Node number set to 4 [ 95.221731][ T5638] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.874654][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.904027][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.401901][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 97.327930][ T5675] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.034591][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.236085][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.503883][ T3303] ================================================================== [ 100.516099][ T3303] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 100.527459][ T3303] [ 100.531388][ T3303] read-write to 0xffff888103f4aeb0 of 8 bytes by task 5709 on cpu 1: [ 100.544804][ T3303] inode_add_bytes+0x47/0xe0 [ 100.552485][ T3303] __dquot_alloc_space+0x180/0x8a0 [ 100.560580][ T3303] shmem_inode_acct_blocks+0x125/0x230 [ 100.570737][ T3303] shmem_get_folio_gfp+0x5b2/0xd60 [ 100.577370][ T3303] shmem_write_begin+0xfc/0x1f0 [ 100.584980][ T3303] generic_perform_write+0x183/0x490 [ 100.592786][ T3303] shmem_file_write_iter+0xc5/0xf0 [ 100.600280][ T3303] __kernel_write_iter+0x319/0x590 [ 100.610430][ T3303] dump_user_range+0xa73/0xd00 [ 100.616814][ T3303] elf_core_dump+0x21a2/0x2330 [ 100.625210][ T3303] coredump_write+0xacc/0xdd0 [ 100.631667][ T3303] vfs_coredump+0x26dd/0x31e0 [ 100.637932][ T3303] get_signal+0xd5c/0xf20 [ 100.650776][ T3303] arch_do_signal_or_restart+0x96/0x480 [ 100.657457][ T3303] irqentry_exit+0x145/0x5d0 [ 100.666535][ T3303] asm_exc_page_fault+0x26/0x30 [ 100.673223][ T3303] [ 100.675756][ T3303] read to 0xffff888103f4aeb0 of 8 bytes by task 3303 on cpu 0: [ 100.695123][ T3303] generic_fillattr+0x27d/0x340 [ 100.705403][ T3303] shmem_getattr+0x181/0x200 [ 100.715392][ T3303] vfs_getattr_nosec+0x146/0x1e0 [ 100.726500][ T3303] vfs_getattr+0x48/0x60 [ 100.734174][ T3303] vfs_statx_path+0x28/0x140 [ 100.741021][ T3303] vfs_statx+0xc4/0x170 [ 100.747692][ T3303] vfs_fstatat+0x118/0x170 [ 100.755752][ T3303] __se_sys_newfstatat+0x55/0x3e0 [ 100.761960][ T3303] __x64_sys_newfstatat+0x55/0x70 [ 100.768737][ T3303] x64_sys_call+0x2c64/0x3020 [ 100.774383][ T3303] do_syscall_64+0x12c/0x3b0 [ 100.780238][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.790690][ T3303] [ 100.795384][ T3303] value changed: 0x00000000000103b8 -> 0x00000000000103c8 [ 100.804998][ T3303] [ 100.809542][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 100.818542][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.834039][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.850834][ T3303] ================================================================== [ 100.866319][ T5714] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.