last executing test programs: 8.767969985s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0xfffffffffffffff5) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r6, 0x1000006) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000580)=0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 8.332614125s ago: executing program 0 (id=1): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) pread64$ublk_ch(r1, &(0x7f00000014c0)=@buf_1k, 0x1000, 0xa) setpriority(0x0, 0x1, 0xa7a8) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) 7.178819114s ago: executing program 0 (id=6): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000002400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000002140)=""/128, 0x0, 0x1, 0x20}, @fda={0x66646185, 0x2, 0x1, 0x22}}, &(0x7f0000002240)}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={@fda={0x66646185, 0x9, 0x2, 0x2d}, @fda={0x66646185, 0xa, 0x2, 0x3d}, @flat=@binder={0x73622a85, 0x10a, 0x1}}, &(0x7f0000002300)}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={@flat=@handle={0x73682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd}, &(0x7f00000023c0)}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 5.789419977s ago: executing program 0 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet6(r0, &(0x7f00000002c0)="4e77f12f6a0229803044901b6a3e84e6372a36530a9bee3793623da7f146db117c24a4fb974427356f77c930ff50f300105aa7148047da0d3e5a4f6c541322aec8bf3078d1a8397a1eac9932fa970a36892827ee31c624be95c02c8c5547994ada7c985d96d0", 0x66, 0x24000045, &(0x7f00000001c0)={0xa, 0x4, 0x2, @loopback, 0x9}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) shutdown(r0, 0x1) 5.738255944s ago: executing program 2 (id=3): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7c, 0xc, 0x0, 0x812}, 0x30) listen(r0, 0x0) r1 = socket(0x1, 0x2, 0x200040c) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x8d, 0xfffffffd, 0xffffffff, 0xe, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x81}) readv(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1) read(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) semget$private(0x0, 0x207, 0x70d) semop(0x0, &(0x7f0000000000), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0x2020) accept4(r3, &(0x7f00000002c0)=@generic, &(0x7f00000004c0)=0x80, 0x800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) fanotify_init(0x8, 0x40000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="000000000049bf639b0000000000000000000000f4160fecb0af0b0e0bb87e9aebefed4e0c66304bfa2defb0d977c89e9d8c4118228a57176aa79a67e7fd63ac9a923f68783defc2fcd33a1602b33459aed1c26dee6b50a4ea424b0bbc90c75af3a5bef2a3988272ae5b356338811583cd41e96a163f22f3bb96cc9a0be71e8d857528e8a17e8030babbfafa851b9ac10de382b3f610049da21dadc31fa186e59e75254a506249859d62d3216e4fbe750456b8893107a7f1bb4d012ce8063a08f36e675ccda645c3146b6ed352f63422568be9075f11979a5f8c5a2f3df57b992a88057e4603b112", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80820}, 0x40000c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) kexec_load(0xfff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10000, 0x1ff}], 0x1) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r7, @ANYBLOB="089805000750050008001300", @ANYRES32=r8, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x180000) 5.683838487s ago: executing program 3 (id=11): openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, "0020742010080000060000000000fffb00"}) 5.442999492s ago: executing program 3 (id=12): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x1000000000000, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000000010005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x327c41, 0x0) socket(0x400000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r3, &(0x7f0000000800)='(', 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xb92}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) 5.278002602s ago: executing program 2 (id=14): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d0003"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffff450000090000000024a746df28b7cd334e00000111009078e00000019bace2387c98a21674bdb53e7ed98bec8d7e5158a33dc0fcde5cb7e294916cae68f64126e73d9e334f9ab97742774593060e355e3c160fc462917b03310d4e175e43a8278f04a5b4af6a5054f03f2a597ba21961e752c038bf75065ac23f6cf59c2040"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f", 0xa1}], 0x1}, 0x4008040) syz_clone3(&(0x7f00000019c0)={0x4000000, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x22}, &(0x7f0000000380)=""/147, 0x93, &(0x7f0000000680)=""/4096, &(0x7f0000001940)}, 0x58) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r9}) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10, @ANYBLOB="c2ff51a58590ea94aaaefe0bd57ae1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.131561993s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000001700)='sysfs\x00', 0xb7b804, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='vicodec.0', 0x9) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000180)=0x14) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x205, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000240)=@ll={0x11, 0x10, r2, 0x1, 0xaf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="8a99b36748716ff347e1233b18bfed8a983ccf2f89f6c6871a8af00a87ce732137eb9e49f8a2ccc9af5ed43de5a2e31ba895a411dc5e921d18bbad8cdcc3089eb0ffcb5e842752723f4fc9d4", 0x4c}, {&(0x7f0000000340)="a415123c8ecc5f493a47dd4851f5d6b837864c4e0a9cdceb301c383939bfd02366d83f7a8678ffa0a8eaaecc7097f89fd8abea0965ab9e2bf2d51eb62c6e82ae6ec83e7f4221ec6c607540dee1f1c78f4ef53924503ec1ee1dcc89961e431a8f71b88011331ba26bfff7c403de9b0e949c122f7069f729b25d1f729ed82c1d30254cfa49460c5e3af0386a37082e2f71c09439743c344f6c13d56f343096ae60fe5b825ebbdf4405fd99f41a99a84027d827", 0xb2}, {&(0x7f0000000400)="2338f67d229589d1b557b8f42199c3c0fcd38aa2c78b1c458112ced2f6c2789cfca42df9870500d4c0ae32ffbd044481434bc637b7c381e5cbf796b66e6821b3796438a07e9ced4b200efe3c83b349a994c2cd81a3b750504ce6a56bd1f00c3a44c095c1fe737b77d55038c51b36c67ca99ffe6ab187da9666ed068ec06703d463f36651d9e21a7467d3ddb748557d4149641a76284e6efde18c1c33f4dd17b102a78a26cd3c907b95853033436c7abaa9cbc0993031de6a59f0a76b1ae0b85f2e36be9f15f58ea2250c32", 0xcb}, {&(0x7f0000000500)="539cf71765804e4cb15a1be7dcbfc195d4b47aa86f91c0c051d9ab078c2a156db221b224198feb4c2a37486c612a2444ec6ac0bd", 0x34}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000700)=[{0xfd0, 0x111, 0x0, "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"}], 0xfd0}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0xb, 0x1, 0x8, &(0x7f0000000040)) bind$x25(r5, &(0x7f0000000100), 0x12) listen(r5, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000"], 0x88) accept(r5, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0) 5.089895007s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x0, 0xf, 0xd, {0xd, 0xc, "f476862db4a8653213793e"}}, &(0x7f00000003c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "3e4aa282082ebe17cda6ac2d6286de11f166aa5a6007cdf4721ece3646404f0ff895c0d39002f0bb52fa4dc5099aa70748a3fc8bde195790f9640fc99bf821a51e29b87a0f2554026be2ca6dc774ab36affab4d6b9ca74cbc5acf556"}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x40, 0x16, 0xed, "a0c5e8d7acb0d31709abb1d4c124d299dfd9d5ecea52e1d0257926c751eafb3dbccc5760effe58a80435c79b00f2d78fad23fca04ec930066e9ed01a2e0f351ed0e9f6806c64d112e381b0f527c030ff00df4cfbf255e9f7de870e01539ac3cc8f15e38f8ad2b28ae149d146c4b006825694510e4b89114e3dfdd4876516890986fe9ae1fe9ea8eebbc8f666b1d82b08038c16580fe3b39819b92c5d55825648f61c24a78020d80d9177c151d3be44aeb35cf856234ad160214632e0297fbc488dd8b5d0ebdb36374f88795ab471e6bf1c746c3ea2fd198ef4acccd538d20eb9d50075b5ed214efb0998269e04"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000640)={0x20, 0x81, 0x1, "a2"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "1da1"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "cf28e9"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "e8"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "8c77d0"}}) syz_usb_connect$uac2(0x0, 0xb3, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x4, 0x30, 0x46, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x8, 0x1a, 0xaf}, [@effect_unit={0x11, 0x24, 0x7, 0x3, 0x0, 0x5, [0x1, 0x1, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd0, 0x4, 0x3, 0x59, "6d93b9", "3082"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x9, 0x2, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x4, 0xf7, 0x5, "eb", '3'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4e}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x8f, 0x66, {0x8, 0x25, 0x1, 0x1, 0x0, 0xa7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x0, 0x5, {0x8, 0x25, 0x1, 0x746623dec81f2485, 0xc, 0x5, 0xbd}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xd7, 0x5, 0x9, 0xff}, 0xef, &(0x7f0000000180)={0x5, 0xf, 0xef, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x8, 0x4, 0x8, 0x8}, @generic={0xc1, 0x10, 0x6, "d1979bb4759268cdb37da8d9aaa90b647d94480225428f88014a02085633fe756c4e6e237a4e5a3c3977bb91fd8d4cada04a4925c4da3370a9b77eab08a41b2c23cff5ce61b960c7ad2342ef2c4bd15d080ab6d9d7167c95d828c807104429560a8808be8b93d1fd85a8fb7a318b32c12a908a97bc16e4b816795242be23d34c6a695a08b1d4e4de063f5e2db2c873c42ac4f6191e10f30696b1dc4e8e0d85a8868964df51035c982a6d08d06b23ef984803ce2c33a945e2e6391105b0d9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x80, 0xfd, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "316f7a3b04ad6817f22588018a1b9656"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000400)=""/198}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.949956615s ago: executing program 3 (id=17): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 3.89093014s ago: executing program 3 (id=18): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xd0, 0x0, &(0x7f0000000340)=[@exit_looper, @request_death, @register_looper, @increfs={0x40046304, 0x3}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/73, 0x49, 0x1, 0x3f}, @flat=@binder={0x73622a85, 0x1000}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x7, 0x1, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/46, 0x2e, 0x0, 0x1a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x1}], 0x8b, 0x0, &(0x7f00000004c0)="a782c0a81fe7c2a0755898e16825374a05a6d31f172f114c334204cb3e7d6b60656dbe82f3c91c963a4a360891acfd963d7ce11ca36bd961d2aede896626d6bb4566133db90dc96b56a127191bed14f0af848bd13e568b677752b661aa63e31b8fed9cd676d90608e54a771fdf436cd53a2da544fec32f30ce23ac32604fbd12f8b406ec4019164dd97658"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r7, 0x2) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r9 = socket$kcm(0x29, 0x7, 0x0) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x40800, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYRES8=r9, @ANYRES64=r3, @ANYRESDEC=r3, @ANYRES16=r10, @ANYRES16=r1, @ANYBLOB="06d299c19aab6cbff24d8bb408091c31b41218d7cdc432cb9e7c77d523119db4ca91a3185b055eae7b22976db9fdef5b6b5e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 3.881022489s ago: executing program 4 (id=19): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x32ce970513f32900) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x85}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6e, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) 2.773100316s ago: executing program 4 (id=20): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) 2.700695359s ago: executing program 1 (id=21): landlock_create_ruleset(0x0, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.517571587s ago: executing program 3 (id=22): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x10000401, 0x7fffffff, 0x0, [{0x7, 0xac, 0x3, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0xb, 0x80, 0x0, '\x00', 0x6}, {0x0, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x7e}, {0x6, 0xb, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x5, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x21, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7b}, {0x16, 0x83, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2.513096439s ago: executing program 4 (id=23): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) (fail_nth: 3) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40001) 2.477037104s ago: executing program 1 (id=24): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000002400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000002140)=""/128, 0x0, 0x1, 0x20}, @fda={0x66646185, 0x2, 0x1, 0x22}}, &(0x7f0000002240)}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={@fda={0x66646185, 0x9, 0x2, 0x2d}, @fda={0x66646185, 0xa, 0x2, 0x3d}, @flat=@binder={0x73622a85, 0x10a, 0x1}}, &(0x7f0000002300)}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={@flat=@handle={0x73682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd}, &(0x7f00000023c0)}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x1058, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 2.138226279s ago: executing program 4 (id=25): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e0102030109021200010000000009"], 0x0) syz_usb_connect$uac2(0x0, 0xf8, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x2, 0x40, 0x8, {0x8, 0xb, 0x0, 0x2, 0x1, 0x14, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x100, 0x7, 0x52, 0x8}, [@multiply_unit={0x7, 0x24, 0xc, 0xec, 0xb8, 0x7, 0x5}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x307, 0x86, 0x6, 0x5, 0x5, 0xf1}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x8, "f122a38283"}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x403, 0x4, 0x1, 0x3, 0x200, 0x6}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x1fd, 0x3, 0x6, 0x3, 0x2, 0x4, 0x6, 0x5}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x407, 0x2, 0x2, 0x1, 0x0, 0x5, 0x28, 0x6b}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x82, 0xd, 0x72}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x8, 0x6, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0xf8, "ddf290"}, @as_header={0x10, 0x24, 0x1, 0x98, 0x74, 0x3, 0x4, 0x0, 0x0, 0xf}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x6, 0x2, 'X'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x9, 0x72, {0x8, 0x25, 0x1, 0x2, 0x30, 0x8, 0x1}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x7, 0x6, 0xff, 0xa5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 2.136451236s ago: executing program 3 (id=26): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x0, 0x2, 0x2, {0x6}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004e000903"], 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000140)=""/241) 1.559973809s ago: executing program 2 (id=27): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000002340)=ANY=[]) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000040000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x20000000000000ed, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x4, @void}, 0x10) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) 1.546681899s ago: executing program 1 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x4, 0x2, @loopback, 0x9}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) shutdown(r0, 0x1) 1.296801298s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000001700)='sysfs\x00', 0xb7b804, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)='vicodec.0', 0x9) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x205, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000240)=@ll={0x11, 0x10, r2, 0x1, 0xaf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="8a99b36748716ff347e1233b18bfed8a983ccf2f89f6c6871a8af00a87ce732137eb9e49f8a2ccc9af5ed43de5a2e31ba895a411dc5e921d18bbad8cdcc3089eb0ffcb5e842752723f4fc9d4", 0x4c}, {&(0x7f0000000340)="a415123c8ecc5f493a47dd4851f5d6b837864c4e0a9cdceb301c383939bfd02366d83f7a8678ffa0a8eaaecc7097f89fd8abea0965ab9e2bf2d51eb62c6e82ae6ec83e7f4221ec6c607540dee1f1c78f4ef53924503ec1ee1dcc89961e431a8f71b88011331ba26bfff7c403de9b0e949c122f7069f729b25d1f729ed82c1d30254cfa49460c5e3af0386a37082e2f71c09439743c344f6c13d56f343096ae60fe5b825ebbdf4405fd99f41a99a84027d827", 0xb2}, {&(0x7f0000000400)="2338f67d229589d1b557b8f42199c3c0fcd38aa2c78b1c458112ced2f6c2789cfca42df9870500d4c0ae32ffbd044481434bc637b7c381e5cbf796b66e6821b3796438a07e9ced4b200efe3c83b349a994c2cd81a3b750504ce6a56bd1f00c3a44c095c1fe737b77d55038c51b36c67ca99ffe6ab187da9666ed068ec06703d463f36651d9e21a7467d3ddb748557d4149641a76284e6efde18c1c33f4dd17b102a78a26cd3c907b95853033436c7abaa9cbc0993031de6a59f0a76b1ae0b85f2e36be9f15f58ea2250c32", 0xcb}, {&(0x7f0000000500)="539cf71765804e4cb15a1be7dcbfc195d4b47aa86f91c0c051d9ab078c2a156db221b224198feb4c2a37486c612a2444ec6ac0bd", 0x34}, {&(0x7f0000000580)="9829ba7f2b24fc00d5f3b2847867195ae3c81f355aec7a694911ad86780c3214485b88d5361b921a04b61463c7f3680f39713ea7a12096310b47af4cee7d024549716fb1b97fbe1f7569adc885c4bf394a09af246478e032f5117f0d876ff7376f718eb613b402699bd65ac6f123799b94313145306be3114be1d104168e86514dbcb6809176179794fcdcd16a6b9d3a7c5680aa9467315ecedfa84ee265259bc4e5dd687ecdfe3b22093a9e057920dcca55a4fd40d7f6a0e708e5d19fa142a13a5681633abdf0e3a042e618816a6d51d8dd19ab3577", 0xd6}], 0x5, &(0x7f0000000700)=[{0xfd0, 0x111, 0x0, "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"}], 0xfd0}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0xb, 0x1, 0x8, &(0x7f0000000040)) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000"], 0x88) accept(r4, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0) 209.438919ms ago: executing program 4 (id=30): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x1000000000000, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000000010005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x327c41, 0x0) socket(0x400000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, 0x0) write$char_usb(r3, &(0x7f0000000800)='(', 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xb92}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) 121.086358ms ago: executing program 0 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000001700)='sysfs\x00', 0xb7b804, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='vicodec.0', 0x9) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000180)=0x14) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x205, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000240)=@ll={0x11, 0x10, r2, 0x1, 0xaf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="8a99b36748716ff347e1233b18bfed8a983ccf2f89f6c6871a8af00a87ce732137eb9e49f8a2ccc9af5ed43de5a2e31ba895a411dc5e921d18bbad8cdcc3089eb0ffcb5e842752723f4fc9d4", 0x4c}, {&(0x7f0000000340)="a415123c8ecc5f493a47dd4851f5d6b837864c4e0a9cdceb301c383939bfd02366d83f7a8678ffa0a8eaaecc7097f89fd8abea0965ab9e2bf2d51eb62c6e82ae6ec83e7f4221ec6c607540dee1f1c78f4ef53924503ec1ee1dcc89961e431a8f71b88011331ba26bfff7c403de9b0e949c122f7069f729b25d1f729ed82c1d30254cfa49460c5e3af0386a37082e2f71c09439743c344f6c13d56f343096ae60fe5b825ebbdf4405fd99f41a99a84027d827", 0xb2}, {&(0x7f0000000400)="2338f67d229589d1b557b8f42199c3c0fcd38aa2c78b1c458112ced2f6c2789cfca42df9870500d4c0ae32ffbd044481434bc637b7c381e5cbf796b66e6821b3796438a07e9ced4b200efe3c83b349a994c2cd81a3b750504ce6a56bd1f00c3a44c095c1fe737b77d55038c51b36c67ca99ffe6ab187da9666ed068ec06703d463f36651d9e21a7467d3ddb748557d4149641a76284e6efde18c1c33f4dd17b102a78a26cd3c907b95853033436c7abaa9cbc0993031de6a59f0a76b1ae0b85f2e36be9f15f58ea2250c32", 0xcb}, {&(0x7f0000000500)="539cf71765804e4cb15a1be7dcbfc195d4b47aa86f91c0c051d9ab078c2a156db221b224198feb4c2a37486c612a2444ec6ac0bd", 0x34}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000700)=[{0xfd0, 0x111, 0x0, "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"}], 0xfd0}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0xb, 0x1, 0x8, &(0x7f0000000040)) bind$x25(r5, &(0x7f0000000100), 0x12) listen(r5, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000"], 0x88) accept(r5, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0) 0s ago: executing program 1 (id=32): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) kernel console output (not intermixed with test programs): 51.759612][ T30] audit: type=1400 audit(1787004667.644:120): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.930476][ T30] audit: type=1400 audit(1787004667.814:121): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.971387][ T30] audit: type=1400 audit(1787004667.854:122): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.135357][ T30] audit: type=1400 audit(1787004668.024:123): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.187059][ T30] audit: type=1400 audit(1787004668.074:124): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.351972][ T30] audit: type=1400 audit(1787004668.244:125): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.398377][ T30] audit: type=1400 audit(1787004668.284:126): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 59.051285][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 59.051298][ T30] audit: type=1400 audit(1787004674.934:129): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.081237][ T30] audit: type=1400 audit(1787004674.964:130): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.083765][ T5580] cgroup: Unknown subsys name 'net' [ 59.109865][ T30] audit: type=1400 audit(1787004674.994:131): avc: denied { unmount } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.214957][ T5580] cgroup: Unknown subsys name 'cpuset' [ 59.222442][ T5580] cgroup: Unknown subsys name 'rlimit' [ 59.350101][ T30] audit: type=1400 audit(1787004675.234:132): avc: denied { setattr } for pid=5580 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.374045][ T30] audit: type=1400 audit(1787004675.234:133): avc: denied { create } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.399995][ T30] audit: type=1400 audit(1787004675.234:134): avc: denied { write } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.420484][ T30] audit: type=1400 audit(1787004675.234:135): avc: denied { read } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.440904][ T30] audit: type=1400 audit(1787004675.234:136): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.466227][ T30] audit: type=1400 audit(1787004675.234:137): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.491738][ T5582] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.501362][ T30] audit: type=1400 audit(1787004675.384:138): avc: denied { relabelto } for pid=5582 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.447120][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.525650][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.534977][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.540255][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.542637][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.549995][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.562066][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.571846][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.579976][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.580034][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.587486][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.594717][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.602249][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.609323][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.616578][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.622573][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.629760][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.636491][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.645428][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.653588][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.657606][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.665333][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.671764][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.677758][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.685074][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.702672][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.888842][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.896021][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.903165][ T5594] bridge_slave_0: entered allmulticast mode [ 63.909783][ T5594] bridge_slave_0: entered promiscuous mode [ 63.941654][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.948764][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.955976][ T5594] bridge_slave_1: entered allmulticast mode [ 63.962555][ T5594] bridge_slave_1: entered promiscuous mode [ 63.972524][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.979582][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.986897][ T5591] bridge_slave_0: entered allmulticast mode [ 63.993592][ T5591] bridge_slave_0: entered promiscuous mode [ 64.017080][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.024251][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.031306][ T5591] bridge_slave_1: entered allmulticast mode [ 64.038185][ T5591] bridge_slave_1: entered promiscuous mode [ 64.082081][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.116804][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.125983][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.133348][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.140420][ T5596] bridge_slave_0: entered allmulticast mode [ 64.147537][ T5596] bridge_slave_0: entered promiscuous mode [ 64.155975][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.170713][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.177987][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.185086][ T5595] bridge_slave_0: entered allmulticast mode [ 64.191640][ T5595] bridge_slave_0: entered promiscuous mode [ 64.204624][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.211707][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.218915][ T5596] bridge_slave_1: entered allmulticast mode [ 64.225973][ T5596] bridge_slave_1: entered promiscuous mode [ 64.233825][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.242956][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.250023][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.257376][ T5592] bridge_slave_0: entered allmulticast mode [ 64.264016][ T5592] bridge_slave_0: entered promiscuous mode [ 64.270647][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.277710][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.284804][ T5595] bridge_slave_1: entered allmulticast mode [ 64.291357][ T5595] bridge_slave_1: entered promiscuous mode [ 64.315410][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.322558][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.329608][ T5592] bridge_slave_1: entered allmulticast mode [ 64.336306][ T5592] bridge_slave_1: entered promiscuous mode [ 64.349431][ T5594] team0: Port device team_slave_0 added [ 64.379268][ T5594] team0: Port device team_slave_1 added [ 64.386829][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.397838][ T5591] team0: Port device team_slave_0 added [ 64.411514][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.427663][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.437944][ T5591] team0: Port device team_slave_1 added [ 64.445232][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.455711][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.489876][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.511618][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.518625][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.544765][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.575185][ T5595] team0: Port device team_slave_0 added [ 64.585339][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.592343][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.618319][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.630209][ T5596] team0: Port device team_slave_0 added [ 64.637892][ T5596] team0: Port device team_slave_1 added [ 64.643885][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.650791][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.676672][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.689142][ T5592] team0: Port device team_slave_0 added [ 64.696742][ T5595] team0: Port device team_slave_1 added [ 64.703382][ T5597] Bluetooth: hci0: command tx timeout [ 64.722625][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.729572][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.755629][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.768546][ T5592] team0: Port device team_slave_1 added [ 64.780759][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.781848][ T5602] Bluetooth: hci2: command tx timeout [ 64.792941][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.793791][ T5604] Bluetooth: hci3: command tx timeout [ 64.819856][ T5612] Bluetooth: hci1: command tx timeout [ 64.825189][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.830565][ T5597] Bluetooth: hci4: command tx timeout [ 64.869739][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.876765][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.902775][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.913900][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.920863][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.946824][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.959165][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.966131][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.992011][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.009222][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.016223][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.042285][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.069733][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.076767][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.102724][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.133517][ T5594] hsr_slave_0: entered promiscuous mode [ 65.139537][ T5594] hsr_slave_1: entered promiscuous mode [ 65.164431][ T5591] hsr_slave_0: entered promiscuous mode [ 65.170366][ T5591] hsr_slave_1: entered promiscuous mode [ 65.176589][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 65.182462][ T5591] Cannot create hsr debugfs directory [ 65.209894][ T5595] hsr_slave_0: entered promiscuous mode [ 65.215917][ T5595] hsr_slave_1: entered promiscuous mode [ 65.221871][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 65.227593][ T5595] Cannot create hsr debugfs directory [ 65.276891][ T5592] hsr_slave_0: entered promiscuous mode [ 65.283070][ T5592] hsr_slave_1: entered promiscuous mode [ 65.288870][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 65.294886][ T5592] Cannot create hsr debugfs directory [ 65.303596][ T5596] hsr_slave_0: entered promiscuous mode [ 65.309593][ T5596] hsr_slave_1: entered promiscuous mode [ 65.315534][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 65.321232][ T5596] Cannot create hsr debugfs directory [ 65.636975][ T5594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.647030][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.654749][ T5594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.664225][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.672727][ T5594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.683481][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.690987][ T5594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.700090][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.743834][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.750346][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.762621][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.773684][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.784594][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.793582][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.801200][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.810363][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.818331][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.828023][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.880218][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.889637][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.902614][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.910963][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.918567][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.927064][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.934860][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.943609][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.020149][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.028782][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.044738][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.054705][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.062515][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.070534][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.092845][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.101292][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.133771][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.170918][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.178111][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.187494][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.195186][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.203839][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.211386][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.220736][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.235031][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.244439][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.266142][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.288924][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.306581][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.313927][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.330581][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.337703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.357441][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.364506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.387777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.394843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.417791][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.494221][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.504234][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.515272][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 66.515283][ T30] audit: type=1400 audit(1787004682.404:155): avc: denied { sys_module } for pid=5594 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.520826][ T5591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.553173][ T5591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.589460][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.596593][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.607648][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.614767][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.673628][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.688607][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.735717][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.742844][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.779862][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.786997][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.797668][ T5597] Bluetooth: hci0: command tx timeout [ 66.820205][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.850141][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.857270][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.869935][ T5597] Bluetooth: hci2: command tx timeout [ 66.870097][ T5602] Bluetooth: hci3: command tx timeout [ 66.877061][ T5597] Bluetooth: hci4: command tx timeout [ 66.881503][ T5602] Bluetooth: hci1: command tx timeout [ 66.910149][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.917266][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.126616][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.279733][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.376342][ T5591] veth0_vlan: entered promiscuous mode [ 67.401601][ T5591] veth1_vlan: entered promiscuous mode [ 67.490898][ T5591] veth0_macvtap: entered promiscuous mode [ 67.514479][ T5591] veth1_macvtap: entered promiscuous mode [ 67.593016][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.609004][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.739405][ T5594] veth0_vlan: entered promiscuous mode [ 67.758721][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.783911][ T5594] veth1_vlan: entered promiscuous mode [ 67.842197][ T4358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.857876][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.875919][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.885786][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.888625][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.919207][ T5594] veth0_macvtap: entered promiscuous mode [ 67.938555][ T5594] veth1_macvtap: entered promiscuous mode [ 67.972160][ T5595] veth0_vlan: entered promiscuous mode [ 67.974685][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.989468][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.996055][ T5592] veth0_vlan: entered promiscuous mode [ 68.009533][ T5592] veth1_vlan: entered promiscuous mode [ 68.023530][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.031225][ T30] audit: type=1400 audit(1787004683.914:156): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.FUr66Q/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.048819][ T5596] veth0_vlan: entered promiscuous mode [ 68.059816][ T30] audit: type=1400 audit(1787004683.914:157): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.096387][ T5595] veth1_vlan: entered promiscuous mode [ 68.102562][ T30] audit: type=1400 audit(1787004683.914:158): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.FUr66Q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.115575][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.129944][ T30] audit: type=1400 audit(1787004683.914:159): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.158540][ T30] audit: type=1400 audit(1787004683.914:160): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.FUr66Q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.163092][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.187032][ T30] audit: type=1400 audit(1787004683.924:161): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.FUr66Q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.225390][ T30] audit: type=1400 audit(1787004683.924:162): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.247756][ T5596] veth1_vlan: entered promiscuous mode [ 68.253417][ T30] audit: type=1400 audit(1787004683.954:163): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.278443][ T5591] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.282985][ T30] audit: type=1400 audit(1787004683.974:164): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="gadgetfs" ino=6978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.321273][ T4358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.332077][ T4358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.359765][ T5592] veth0_macvtap: entered promiscuous mode [ 68.393673][ T5592] veth1_macvtap: entered promiscuous mode [ 68.414022][ T682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.423626][ T682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.444260][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.462336][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.475834][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.484156][ T5595] veth0_macvtap: entered promiscuous mode [ 68.498609][ T5596] veth0_macvtap: entered promiscuous mode [ 68.510612][ T5595] veth1_macvtap: entered promiscuous mode [ 68.533512][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.541319][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.545046][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.561026][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.563365][ T5596] veth1_macvtap: entered promiscuous mode [ 68.613699][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.628028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.636412][ T5696] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.642111][ T4358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.654624][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.683618][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.712687][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.790666][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.804693][ T5696] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 68.812584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.829797][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.841049][ T5696] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 68.852187][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.861244][ T682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.872293][ T5602] Bluetooth: hci0: command tx timeout [ 68.879372][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.887602][ T5696] usb 2-1: Product: syz [ 68.893858][ T5696] usb 2-1: Manufacturer: syz [ 68.899068][ T5696] usb 2-1: SerialNumber: syz [ 68.902789][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.907448][ T5696] usb 2-1: config 0 descriptor?? [ 68.912082][ T4358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.927024][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.932892][ T4358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942187][ T5602] Bluetooth: hci1: command tx timeout [ 68.947724][ T5604] Bluetooth: hci4: command tx timeout [ 68.949202][ T5602] Bluetooth: hci3: command tx timeout [ 68.954284][ T5604] Bluetooth: hci2: command tx timeout [ 68.984696][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.993080][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.073762][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.092529][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.112301][ T3372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.130191][ T3372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.163167][ T3372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.231533][ T5782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.244247][ T3372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.285551][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.309918][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.317305][ T682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.317342][ T682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.317372][ T682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.328035][ T4358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.499192][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.527660][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.776146][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 69.864883][ T10] usb 5-1: config 0 has no interfaces? [ 69.908847][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.189183][ T10] usb 5-1: config 0 descriptor?? [ 70.496892][ T5806] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7'. [ 70.941929][ T5604] Bluetooth: hci0: command tx timeout [ 70.973203][ T3372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.023042][ T5604] Bluetooth: hci3: command tx timeout [ 71.025574][ T5612] Bluetooth: hci2: command tx timeout [ 71.028573][ T5604] Bluetooth: hci4: command tx timeout [ 71.033872][ T5612] Bluetooth: hci1: command tx timeout [ 71.149778][ T5680] usb 2-1: USB disconnect, device number 2 [ 71.873776][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 71.873790][ T30] audit: type=1400 audit(1787004687.764:215): avc: denied { ioctl } for pid=5818 comm="syz.1.10" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.894518][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 71.958476][ T30] audit: type=1400 audit(1787004687.774:216): avc: denied { name_bind } for pid=5819 comm="syz.0.9" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 71.993921][ T5825] Zero length message leads to an empty skb [ 72.013507][ T30] audit: type=1400 audit(1787004687.774:217): avc: denied { node_bind } for pid=5819 comm="syz.0.9" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.068092][ T30] audit: type=1400 audit(1787004687.814:218): avc: denied { create } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.101006][ T5823] ve: renamed from veth0_vlan (while UP) [ 72.106808][ T30] audit: type=1400 audit(1787004687.834:219): avc: denied { setopt } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.162992][ T30] audit: type=1400 audit(1787004687.844:220): avc: denied { listen } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.216019][ T30] audit: type=1400 audit(1787004687.904:221): avc: denied { ioctl } for pid=5827 comm="syz.3.11" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.283242][ T5834] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13'. [ 72.296668][ T30] audit: type=1400 audit(1787004687.984:222): avc: denied { kexec_image_load } for pid=5822 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 72.372214][ T30] audit: type=1400 audit(1787004688.074:223): avc: denied { write } for pid=5830 comm="syz.3.12" name="demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.449940][ T30] audit: type=1400 audit(1787004688.074:224): avc: denied { open } for pid=5830 comm="syz.3.12" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.661802][ T5724] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.453853][ T5680] usb 5-1: USB disconnect, device number 2 [ 73.521823][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.554810][ T5724] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 73.605953][ T5724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.637740][ T5724] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 73.670755][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.692555][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 73.704362][ T5724] usb 3-1: Product: syz [ 73.711595][ T5724] usb 3-1: Manufacturer: syz [ 73.726845][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 73.742059][ T5724] usb 3-1: SerialNumber: syz [ 73.759644][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 73.841368][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.180332][ T5863] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 74.652786][ T5724] usb 3-1: config 0 descriptor?? [ 74.707312][ T24] usb 1-1: probing VID:PID(0424:012C) [ 74.807794][ T24] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 74.851543][ T24] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 74.882817][ T24] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 74.884770][ T5873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 74.912098][ T24] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 74.918910][ T24] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 74.927366][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 75.000365][ T5877] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 75.008862][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21'. [ 75.017838][ T5877] dummy0: entered promiscuous mode [ 75.128378][ T5882] FAULT_INJECTION: forcing a failure. [ 75.128378][ T5882] name failslab, interval 1, probability 0, space 0, times 1 [ 75.150303][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.4.23 Not tainted syzkaller #0 PREEMPT(full) [ 75.150327][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 75.150336][ T5882] Call Trace: [ 75.150344][ T5882] [ 75.150351][ T5882] dump_stack_lvl+0x100/0x190 [ 75.150378][ T5882] should_fail_ex.cold+0x5/0xa [ 75.150401][ T5882] should_failslab+0xc2/0x120 [ 75.150425][ T5882] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 75.150448][ T5882] ? __d_alloc+0x35/0xa50 [ 75.150473][ T5882] __d_alloc+0x35/0xa50 [ 75.150496][ T5882] d_alloc_pseudo+0x1c/0xc0 [ 75.150521][ T5882] alloc_file_pseudo+0x118/0x290 [ 75.150546][ T5882] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 75.150566][ T5882] ? inode_init_always_gfp+0xc98/0xfb0 [ 75.150590][ T5882] sock_alloc_file+0x50/0x210 [ 75.150615][ T5882] do_accept+0x242/0x530 [ 75.150634][ T5882] ? do_raw_spin_lock+0x128/0x260 [ 75.150658][ T5882] ? __pfx_do_accept+0x10/0x10 [ 75.150689][ T5882] __sys_accept4+0x108/0x200 [ 75.150710][ T5882] ? __pfx___sys_accept4+0x10/0x10 [ 75.150729][ T5882] ? __pfx_ksys_write+0x10/0x10 [ 75.150749][ T5882] __x64_sys_accept4+0x96/0x100 [ 75.150767][ T5882] ? lockdep_hardirqs_on+0x78/0x100 [ 75.150787][ T5882] do_syscall_64+0x115/0x870 [ 75.150805][ T5882] ? clear_bhb_loop+0x70/0xc0 [ 75.150825][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.150842][ T5882] RIP: 0033:0x7f506119e0d9 [ 75.150858][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.150874][ T5882] RSP: 002b:00007f5062064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 75.150892][ T5882] RAX: ffffffffffffffda RBX: 00007f5061425fa0 RCX: 00007f506119e0d9 [ 75.150903][ T5882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 75.150913][ T5882] RBP: 00007f5062064090 R08: 0000000000000000 R09: 0000000000000000 [ 75.150923][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.150933][ T5882] R13: 00007f5061426038 R14: 00007f5061425fa0 R15: 00007fffea608878 [ 75.150957][ T5882] [ 75.393073][ T24] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 75.430005][ T5889] binder: BINDER_SET_CONTEXT_MGR already set [ 75.438860][ T5889] binder: 5883:5889 ioctl 4018620d 200000000040 returned -16 [ 75.456084][ T9] usb 3-1: USB disconnect, device number 2 [ 75.595882][ T24] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 75.641823][ T5680] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.671817][ T5786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.804132][ T5680] usb 5-1: Using ep0 maxpacket: 32 [ 75.810884][ T5680] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 75.821433][ T5680] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.831544][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 75.838258][ T5786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.849068][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.860096][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.870182][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.878199][ T5786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.890981][ T5680] usb 5-1: Product: syz [ 75.895173][ T5680] usb 5-1: Manufacturer: syz [ 75.899744][ T5680] usb 5-1: SerialNumber: syz [ 75.905012][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.915433][ T5680] usb 5-1: config 0 descriptor?? [ 75.924017][ T5786] usb 4-1: config 0 descriptor?? [ 76.008306][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.033590][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.067481][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 76.148246][ T5890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.162863][ T5890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.182595][ T9] usb 5-1: USB disconnect, device number 3 [ 76.284494][ T5689] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.780571][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 76.807693][ T5786] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5 [ 77.137529][ T24] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 77.318344][ T5689] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.329102][ T5689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.341225][ T5689] usb 3-1: config 0 has no interfaces? [ 77.348107][ T5724] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 77.362221][ T24] usb 1-1: USB disconnect, device number 2 [ 77.368596][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.378473][ T5724] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 77.390178][ T5689] usb 3-1: config 0 descriptor?? [ 77.429795][ T5786] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 77.461615][ T24] USB vub300 remote SDIO host controller[0] now disconnected [ 77.527379][ T5786] usb 4-1: USB disconnect, device number 2 [ 77.927763][ T5938] netlink: 52 bytes leftover after parsing attributes in process `syz.1.32'. [ 78.381896][ C1] ------------[ cut here ]------------ [ 78.387837][ C1] do not call blocking ops when !TASK_RUNNING; state=1 set at [] snd_rawmidi_write+0x44d/0xc60 [ 78.399789][ C1] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#1: syz.0.31/5929 [ 78.409261][ C1] Modules linked in: [ 78.413523][ C1] CPU: 1 UID: 0 PID: 5929 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 78.422661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 78.432727][ C1] RIP: 0010:__might_sleep+0x97/0xc0 [ 78.437924][ C1] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 81 6f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 fd 3b a5 00 eb 9f 89 74 24 04 e8 22 3c a5 [ 78.457583][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00010282 [ 78.463668][ C1] RAX: dffffc0000000000 RBX: ffffffff8beddf40 RCX: ffffffff895244cd [ 78.471648][ C1] RDX: ffffffff895244cd RSI: 0000000000000001 RDI: ffffffff91454550 [ 78.479638][ C1] RBP: 0000000000001187 R08: 0000000000000007 R09: 0000000000000000 [ 78.487618][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801ff02540 [ 78.495595][ C1] R13: 1ffff9200014118e R14: ffffffff88b891a0 R15: 0000000000000001 [ 78.503579][ C1] FS: 00007f2d79dc66c0(0000) GS:ffff888123cde000(0000) knlGS:0000000000000000 [ 78.512517][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.519100][ C1] CR2: 0000200000006000 CR3: 000000007719f000 CR4: 00000000003526f0 [ 78.527078][ C1] Call Trace: [ 78.530355][ C1] [ 78.533205][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 78.538579][ C1] mmc_free_host+0x19/0x30 [ 78.543015][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 78.549196][ C1] call_timer_fn+0x19a/0x610 [ 78.553796][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 78.558903][ C1] ? __run_timers+0x747/0xb00 [ 78.563579][ C1] ? rcu_is_watching+0x12/0xc0 [ 78.568344][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 78.575028][ C1] __run_timers+0x757/0xb00 [ 78.579536][ C1] ? __pfx___run_timers+0x10/0x10 [ 78.584583][ C1] ? ktime_get+0x9f/0x320 [ 78.588915][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 78.593945][ C1] run_timer_base+0x114/0x190 [ 78.598626][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 78.603826][ C1] run_timer_softirq+0x1a/0x50 [ 78.608585][ C1] handle_softirqs+0x1ea/0x9b0 [ 78.613351][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 78.618644][ C1] ? _raw_spin_unlock+0x28/0x50 [ 78.623498][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 78.629136][ C1] __irq_exit_rcu+0x162/0x210 [ 78.633814][ C1] irq_exit_rcu+0x9/0x30 [ 78.638056][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 78.643690][ C1] [ 78.646613][ C1] [ 78.649542][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 78.655525][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 78.661954][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 a0 26 f6 48 89 df e8 1e f0 26 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 fd 15 f6 65 8b 05 ee b6 c4 08 85 c0 74 16 5b [ 78.681615][ C1] RSP: 0018:ffffc90004ea78d8 EFLAGS: 00000246 [ 78.687691][ C1] RAX: 0000000000000002 RBX: ffffffff9bbb3df8 RCX: 0000000000000000 [ 78.695678][ C1] RDX: 0000000000000000 RSI: ffffffff8e3acef2 RDI: ffffffff8c600380 [ 78.703658][ C1] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 78.711634][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff920009d4f22 [ 78.719611][ C1] R13: ffffc90004ea7a40 R14: 0000000000000000 R15: ffffffff9bbb3df8 [ 78.727595][ C1] __debug_object_init+0x2de/0x3d0 [ 78.732731][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 78.738361][ C1] ? __lock_acquire+0x49f/0x1a40 [ 78.743301][ C1] ? __pfx_process_timeout+0x10/0x10 [ 78.748584][ C1] timer_init_key_on_stack+0x2e/0x120 [ 78.753968][ C1] schedule_timeout+0x115/0x280 [ 78.758828][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 78.764214][ C1] ? snd_rawmidi_write+0x488/0xc60 [ 78.769328][ C1] ? rcu_is_watching+0x12/0xc0 [ 78.774099][ C1] ? snd_rawmidi_write+0x44d/0xc60 [ 78.779204][ C1] snd_rawmidi_write+0x492/0xc60 [ 78.784153][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 78.789619][ C1] ? avc_policy_seqno+0x9/0x20 [ 78.794379][ C1] ? selinux_file_permission+0x8f/0x6d0 [ 78.799935][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 78.805748][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 78.811116][ C1] ? security_file_permission+0x76/0x210 [ 78.816753][ C1] ? rw_verify_area+0xce/0x6d0 [ 78.821511][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 78.826969][ C1] vfs_writev+0x5ed/0xdd0 [ 78.831305][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 78.836167][ C1] ? __fget_files+0x21f/0x3d0 [ 78.840839][ C1] ? do_writev+0x28a/0x340 [ 78.845254][ C1] do_writev+0x28a/0x340 [ 78.849493][ C1] ? __pfx_do_writev+0x10/0x10 [ 78.854261][ C1] do_syscall_64+0x115/0x870 [ 78.858846][ C1] ? clear_bhb_loop+0x70/0xc0 [ 78.863521][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.869408][ C1] RIP: 0033:0x7f2d78f9e0d9 [ 78.873821][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.893645][ C1] RSP: 002b:00007f2d79dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 78.902077][ C1] RAX: ffffffffffffffda RBX: 00007f2d79225fa0 RCX: 00007f2d78f9e0d9 [ 78.910048][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 78.918023][ C1] RBP: 00007f2d79035024 R08: 0000000000000000 R09: 0000000000000000 [ 78.925999][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.933975][ C1] R13: 00007f2d79226038 R14: 00007f2d79225fa0 R15: 00007fff3abac738 [ 78.941958][ C1] [ 78.944970][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.952222][ C1] CPU: 1 UID: 0 PID: 5929 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 78.961297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 78.971334][ C1] Call Trace: [ 78.974596][ C1] [ 78.977419][ C1] dump_stack_lvl+0x100/0x190 [ 78.982083][ C1] vpanic+0x552/0x970 [ 78.986040][ C1] ? __pfx_vpanic+0x10/0x10 [ 78.990528][ C1] panic+0xd1/0xe0 [ 78.994230][ C1] ? __pfx_panic+0x10/0x10 [ 78.998622][ C1] ? check_panic_on_warn+0x1f/0x90 [ 79.003709][ C1] check_panic_on_warn.cold+0x19/0x34 [ 79.009054][ C1] ? __might_sleep+0x94/0xc0 [ 79.013617][ C1] __warn.cold+0x191/0x318 [ 79.018016][ C1] __report_bug+0x30f/0x440 [ 79.022491][ C1] ? __might_sleep+0x94/0xc0 [ 79.027055][ C1] ? __pfx___report_bug+0x10/0x10 [ 79.032051][ C1] ? snd_rawmidi_write+0x44d/0xc60 [ 79.037135][ C1] ? snd_rawmidi_write+0x44d/0xc60 [ 79.042224][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 79.048877][ C1] ? __timer_delete+0xec/0x1b0 [ 79.053616][ C1] report_bug_entry+0xe1/0x290 [ 79.058360][ C1] ? __might_sleep+0x97/0xc0 [ 79.062924][ C1] handle_bug+0x1cd/0x2a0 [ 79.067230][ C1] exc_invalid_op+0x17/0x50 [ 79.071706][ C1] asm_exc_invalid_op+0x1a/0x20 [ 79.076535][ C1] RIP: 0010:__might_sleep+0x97/0xc0 [ 79.081706][ C1] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 81 6f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 fd 3b a5 00 eb 9f 89 74 24 04 e8 22 3c a5 [ 79.101292][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00010282 [ 79.107333][ C1] RAX: dffffc0000000000 RBX: ffffffff8beddf40 RCX: ffffffff895244cd [ 79.115276][ C1] RDX: ffffffff895244cd RSI: 0000000000000001 RDI: ffffffff91454550 [ 79.123225][ C1] RBP: 0000000000001187 R08: 0000000000000007 R09: 0000000000000000 [ 79.131168][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801ff02540 [ 79.139108][ C1] R13: 1ffff9200014118e R14: ffffffff88b891a0 R15: 0000000000000001 [ 79.147050][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 79.153707][ C1] ? snd_rawmidi_write+0x44d/0xc60 [ 79.158799][ C1] ? snd_rawmidi_write+0x44d/0xc60 [ 79.163884][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 79.169241][ C1] mmc_free_host+0x19/0x30 [ 79.173626][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 79.179767][ C1] call_timer_fn+0x19a/0x610 [ 79.184332][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 79.189433][ C1] ? __run_timers+0x747/0xb00 [ 79.194086][ C1] ? rcu_is_watching+0x12/0xc0 [ 79.198838][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 79.205491][ C1] __run_timers+0x757/0xb00 [ 79.209972][ C1] ? __pfx___run_timers+0x10/0x10 [ 79.214973][ C1] ? ktime_get+0x9f/0x320 [ 79.219275][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 79.224281][ C1] run_timer_base+0x114/0x190 [ 79.228932][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 79.234106][ C1] run_timer_softirq+0x1a/0x50 [ 79.238852][ C1] handle_softirqs+0x1ea/0x9b0 [ 79.243604][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 79.248875][ C1] ? _raw_spin_unlock+0x28/0x50 [ 79.253705][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 79.259329][ C1] __irq_exit_rcu+0x162/0x210 [ 79.263991][ C1] irq_exit_rcu+0x9/0x30 [ 79.268212][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 79.273819][ C1] [ 79.276723][ C1] [ 79.279626][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.285577][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 79.291982][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 a0 26 f6 48 89 df e8 1e f0 26 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 fd 15 f6 65 8b 05 ee b6 c4 08 85 c0 74 16 5b [ 79.311563][ C1] RSP: 0018:ffffc90004ea78d8 EFLAGS: 00000246 [ 79.317621][ C1] RAX: 0000000000000002 RBX: ffffffff9bbb3df8 RCX: 0000000000000000 [ 79.325567][ C1] RDX: 0000000000000000 RSI: ffffffff8e3acef2 RDI: ffffffff8c600380 [ 79.333510][ C1] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 79.341451][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff920009d4f22 [ 79.349401][ C1] R13: ffffc90004ea7a40 R14: 0000000000000000 R15: ffffffff9bbb3df8 [ 79.357352][ C1] __debug_object_init+0x2de/0x3d0 [ 79.362445][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 79.368056][ C1] ? __lock_acquire+0x49f/0x1a40 [ 79.372970][ C1] ? __pfx_process_timeout+0x10/0x10 [ 79.378228][ C1] timer_init_key_on_stack+0x2e/0x120 [ 79.383586][ C1] schedule_timeout+0x115/0x280 [ 79.388420][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 79.393772][ C1] ? snd_rawmidi_write+0x488/0xc60 [ 79.398859][ C1] ? rcu_is_watching+0x12/0xc0 [ 79.403617][ C1] ? snd_rawmidi_write+0x44d/0xc60 [ 79.408710][ C1] snd_rawmidi_write+0x492/0xc60 [ 79.413627][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 79.419064][ C1] ? avc_policy_seqno+0x9/0x20 [ 79.423812][ C1] ? selinux_file_permission+0x8f/0x6d0 [ 79.429346][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 79.435135][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 79.440507][ C1] ? security_file_permission+0x76/0x210 [ 79.446131][ C1] ? rw_verify_area+0xce/0x6d0 [ 79.450877][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 79.456318][ C1] vfs_writev+0x5ed/0xdd0 [ 79.460633][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 79.465484][ C1] ? __fget_files+0x21f/0x3d0 [ 79.470137][ C1] ? do_writev+0x28a/0x340 [ 79.474530][ C1] do_writev+0x28a/0x340 [ 79.478751][ C1] ? __pfx_do_writev+0x10/0x10 [ 79.483495][ C1] do_syscall_64+0x115/0x870 [ 79.488060][ C1] ? clear_bhb_loop+0x70/0xc0 [ 79.492710][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.498587][ C1] RIP: 0033:0x7f2d78f9e0d9 [ 79.502994][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.522573][ C1] RSP: 002b:00007f2d79dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 79.530959][ C1] RAX: ffffffffffffffda RBX: 00007f2d79225fa0 RCX: 00007f2d78f9e0d9 [ 79.538903][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 79.546855][ C1] RBP: 00007f2d79035024 R08: 0000000000000000 R09: 0000000000000000 [ 79.554805][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.562747][ C1] R13: 00007f2d79226038 R14: 00007f2d79225fa0 R15: 00007fff3abac738 [ 79.570696][ C1] [ 79.573909][ C1] Kernel Offset: disabled [ 79.578208][ C1] Rebooting in 86400 seconds..