last executing test programs: 44.902881241s ago: executing program 2 (id=255): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) syz_usb_connect(0x2, 0x2f3, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074ae8440f20c5062bd87010203010902e10201000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000140)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 43.933968574s ago: executing program 2 (id=269): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ftruncate(r2, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000438000/0x3000)=nil, 0x400000, 0x2, 0x2}) 43.229604021s ago: executing program 2 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="330ab4a20c8316ef2c8efa7694838d530000000000728d91781463fca948372deddfdf1366c7cc1d8cf1a6b2ce98aa7114012a281e7b3cc7c3be22726f60d24663074dd2798253c9cc7d4831601a534d2016ad0000000000000000", 0x2a) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 43.021466756s ago: executing program 2 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000100000000000000000000000000d1947dcd8c4b5981145eb656abdcaf7e5e084d7bd1f2c4e5bc1c5623c9643d6a0e965829784dd62f6c427d307b53249eddd3ffeec02117282bdcc4d1a4440229b17e73f96a201ecadd9d1380129fdad38fcaba9e19540774145108eb896167446ddb6f529291d7b0d96e9fed6eea26c8fc54cbea4d6c3e4b9cb1bdbef0ad1afdb4fe32eaff0e4e613405", @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) recvmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1, &(0x7f0000000200)=""/143, 0x8f}, 0x4c2e27b5}], 0x1, 0x10161, &(0x7f0000000300)={0x77359400}) 42.776038011s ago: executing program 2 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, 0x0, 0x17) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000010a00)=""/255, 0xff}], 0x1, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r6, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20742, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) getpid() close(r6) 42.34352814s ago: executing program 2 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="330ab4a20c8316ef2c8efa7694838d530000000000728d91781463fca948372deddfdf1366c7cc1d8cf1a6b2ce98aa7114012a281e7b3cc7c3be22726f60d24663074dd2798253c9cc7d4831601a534d2016ad0000000000000000", 0x2a) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 27.285526614s ago: executing program 32 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="330ab4a20c8316ef2c8efa7694838d530000000000728d91781463fca948372deddfdf1366c7cc1d8cf1a6b2ce98aa7114012a281e7b3cc7c3be22726f60d24663074dd2798253c9cc7d4831601a534d2016ad0000000000000000", 0x2a) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 10.394689977s ago: executing program 3 (id=434): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getpid() write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240), 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0x30, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) syz_usb_connect$uac2(0x5, 0x90, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x499, 0x500b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x3, 0x0, 0x17, {0x8, 0xb, 0x1, 0x1, 0x1, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xa, 0xe, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x64, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x33, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x9, 0x0, 0x4, 0x2, 0xffff0001, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x81, 0x7, 0x0, {0x8, 0x25, 0x1, 0x4, 0x0, 0x1, 0x12}}}}}}}}]}}, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf250c000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 8.14590536s ago: executing program 1 (id=442): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f00000004c0)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="3159053fc9d6a9d535c13970e240f6795116f701db6bf9b6f54620ea2774d63457d47f6bfa6050c3ded1adffe259dc28a950376d2f0d5e9f245ba1ae97a1136869108674709a7d757a6379ae757dcf1003fb12b5a16b80accf0dbd02", @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf2501000601050002000a00000014000900"/42], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4080) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) recvmmsg(r8, &(0x7f0000004cc0), 0x1, 0x2140, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000240)='resize', 0x0, r6) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000180)=0xdf9, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4e21, 0xfffb, @private1, 0xa}, 0x1c) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/kmsg\x00', 0x1, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000480)={0x7, 0x7fffffff}) write(r10, &(0x7f0000000400)='<1>', 0x3) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000000)={@empty, @broadcast, 0xffffffffffffffff, "c7e48a9574e0f5c3d86670b50c8cfecb36d6facbec96ab64bbb69f0461392edb", 0x20000000, 0xff, 0x3, 0x5}, 0x3c) 7.911113634s ago: executing program 1 (id=445): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x2070bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x843004}, 0xc, &(0x7f0000000400)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x40884}, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x17, 0x800000000004, @thr={&(0x7f0000000300)="d71435ef110c7f6fa3180e223f574be67bb0c09e7083cbf4a69a6497bf8717aabd5e1933327868983129cb7873625dc8149834c52b5df4cc3e0f5324152e16b5c646f885bb83cce2f93f02afcee9d24f65d6465f840dd61019d051c976c8a17601398a0f92808f5adcbfa1a5aa8edc4812bc2aa74147aa7870c206ac0876d2c630e6a123d84054112f24d2d940168fa646fdc62f31f3d9ca80f72b89", &(0x7f00000003c0)="020a1e7f4d9635b4e75e2ac5c90dff7ed8dec78afaab036278d03266aae2be2997edfbaefea7968585fd5717429096"}}, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 6.883810149s ago: executing program 1 (id=448): mkdirat(0xffffffffffffff9c, 0x0, 0x777) mount$bpf(0x0, 0x0, 0x0, 0x320c8d4, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=000000000000']) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x541401, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0x0, &(0x7f00000001c0)) 6.83924661s ago: executing program 3 (id=449): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRES32=0x1, @ANYBLOB="7eba00"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r2, &(0x7f0000000600)="08a0f158ea5648d6dfcadf107ee4c5e930c6642a51b75e3c47a465300f70eb5f6a58bf12053d34c967da0d7307587c4e41d77af445c8a6d7efd00d616e1daaaa72d22363aee62439948575c269d378883fead0dad9e0ec664e21e2f62798be41b15b8a216d38c6906aa07ec3b3a1d605e8a9ac41085554b3638e3a2de29c71874f88d701469b1a9783ab1e4b129a257cc5c5459c690df4c59c6fa4b7ffd51c24e987ff473a2d092f8e3e6e90d1d5d30bb0fa7be1a5ec45ea498aadb3bd95495a4869a405edc5d0a3da41997b3888fd750663867c1b", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000340), &(0x7f00000000c0)=""/30}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffd, 0x7, 0x0, 0x8000000, 0x2000000003, 0x2, 0x1000, 0x0, 0x83, 0x7, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.849168239s ago: executing program 3 (id=453): syz_usb_connect(0x5, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b5e67420ac059202738801020301090222000100000044090477000103035d0009050000000000faff0705d3cd64"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r5, r2, r3, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x0, 0x6, r4, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x140) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x140) 5.436922488s ago: executing program 4 (id=454): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x31) r0 = epoll_create1(0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x7, 0x0, r0, 0x0, 0x0, 0x2}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc8040, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x0, 0x0, 0x5}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r3, 0x0, &(0x7f0000000000)="f1", 0x1, 0x8000000000000001}) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000009400000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r7}, 0xc) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x6, 0x0, 0x88ba5c8f19cacbb0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x4, 0xff) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, 0x0, 0x18) socket(0x10, 0x803, 0x0) 4.958158542s ago: executing program 3 (id=456): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r6, &(0x7f0000000180), 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x18}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) inotify_init1(0x180c00) write$cgroup_devices(r5, 0x0, 0x9) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x8, 0x0, &(0x7f0000000000)=0x4c) 4.507576035s ago: executing program 5 (id=457): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c0, 0x8, 0x2, 0xa}) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x3) accept4(r0, 0x0, 0x0, 0x0) 4.249912323s ago: executing program 0 (id=458): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x163) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x200, 0x30bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x8, 0x5}, {0x7, 0x8}}, ["", "", ""]}, 0x24}}, 0x44080) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x800, 0x6, 0xa512, 0x3, "4ebdaed43bb30000000000d1188400"}) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r5, 0x0, 0x0, 0x12) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x310, 0x9, 0x0, 0x81, 0x42}, 0xffffffffffffff7c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e3102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 3.989015167s ago: executing program 1 (id=459): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240), 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0x30, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) syz_usb_connect$uac2(0x5, 0x90, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x499, 0x500b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x3, 0x0, 0x17, {0x8, 0xb, 0x1, 0x1, 0x1, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xa, 0xe, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x64, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x33, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x9, 0x0, 0x4, 0x2, 0xffff0001, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x81, 0x7, 0x0, {0x8, 0x25, 0x1, 0x4, 0x0, 0x1, 0x12}}}}}}}}]}}, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf250c000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 3.575597812s ago: executing program 5 (id=460): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r8 = syz_open_dev$admmidi(&(0x7f0000000040), 0x2, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r8, 0xc0385720, &(0x7f0000000080)={0x580cedcb75e3d6f8}) (async) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 3.567872763s ago: executing program 4 (id=461): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x0, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xec, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) socket(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1c3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 3.476153885s ago: executing program 0 (id=462): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x129, 0x0}, 0x30004001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) r0 = open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) sendmsg$nl_generic(r0, 0x0, 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(0x0, 0x2000, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 3.39583659s ago: executing program 5 (id=463): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r5, &(0x7f00000001c0)=""/62, 0x40000, 0x10120, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11011) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r9, 0x1, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc000000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000300)) write$binfmt_misc(r10, &(0x7f0000000000), 0xd) 3.375573968s ago: executing program 4 (id=464): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRES32=0x1, @ANYBLOB="7eba00"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r2, &(0x7f0000000600)="08a0f158ea5648d6dfcadf107ee4c5e930c6642a51b75e3c47a465300f70eb5f6a58bf12053d34c967da0d7307587c4e41d77af445c8a6d7efd00d616e1daaaa72d22363aee62439948575c269d378883fead0dad9e0ec664e21e2f62798be41b15b8a216d38c6906aa07ec3b3a1d605e8a9ac41085554b3638e3a2de29c71874f88d701469b1a9783ab1e4b129a257cc5c5459c690df4c59c6fa4b7ffd51c24e987ff473a2d092f8e3e6e90d1d5d30bb0fa7be1a5ec45ea498aadb3bd95495a4869a405edc5d0a3da41997b3888fd750663867c1b", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000340), &(0x7f00000000c0)=""/30}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d0000000400000004000000a800000001400300", @ANYRES32, @ANYBLOB="557f00000000000000000000000f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB], 0x50) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffd, 0x7, 0x0, 0x8000000, 0x2000000003, 0x2, 0x1000, 0x0, 0x83, 0x7, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.178552749s ago: executing program 0 (id=465): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.160836488s ago: executing program 5 (id=466): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff0000000705810340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r0, 0xffffffffffffffff, 0x0) 3.077908597s ago: executing program 4 (id=467): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "a96dd06abea72d1eff4aaf2f61fba7b800b3f130220f2d3417e4aedb44c255d45e405c809adc58ae9e333486f15ab1f75c0bb1e0eabf0c1415e23e43855b2ca07f4dd8b2a27ee1154ba4addd73166a91005890cfef217cb1ed7f5f569e0be5f2637df83e012ee04e74969b30d13e353e4acecfe886bad6997812dd695dd21e533cb42b4605fda58d7d18ad6e1ecf1f069a0c008c4cdf6a0692d2d75cfc7e95d0ad4e38d62c8d148ec69847d5cac156f5e65fa7673b62a331da48710bf6fe343e735d26c2cbc5050121591d94712d9bbd7ae993819428edbdad3c8260e6c43855647e1c74952e89e68fec523d93fd2f8af9da69205c72c94575d36eb206cc351d", "0b74c40e9aa7f4fb23a0a0566e0316593dacdc434693817307de9b6dddb6106be202f01710680016335731030e3393e4f1457abc9b6f84d77a2e54fe95e1a288551efef06e2f7037b3cf28fb84272206445fe909d14d99c9f2aaf90e4a2354cb7e928e4665facaad0bfc16901d47d781f0f0a5eb5e892570ad42f5b37ed341c5455dff33fc513820c9fc4c30a243f47af77af6dd0981e9d34a329f8870ef68debf657f872c402a181691d004c4ce311d6b6c02445f3f9202c8bee7bdaddb1538328a9fbbd6d620f00e8b92e4f43f41062d67a2950c62201efc9445f1f69cdc29cc120b227728a3afc628e2237886510c3ac0664ef168c7d0803cdbcc4096baa97cae8d028dedd84a6a1c9815da94b996242d5e42ddee8e998cd084973bbbda3d1f3fa53ad62e4a391857590599d91bb0f44664beeffe3cdec977982bb2ef7dacb51cf4b9a60a1ef3a57978de5c999019b38f4f32a9aeaf5415a940b1a5f2f78dc5ec8c08081cfcc92bee51b10ffd1484ed8ec0c35d49a9a6f2ce51eaee5ea3571bcd49548a91beac6207f4ed0f898421af04691449de8f7ca62429ecb0f01ca61d765c0b28ae2fc647619d3188c97f38cee0e13075ac9f81b62277c26841c76f1f994c50b8f6dac3d306f325077baafdbeec613833e9b38a4ee1a9e621a86a870b2a0c2f12240f8f3dcbb34c8c039c6976ab7d12b44aff00ab44beb2d0c7be2839c8d4f4158aaf9d9b4192d1b2a03d21e4de52bfdcd55ee4416850d78837ba7b61ea335f63360b220ab96b4211244e5bd1472c63e812b1aa1fdd8faf6917f5904522cf4b4edb517971c6a723248d599e0928e5392e7a79d0fa71af9513c9ee9c8e789de9d99daad2f5b500afb4bb4c3439a12fd39c8a9004a8c65b2f681f69f787dea5d02c5e60dcfd23d1601e8242959c9589e5c30f6938dab7068acfb212da40adf4d743ba15424bcf20ad14d3f66105077f2e58c27822704170e755dc94fecb5d26472b405aab7eccb3950a40c2b860c585abd9de668805c9ba72f84941ef5bbe205d8a6c097c869a124c2915236202010816b1fbf85ac1dd53233bf4e25ccef533aa52de6216927b49828101e429953b0c3434a78c785b82fe40acc8d870ac84992995fdc66d6fd44d4416c93ee8e3047f40c2845507b64fab61deee4e1a6ddd6aa48b8bc177d301000835bb242f50ac70c1b315acd1b54d92e7b9df36d54d962a732606c5e3ed9386892acc6013caecba7ad8673637a37a4c3b6a8ff96c74dfdc0502e6c3a95b01ccf50984cf5d3deb9c94cf683c2954954e84509b2ff8b2904e30f0e2020eb25296622360cbc6698fe09e86f20e2aec8c80c5a00b60bb4d920f884b558ba310c2f37fe56961828c8b218490d4e64c79d0b7a1f3ae97de86aa19103c978ac98ff9b6c9fc7d6bf1f3c5d26a3b19e8afa1b087c23c45bc41d85f0c30c5e1c13fbb5f0edbecbb2db13db026a856f26019390a3eb2c4497103c3e18cc52a0f6a607f4fa706bc56c6965d0dbdcd124987154e18ba6eed81514913f0349264d11392d3699b37657b57c4c5ebf01eee8b8c6cbc91b4d1cff3e35df724a1864b63b34712481e4588f7001ab39f56064885ea064c3d6b0ec1e448c1fdfd4c1eb1e48a41f10ebc5e60b9eacab4a042c417b390e386ebb0350cfe1415800d36eb7021e1aeeffbb87311aa3a382097c97caa69b2fd7f61e8a92c12fc593e0779ba3c31c503e0ec3b3581ec409a5d7d66ab12dc5a336a6cf15b9e4e60e860325c4de2f1b0e46f4b31d524354434730f8fdc1fa6d064809683867b0e57ab9fe89d1625515c347ec25e9c9632a6c248588e65f33d0332802b4763b881b9f80e63f752e8b19ddee6ec9f48f28702d2c8498c66a39197702a39c1a04ffd4621557e6a47391bc50eaf6065e38410e3534a1b07e58d5c2cd56f278dd72c47d726b9f89542fd51a21fe8061435d3b31d78990459d52dd8db0ec91088ca0d6067ac9f4dc8ec040ff25ada998282d7ffcd2bc57c3d0ea206ec40909c709b4daed458a81e44ce50d82b63e487f3e6f0312e64c2f1cee9011cf297fb82e37152477f87cf4a0af083704da09006eb12758c26c646f98251227368687d2c28a6c47a59b47a39826891d685b6353661fadf6eac9ed3fdc72cb51f1a0579becf8171532df6c4c13f80be22b583b716f9a7e647d4c03b7f862309347c49c0fe88fea7f6eef45557e0d9bb7ee014f474aa2ccd1903468430e88826cffe17ae9d8e92f78a65887ce259c9fe2d5a276ae103bd1dbbef39e627e9a66022cb67be3723a1294151bcb3574cccc64f9ce7347e037a925af814d7e0a1ec355d6adb2926b8d87f45b7e15a25c983e498385a5e71164421d3f7c4ba5c1ada358b244173940870032948e01cf90ea2e0b598bfaa2cd4d517a5729943983c3359dd45e7f59958c3dad48e268963771a4db46305df19c76b6952623327255153766e7699ddfb15acf7be4e23c492173335acb459773a8b885faf450d55bcfe9a1c22b90ba2e66b6ef9f4832cac0ae8374d97ce0a003231e12cab8c4d8d8e3eeae9711f35e59fbf25bae2a113c7b43ac254ce385c35fb3409ebe8914b71bb03f3b515b24b81e6cf497b2e016378e07dcb79d7b36e63df72b3c73bbed8970cbe7970ce92dabdee677ecc74678e22833d0ef8bd5649291cd3b9d3d004991441bd3f0aca811d127be2bbfb4c530778ce32899dd23c50c8c86faa5f8117802ae78c6c147c0962932011664267f54c4324a353f6fa99d4a2d8788d81e77c93fb23df9cff0c8a08e73803011ceecb2c92d9db3984fcfc2ded09ce2c76f74d282ae238a4f228c32d1567e4d4ccd0ff0180ef11556268c95133607dedabc4ea13a002a1ba3921ed45f6e7d5d8363308ee2b998b4e7347859e9395cc5ca02858451d7bf4e954402ec98ce4a48429ab335b98987fc25b3611b03bd0b135b2e0a8e70c4a055c35bd37b6895ea1f884449d0b85f42494ca3bcbe881e3e0afb728cdd461400d33ea94dd2d2c3261e406f531839ad78c7d9b255249f1b6964dc6a135a20ea9a7464374061648b11a7bb0c1c459f1f51b78beebde7591bda8afd4ff93d737615759599ceaebed565a6734c409946284b18a9a6ea4734396dd2f2231a1dc742ccb0476c162570bc579a2cfd3a330eb47f0a5eb9cf4bf86eab2965b1503a30d34c51097eed72554a5e14e712dd9a84ef4661d3d2b83219f2cac05a8c495b95e9aca46e086aa3ce63cd08116f3a4060dafa4826fd2e19871cabced7ea9cd4c8668cce42cb82e7b37ec58a7312f4ee2a89496419db7450de353500dd78bdf5a80e9ecf531d1cfefac507ca8f301036d7a247d3b09ea17aef015e601a7ca52f2c8838e40b784466dceec51daa33a5479df49775acab89edd605e148d909342bf12d9c276efbb5a37e8b1dc503067b4fd56486cfc157bd03c127dbb0663410d3614f4e9d18e70365f5b610624ddd5630cb8b42cd1310c0a4dcb600a22a2f39da1a021fd21592c496161ab15aaa489bfc460b13bc3c1cc0b8b74df7e4d72d36db871a887fb6f6db9073b68a5aee3ae1c7c713fbe63e3d43ea0edc45041cf88ae048fda617b9a468e1741b193ee6d9e11d9de01eec1417a5a4c145ec952689387a02aed4ba48ffadbc8d075ccd9db4ad5602561a250e028e61c840618cf9e7f5779c5e139886a60e55a75c7281cded68d5f4a923e4e5efa230350293d276cdd15a46f1cdeb75df72f0d96c6ee1d34b0b87d8b53d202883d22da039b49f102fc8072f4d332cb9af9822ac104e23d39c3eedb58919b1dac016b960799e68f31d94ec1475ca5a2ba4d315a9ab475404b014c922a3889b30c5a59b7423c10be4caaaac44cc5e817650e3a36802c441117d47637782d9f9947ab763a18f7f9dc4bd92bcd6d07f87e37c7e3543c8f5a2e0f372c5ead8d2145e64ee24bc4e41879ae768653ddc9991700cdbf2cf7482b8505d81c10884064fcea3ebad2ae1fe0b51f0f7a8505aa056483a3d266118e0199250cc372e71b92374084ba62b2830c27eedfede294eb72393fb84d3bc2655489fd7827a56e2cff77b4ed81848722cdd0e17490ebfa15d81fd50836093f21ab541b11e42253139e4e893f8fa0d852b36cc601fc3fe55838ffbbb7b85ac65c427b2151de29078a14cf83df07657e1112b9c9181e6fc44487ccef7cf017e68342da903546c9e5c598ae8cd1fc226f81b51d0a9df31516b979403753c828a49416b4f9a124890dc420b3cf04ec9a9594bad5a45a9388113ba38e54a1e25eebf4482943ffd68216d9040ef90804f5d2f895be701c6e4053965eafb51cae3eaccb08f54f11823e080a9bcb240a1a8a8d016ace78a379bd318662bd29339f1b7ec4c9843edfd3da37416dc7308f2f464590db746c92c4351a6e1602a4f98bf5cb5832efd60a5c5f22524f550e7e593b0012a62412ab7cb680cfa799be4304c3351a103b6ef34d6fede8d61a9a30554a68097314e7a3b10e0f9eb72e4865076016a42b8fb69c6221a088a91927a1d33c61de2ce1fa78caa40b41137e30693a7d2da62ef090567768010393e5c6127f414124abafb8a5d9b5e5c37cf5a6bbde92e85d9eeacdc21b7f68e9bb017d5a2dcbc3ed8619b07914195c408fbbac522fae9e77d1f3989235eb1aac59508fbf37eaf8d2837a0392c01edebb7bbe5b2b639eaa4838e0bfbdaf9879dc4a6a090fd3f17bbd8954a0fad6ce04f02101d95e419bb7d11281a2eedbf2ead01fa9699f6db81377a0145e6aad41e230bfa58f14e46bd5a0bfeaab98f071c23cb4fc5187454fd9e3d2e0655d5e3a28bc6a4f23cdaa50832c97acfc2fbb04f7e4cb91d87815b3e216d0304be9785319f34d59be6d9766d969a29820aa159929a2d6f8b203c7bae322cc1a6fa37ff60d13c1e8d275dd95a2b6682959211e39d00ab9c86cb2edc29ffb7610652142727dda2369eefc1cbf62ec78c7c09cc82cc984110634355cb7e59cca65ecca0100d7a0e876b835b5f3280669a76a8fa31ba47110139bb4b8adc0b1319a0cb701fa30a17849cd80d71e6d3bac14af495ba6e3766a0790584dd21f6065427eb2d2c651f31c81bed1377885927182f5c584e39325a4f105c5f9d62f71a7b6db3677ec2e8e5f744b4bfe59ac5ca1e41435ecc41be73fb9ae930ab6646b5e2f0719d9430820eb6918ffc6f21be1d921f1e89c6644c3878e593e573752edfa0f5076eced8b59a2f4c578949377ab9a0e101fc4b09487ba7ee8edb3dcf7b4dd0e2ae4df30083fa57af23df892131611a324cb02a2495c68cf662bb0dda749da7ad5d6d79e0877a4770b717523ddaf36e503b290305a53f4be9a434784c8d600606a72abd7cb81b25a6b3c96725c112b80014eeba28881ba10188c7217d254e863203534ae"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001500)={{r1, 0x2, 0x9, 0x1ff, 0x16a, 0x10001, 0x40, 0x0, 0x4, 0x7, 0x9, 0x1, 0xe, 0x4b, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0xfffffffffffffc01, 0x0) tee(r3, r5, 0x60000000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.259711669s ago: executing program 0 (id=468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}}], 0x2, 0x440488d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1000000', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000040)={0x800000200000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0x4}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r10, &(0x7f0000000000)="fa", 0xfffffdef) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000000580)=[{0x0, 0x1}, {0x0, 0x0, 0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x14, &(0x7f0000006480)=[{0x0, 0x1}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) shutdown(r0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast1}, &(0x7f0000000340)=0xc) socket(0x10, 0x80002, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x300) 2.198772335s ago: executing program 4 (id=469): mkdirat(0xffffffffffffff9c, 0x0, 0x777) mount$bpf(0x0, 0x0, 0x0, 0x320c8d4, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=000000000000']) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x541401, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0x5c, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b8") 1.96261673s ago: executing program 0 (id=470): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="280100001700050526bd7000fedbdf257f000001000000000000000000000000000004d3ff000000fe8000000000000000000000000000bb000000000000000000000000000000007f0000010000000000000000000000004e2000094e2200000a0080206c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fe8000000000000000000000000000bb4e2380004e2200000a0080203a000000cf742e985636953d7d2b0f48fb8600eb97f3c9903acd51dffa92f6b3ffd9563b5ca5e3869b03e795f7e482316e023b3b3d7712ecae2debf59a0c5801c102b2ac979aa72ecfb569f6dd4d3db668916cc6a71e51d7a58d00d0207a6d2ebf33f7cd87ba542140fa9b74170deda2a76693b6f04cfc06d327cb0ea7dc86069d622a4bfa0e517fac1cfd130b0aa89d60444d709bfa15f14ec5cf71c801170b98a783fe087dcb31dc0e00f54d28396588a684bcb0bfc76229067e096fd9170270a5b86cbf1a59dd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000040000000000000000000000000000000200000000000000048000000000000008000000000000000700000000000000c600000000000000060000000000000005000000000000000a000000000000000000000000000000000000000000000001010302000000000000000009000000008000002cbd7000"], 0x128}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) keyctl$unlink(0x9, r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) 1.899625304s ago: executing program 5 (id=471): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000d) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40001) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x614a12e8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x70, 0x0, [{@empty}, {@private}, {@private}, {@multicast2}, {@local}, {@empty}, {@multicast1}]}}) unshare(0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x240, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x4000010, r3, 0x664fb000) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0x3, 0x1}) ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f00000001c0)={0x2, 0x0, 0x5, 0x27, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x14) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000200)={0xeeef0000, 0x19000}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000240)) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xf052, 0xb0b, 0x9, 0x3, 0x3, 0x7, 0x651, 0x8, 0x5, 0x6, 0x6, 0x2f20, 0x6b, 0x0, 0x59d, 0x7], 0x70000, 0x80}) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x204, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x836a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50d59501}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5def, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd419}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf85}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000004}, 0x48881) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x204, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x836a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50d59501}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5def, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd419}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf85}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000004}, 0x48881) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000006c0)={0x6, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0xffffffffffffffff}) syz_open_procfs$namespace(r6, &(0x7f0000000700)='ns/ipc\x00') sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r7 = openat$cgroup_ro(r2, &(0x7f0000000840)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r7) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r7) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x150, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x86, @private1={0xfc, 0x1, '\x00', 0x1}, 0x79}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16e4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf700}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x2800c010}, 0x40100) (async) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x150, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x86, @private1={0xfc, 0x1, '\x00', 0x1}, 0x79}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16e4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf700}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x2800c010}, 0x40100) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000b00)={0x4, {0xb, 0x101, 0x100, 0x1ff}}) (async) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000b00)={0x4, {0xb, 0x101, 0x100, 0x1ff}}) socket(0x2a, 0x3, 0x1e) (async) r9 = socket(0x2a, 0x3, 0x1e) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x288, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x71}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xac, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa2, 0x1, "e7c237b51c40a3cac91e7c6aa49a4898d18a0675f9d2c9afbd7f60074c4072abae80b2bbd584433b744b771457e5eac1ef77f26a2c7dd3a4f6a10818736e8ed63e12cf6b4c779f2c2add5297d670f2fe1e4e739ce3408fa10dd87bd34fdb8a59d949587c9c881ad2c63b60136755ec17cb7a725c63579286a04dcf3232d6317c6fb30eb72cd7be770b61b2cd2460111a0fd57176d466a3e6ddb2bd6159ea"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa0, 0x2, "fef23ce9ec82a5eadac8291bb5cccca2807b0a6402472f32d0e3c68ec05b95daf06f74dde62fd7dba48de31c0488359d466557134a52dca3b045e246b337580e772ff35d5a68eaa480aad98b63ab7a61e496c3d2a534724d045ec4592615d407c9ff53ebd54f0896c410b935a186fce64b3715dbbfa88b9266620f0350129e921189effc9d964d6e4bb762a715488a6e10c6dc1be24ef70aaf5a20f2"}}, {0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x16, 0x2, "862f5b2c2ef844f556aa292dfa45cd22928e"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xed44}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc0, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa9, 0x1, "a10aa13cd8969818813d3addab550699ddc6538b9028960be8e0d55b5ab404a07956e6396fddc9bc34100de66539d17f4d41501351e81d8889379cfc89b028c8e052321145a27c3212e1cfad180d490fa2068922c97359d054dde1a4b4693e0c6697bebe8bd1406f03379a801370a75adfd0dd73655522a4613f16cb98f452fe32be572c59f894765df7ad958e9dc61dfe0348fe5a881230425da9ba5068461d20098950a0"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1c}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044002) (async) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x288, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x71}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xac, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa2, 0x1, "e7c237b51c40a3cac91e7c6aa49a4898d18a0675f9d2c9afbd7f60074c4072abae80b2bbd584433b744b771457e5eac1ef77f26a2c7dd3a4f6a10818736e8ed63e12cf6b4c779f2c2add5297d670f2fe1e4e739ce3408fa10dd87bd34fdb8a59d949587c9c881ad2c63b60136755ec17cb7a725c63579286a04dcf3232d6317c6fb30eb72cd7be770b61b2cd2460111a0fd57176d466a3e6ddb2bd6159ea"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa0, 0x2, "fef23ce9ec82a5eadac8291bb5cccca2807b0a6402472f32d0e3c68ec05b95daf06f74dde62fd7dba48de31c0488359d466557134a52dca3b045e246b337580e772ff35d5a68eaa480aad98b63ab7a61e496c3d2a534724d045ec4592615d407c9ff53ebd54f0896c410b935a186fce64b3715dbbfa88b9266620f0350129e921189effc9d964d6e4bb762a715488a6e10c6dc1be24ef70aaf5a20f2"}}, {0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x16, 0x2, "862f5b2c2ef844f556aa292dfa45cd22928e"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xed44}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc0, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa9, 0x1, "a10aa13cd8969818813d3addab550699ddc6538b9028960be8e0d55b5ab404a07956e6396fddc9bc34100de66539d17f4d41501351e81d8889379cfc89b028c8e052321145a27c3212e1cfad180d490fa2068922c97359d054dde1a4b4693e0c6697bebe8bd1406f03379a801370a75adfd0dd73655522a4613f16cb98f452fe32be572c59f894765df7ad958e9dc61dfe0348fe5a881230425da9ba5068461d20098950a0"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1c}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044002) 1.74841399s ago: executing program 5 (id=472): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x163) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x200, 0x30bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x8, 0x5}, {0x7, 0x8}}, ["", "", ""]}, 0x24}}, 0x44080) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x800, 0x6, 0xa512, 0x3, "4ebdaed43bb30000000000d1188400"}) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r5, 0x0, 0x0, 0x12) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x310, 0x9, 0x0, 0x81, 0x42}, 0xffffffffffffff7c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e3102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 1.718332603s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x502, &(0x7f0000000080)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r5, 0x0, 0x100000, 0x10000000005971}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r4, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r10 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x88, 0x0, &(0x7f0000000500)=[@register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x4, 0x0, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/53, 0x35, 0x0, 0x9}}, &(0x7f0000000340)={0x0, 0x18, 0x24}}}, @clear_death, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 543.221952ms ago: executing program 0 (id=474): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x2070bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x843004}, 0xc, &(0x7f0000000400)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x40884}, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x17, 0x800000000004, @thr={&(0x7f0000000300)="d71435ef110c7f6fa3180e223f574be67bb0c09e7083cbf4a69a6497bf8717aabd5e1933327868983129cb7873625dc8149834c52b5df4cc3e0f5324152e16b5c646f885bb83cce2f93f02afcee9d24f65d6465f840dd61019d051c976c8a17601398a0f92808f5adcbfa1a5aa8edc4812bc2aa74147aa7870c206ac0876d2c630e6a123d84054112f24d2d940168fa646fdc62f31f3d9ca80f72b89", &(0x7f00000003c0)="020a1e7f4d9635b4e75e2ac5c90dff7ed8dec78afaab036278d03266aae2be2997edfbaefea7968585fd5717429096"}}, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 399.45187ms ago: executing program 1 (id=475): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug/failslab/times\x00', &(0x7f0000000540)='debugfs\x00', 0x104800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x1, 0x0) writev(r2, &(0x7f0000005a00)=[{&(0x7f00000000c0)="ceb2", 0x2}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000440)={0x0, 0xac74, 0x200, 0x1, 0x1a2, 0x0, r1}, &(0x7f00000001c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB='#s'], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000580)=ANY=[@ANYRES8=0x0]) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040064}, 0x40050) socket$nl_sock_diag(0x10, 0x3, 0x4) 284.115421ms ago: executing program 4 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x6c, 0x66, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {0x2, 0xffff}, {0x1, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}]}, 0x6c}}, 0x20000000) close(0x3) 92.052171ms ago: executing program 1 (id=477): r0 = syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x802b, 0x800, 0x4, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_FUTEX_WAIT={0x33, 0x1, 0x0, 0x6, 0x8, &(0x7f0000001cc0), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfe6e}}) r4 = open(0x0, 0x448101, 0x7) fcntl$setlease(r4, 0x400, 0x1) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000000)) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x1000000, &(0x7f0000000300)='\x00A\x1c\xc7\xc9\x94\xf6|\xb0\xa4+]\x16\xad\n\x8cyw\xd2\xa6\xd9\xe9\xee\x87L\x00\x01\x00\x00\x00\x00\x00\x00\x02\x00\x02\x00\x00\x00\x00\x00_\x86\x9dT\x7fgJ\x8c\xfe\xc6\xcb\xee\x82\x1d*oNM\xf4\xd0*\xd2\xeb') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r5, 0x0) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x403, 0x100bf28, @loopback, 0xffffffff}, 0x1c) recvfrom(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x800, 0x0, 0x0) 0s ago: executing program 3 (id=478): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2", 0x6e}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 60.659737][ T30] audit: type=1400 audit(1785958024.462:129): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.683767][ T30] audit: type=1400 audit(1785958024.492:130): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.686677][ T5597] cgroup: Unknown subsys name 'net' [ 60.714762][ T30] audit: type=1400 audit(1785958024.522:131): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.836690][ T5597] cgroup: Unknown subsys name 'cpuset' [ 60.844492][ T5597] cgroup: Unknown subsys name 'rlimit' [ 60.952218][ T30] audit: type=1400 audit(1785958024.752:132): avc: denied { setattr } for pid=5597 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.987113][ T30] audit: type=1400 audit(1785958024.752:133): avc: denied { create } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.008533][ T30] audit: type=1400 audit(1785958024.752:134): avc: denied { write } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.037075][ T30] audit: type=1400 audit(1785958024.752:135): avc: denied { read } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.060639][ T5599] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.061438][ T30] audit: type=1400 audit(1785958024.752:136): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.094652][ T30] audit: type=1400 audit(1785958024.752:137): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.118759][ T30] audit: type=1400 audit(1785958024.882:138): avc: denied { relabelto } for pid=5599 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.025024][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.280223][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.287862][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.294936][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.295942][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.303619][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.311669][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.319070][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.330877][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.338649][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.339887][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.346692][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.353441][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.360774][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.368068][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.376006][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.381772][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.388994][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.397205][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.403392][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.410084][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.416576][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.431675][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.432747][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.440889][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.456259][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.678629][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.686661][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.694078][ T5612] bridge_slave_0: entered allmulticast mode [ 65.700832][ T5612] bridge_slave_0: entered promiscuous mode [ 65.725461][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.732660][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.739751][ T5612] bridge_slave_1: entered allmulticast mode [ 65.746598][ T5612] bridge_slave_1: entered promiscuous mode [ 65.784286][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.792798][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.823708][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.832959][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.840096][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.847772][ T5610] bridge_slave_0: entered allmulticast mode [ 65.854737][ T5610] bridge_slave_0: entered promiscuous mode [ 65.877546][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.886829][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.894042][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.901236][ T5610] bridge_slave_1: entered allmulticast mode [ 65.908057][ T5610] bridge_slave_1: entered promiscuous mode [ 65.924768][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.931906][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.939317][ T5625] bridge_slave_0: entered allmulticast mode [ 65.946084][ T5625] bridge_slave_0: entered promiscuous mode [ 65.983065][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.990147][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.997556][ T5625] bridge_slave_1: entered allmulticast mode [ 66.004565][ T5625] bridge_slave_1: entered promiscuous mode [ 66.012695][ T5612] team0: Port device team_slave_0 added [ 66.031488][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.038690][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.045849][ T5609] bridge_slave_0: entered allmulticast mode [ 66.052593][ T5609] bridge_slave_0: entered promiscuous mode [ 66.066854][ T5612] team0: Port device team_slave_1 added [ 66.074356][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.090599][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.097810][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.105061][ T5609] bridge_slave_1: entered allmulticast mode [ 66.111737][ T5609] bridge_slave_1: entered promiscuous mode [ 66.132779][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.142028][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.149148][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.156419][ T5613] bridge_slave_0: entered allmulticast mode [ 66.163416][ T5613] bridge_slave_0: entered promiscuous mode [ 66.178727][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.189925][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.211848][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.219026][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.226434][ T5613] bridge_slave_1: entered allmulticast mode [ 66.233414][ T5613] bridge_slave_1: entered promiscuous mode [ 66.252970][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.259940][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.285944][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.312665][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.328340][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.335478][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.361739][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.375020][ T5610] team0: Port device team_slave_0 added [ 66.389709][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.400963][ T5625] team0: Port device team_slave_0 added [ 66.416019][ T5610] team0: Port device team_slave_1 added [ 66.424833][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.442219][ T5625] team0: Port device team_slave_1 added [ 66.468693][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.486884][ T5609] team0: Port device team_slave_0 added [ 66.493035][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.500038][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.527385][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.527817][ T5614] Bluetooth: hci1: command tx timeout [ 66.538454][ T5622] Bluetooth: hci3: command tx timeout [ 66.544442][ T5614] Bluetooth: hci4: command tx timeout [ 66.549752][ T5623] Bluetooth: hci0: command tx timeout [ 66.555649][ T5624] Bluetooth: hci2: command tx timeout [ 66.563365][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.573587][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.599548][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.631013][ T5609] team0: Port device team_slave_1 added [ 66.641871][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.649140][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.675242][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.712866][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.719827][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.745775][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.757110][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.764307][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.790579][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.802970][ T5613] team0: Port device team_slave_0 added [ 66.813147][ T5612] hsr_slave_0: entered promiscuous mode [ 66.819750][ T5612] hsr_slave_1: entered promiscuous mode [ 66.827524][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.834497][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.860530][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.877756][ T5613] team0: Port device team_slave_1 added [ 66.917730][ T5625] hsr_slave_0: entered promiscuous mode [ 66.923934][ T5625] hsr_slave_1: entered promiscuous mode [ 66.929858][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 66.935923][ T5625] Cannot create hsr debugfs directory [ 66.985852][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.992989][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.019030][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.045278][ T5609] hsr_slave_0: entered promiscuous mode [ 67.051327][ T5609] hsr_slave_1: entered promiscuous mode [ 67.057586][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 67.063342][ T5609] Cannot create hsr debugfs directory [ 67.073774][ T5610] hsr_slave_0: entered promiscuous mode [ 67.079936][ T5610] hsr_slave_1: entered promiscuous mode [ 67.086104][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 67.091835][ T5610] Cannot create hsr debugfs directory [ 67.098050][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.105181][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.131754][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.260465][ T5613] hsr_slave_0: entered promiscuous mode [ 67.266568][ T5613] hsr_slave_1: entered promiscuous mode [ 67.272650][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 67.278370][ T5613] Cannot create hsr debugfs directory [ 67.517234][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.528304][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.536405][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.545607][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.558802][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.567350][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.589231][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.597733][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.663496][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.673680][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.683452][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.694204][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.701896][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.710963][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.718793][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.728674][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.795894][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.805413][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.819372][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.828289][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.838517][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.849606][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.858482][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.867687][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.876215][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.906492][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.940285][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.947909][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.968137][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.975234][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.012024][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.026624][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.041860][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.052255][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.061102][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.070431][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.093726][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.103399][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.186960][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.202006][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.212552][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.220348][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.233064][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.241167][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.253717][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.261452][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.271768][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.330351][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.359283][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.381064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.388158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.399486][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.406581][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.429998][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.451052][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.458139][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.488212][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.495371][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.589107][ T49] Bluetooth: hci1: command tx timeout [ 68.589125][ T5622] Bluetooth: hci2: command tx timeout [ 68.594857][ T5624] Bluetooth: hci3: command tx timeout [ 68.599973][ T5623] Bluetooth: hci4: command tx timeout [ 68.605520][ T5614] Bluetooth: hci0: command tx timeout [ 68.640587][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.698574][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.714241][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.766213][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.773372][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.799051][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.815432][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.822598][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.867135][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.874286][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.884142][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.891272][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.913187][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.117343][ T5612] veth0_vlan: entered promiscuous mode [ 69.167613][ T5612] veth1_vlan: entered promiscuous mode [ 69.276196][ T5612] veth0_macvtap: entered promiscuous mode [ 69.305138][ T5612] veth1_macvtap: entered promiscuous mode [ 69.374550][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.415414][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.430664][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.466289][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.556216][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.646277][ T5610] veth0_vlan: entered promiscuous mode [ 69.699333][ T5610] veth1_vlan: entered promiscuous mode [ 69.734212][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.744726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.761198][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.849918][ T3356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.867842][ T5610] veth0_macvtap: entered promiscuous mode [ 69.884868][ T3356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.888611][ T5610] veth1_macvtap: entered promiscuous mode [ 69.903537][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.927455][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.949996][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 69.950011][ T30] audit: type=1400 audit(1785958033.752:152): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.A4f8zF/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.952259][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.970250][ T30] audit: type=1400 audit(1785958033.762:153): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.013837][ T30] audit: type=1400 audit(1785958033.762:154): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.A4f8zF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.016141][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.048838][ T30] audit: type=1400 audit(1785958033.772:155): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.076032][ T30] audit: type=1400 audit(1785958033.772:156): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.A4f8zF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.104222][ T30] audit: type=1400 audit(1785958033.772:157): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.A4f8zF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.139587][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.157418][ T30] audit: type=1400 audit(1785958033.772:158): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.172022][ T5625] veth0_vlan: entered promiscuous mode [ 70.191005][ T30] audit: type=1400 audit(1785958033.822:159): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.214205][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.216454][ T30] audit: type=1400 audit(1785958033.852:160): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="gadgetfs" ino=7570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.224129][ T3356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.248270][ T30] audit: type=1400 audit(1785958033.862:161): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.262187][ T5609] veth0_vlan: entered promiscuous mode [ 70.308029][ T5625] veth1_vlan: entered promiscuous mode [ 70.328522][ T5609] veth1_vlan: entered promiscuous mode [ 70.339990][ T5613] veth0_vlan: entered promiscuous mode [ 70.380319][ T5613] veth1_vlan: entered promiscuous mode [ 70.396382][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.417306][ T5804] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 70.418699][ T5609] veth0_macvtap: entered promiscuous mode [ 70.662830][ T5623] Bluetooth: hci4: command tx timeout [ 70.668262][ T5622] Bluetooth: hci2: command tx timeout [ 70.668307][ T5614] Bluetooth: hci0: command tx timeout [ 70.674248][ T5623] Bluetooth: hci1: command tx timeout [ 70.679163][ T5624] Bluetooth: hci3: command tx timeout [ 71.241138][ T5625] veth0_macvtap: entered promiscuous mode [ 71.260004][ T5609] veth1_macvtap: entered promiscuous mode [ 71.273935][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.299635][ T5625] veth1_macvtap: entered promiscuous mode [ 71.355512][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.374290][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.393348][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.408009][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.431458][ T5613] veth0_macvtap: entered promiscuous mode [ 71.471223][ T5809] IPv6: sit1: Disabled Multicast RS [ 71.477565][ T5809] sit1: entered allmulticast mode [ 71.485369][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.505564][ T5613] veth1_macvtap: entered promiscuous mode [ 71.515747][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.524926][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.543503][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.627705][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.677857][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.812851][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.831820][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.842779][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.852651][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.913917][ T3305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.931850][ T3305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.957479][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.985658][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.116048][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.127070][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.156991][ T3305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.181377][ T3305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.278804][ T5827] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 72.292756][ T5827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.578242][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.592859][ T97] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.607715][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.653196][ T97] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.687622][ T97] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.694922][ T5830] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 72.715332][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.725694][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.734142][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.742906][ T5624] Bluetooth: hci3: command tx timeout [ 72.749123][ T5614] Bluetooth: hci0: command tx timeout [ 72.752493][ T5623] Bluetooth: hci4: command tx timeout [ 72.754724][ T5614] Bluetooth: hci1: command tx timeout [ 72.759955][ T5622] Bluetooth: hci2: command tx timeout [ 72.787423][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.794957][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.803341][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.810488][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.824351][ T5830] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 72.835456][ T5831] bridge_slave_1: left allmulticast mode [ 72.846545][ T5831] bridge_slave_1: left promiscuous mode [ 72.852973][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.895008][ T5831] bridge_slave_0: left allmulticast mode [ 72.921077][ T5831] bridge_slave_0: left promiscuous mode [ 72.931941][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976985][ T5831] bond0: (slave bridge0): Releasing backup interface [ 73.006878][ T5836] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 73.085270][ T97] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.097210][ T97] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.110429][ T97] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.173176][ T3356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.224719][ T5848] batman_adv: batadv0: Adding interface: veth0 [ 73.237303][ T5848] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.279201][ T5851] Zero length message leads to an empty skb [ 73.306866][ T5848] batman_adv: batadv0: Interface activated: veth0 [ 73.330943][ T5853] batman_adv: batadv0: Interface deactivated: veth0 [ 73.348317][ T5855] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 73.365333][ T5853] batman_adv: batadv0: Removing interface: veth0 [ 73.467393][ T5616] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.501558][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.510458][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.519066][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.527488][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.155267][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.167927][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.245457][ T5616] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.268036][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.281851][ T3356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301152][ T5616] usb 5-1: Product: syz [ 74.309214][ T3356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.320675][ T5616] usb 5-1: Manufacturer: syz [ 74.331058][ T5616] usb 5-1: SerialNumber: syz [ 74.423519][ T5865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.973399][ T3356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.214322][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 75.214341][ T30] audit: type=1326 audit(1785958038.982:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e0d9 code=0x7ffc0000 [ 75.452098][ T30] audit: type=1326 audit(1785958039.072:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fcbf9de42 code=0x7ffc0000 [ 76.274906][ T10] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.384385][ T5860] usb 5-1: USB disconnect, device number 2 [ 76.394223][ T10] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 76.411953][ T30] audit: type=1326 audit(1785958039.092:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1fcbf9ded7 code=0x7ffc0000 [ 76.450383][ T10] audit: backlog limit exceeded [ 76.554936][ T10] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 76.930822][ T30] audit: type=1326 audit(1785958039.132:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1fcbf5add1 code=0x7ffc0000 [ 76.985457][ T5860] usb 5-1: ath9k_htc: USB layer deinitialized [ 77.062674][ T30] audit: type=1326 audit(1785958039.162:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1fcbf9eec9 code=0x7ffc0000 [ 77.127686][ T30] audit: type=1326 audit(1785958039.162:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1fcbf5ae3b code=0x7ffc0000 [ 77.294820][ T30] audit: type=1326 audit(1785958039.162:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcbf9e0d9 code=0x7ffc0000 [ 79.649510][ T5917] xt_hashlimit: size too large, truncated to 1048576 [ 80.240970][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 80.240986][ T30] audit: type=1400 audit(1785958044.042:428): avc: denied { write } for pid=5909 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 80.468097][ T30] audit: type=1400 audit(1785958044.072:429): avc: denied { write } for pid=5913 comm="syz.2.28" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.593181][ T5723] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.083083][ T5928] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 81.116664][ T5928] batman_adv: batadv0: Adding interface: macvlan1 [ 81.129473][ T5928] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.188653][ T9] cfg80211: failed to load regulatory.db [ 81.242599][ T5723] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 81.251128][ T5928] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 81.272410][ T5723] usb 3-1: config 0 has no interface number 0 [ 81.280087][ T5723] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.400841][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.408702][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.934576][ T5622] Bluetooth: hci4: failed to read key size for handle 200 [ 81.945618][ T5723] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 81.959496][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.969819][ T5723] usb 3-1: Product: syz [ 81.974079][ T5723] usb 3-1: Manufacturer: syz [ 81.978779][ T5723] usb 3-1: SerialNumber: syz [ 82.103088][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.292399][ T5723] usb 3-1: config 0 descriptor?? [ 82.299698][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.341691][ T5935] batman_adv: batadv0: Removing interface: macvlan1 [ 82.355497][ T5723] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 82.533120][ T187] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.646851][ T30] audit: type=1400 audit(1785958046.452:430): avc: denied { read write } for pid=5913 comm="syz.2.28" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.717275][ T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.724326][ T30] audit: type=1400 audit(1785958046.522:431): avc: denied { open } for pid=5913 comm="syz.2.28" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.745534][ T187] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 82.792333][ T9] usb 3-1: USB disconnect, device number 2 [ 82.848490][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.315709][ T9] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 83.698836][ T187] snd-ua101 4-1:1.0: probe with driver snd-ua101 failed with error -2 [ 83.738326][ T5956] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 84.436604][ T187] usb 4-1: USB disconnect, device number 2 [ 86.176496][ T5979] xt_hashlimit: size too large, truncated to 1048576 [ 87.482448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.632410][ T30] audit: type=1400 audit(1785958050.342:432): avc: denied { read } for pid=5980 comm="syz.1.45" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.771986][ T30] audit: type=1400 audit(1785958050.342:433): avc: denied { open } for pid=5980 comm="syz.1.45" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.921631][ T30] audit: type=1400 audit(1785958050.502:434): avc: denied { create } for pid=5980 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 87.980853][ T30] audit: type=1400 audit(1785958050.582:435): avc: denied { sys_admin } for pid=5980 comm="syz.1.45" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.033238][ T187] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.715620][ T5998] xt_hashlimit: size too large, truncated to 1048576 [ 89.852643][ T187] usb 1-1: device not accepting address 2, error -71 [ 90.014261][ T30] audit: type=1400 audit(1785958053.822:436): avc: denied { write } for pid=6004 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.533084][ T187] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.562656][ T30] audit: type=1400 audit(1785958054.362:437): avc: denied { read write } for pid=6004 comm="syz.2.52" name="sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.597293][ T30] audit: type=1400 audit(1785958054.362:438): avc: denied { open } for pid=6004 comm="syz.2.52" path="/dev/sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.662905][ T30] audit: type=1400 audit(1785958054.372:439): avc: denied { ioctl } for pid=6004 comm="syz.2.52" path="/dev/sg0" dev="devtmpfs" ino=786 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.800445][ T187] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 90.823929][ T187] usb 1-1: config 0 has no interface number 0 [ 90.846560][ T187] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.883961][ T187] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 90.904621][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.929972][ T187] usb 1-1: Product: syz [ 90.941333][ T187] usb 1-1: Manufacturer: syz [ 90.954875][ T187] usb 1-1: SerialNumber: syz [ 90.967977][ T6016] mmap: syz.2.55 (6016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.981315][ T187] usb 1-1: config 0 descriptor?? [ 91.007845][ T187] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 91.307834][ T5805] usb 1-1: USB disconnect, device number 3 [ 91.316686][ T5805] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 91.417433][ T6027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.464171][ T187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.489471][ T30] audit: type=1400 audit(1785958055.292:440): avc: denied { mounton } for pid=6028 comm="syz.4.58" path="/bus" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.512947][ T30] audit: type=1400 audit(1785958055.292:441): avc: denied { unlink } for pid=6028 comm="syz.4.58" name="#1" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.624182][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.642742][ T187] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.654218][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.671146][ T187] usb 3-1: config 0 descriptor?? [ 91.927196][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.964448][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.041118][ T187] usbhid 3-1:0.0: can't add hid device: -71 [ 92.061975][ T187] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.111045][ T187] usb 3-1: USB disconnect, device number 3 [ 92.126952][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.59'. [ 92.233039][ T6036] ftl_cs: FTL header not found. [ 92.456983][ T6036] block2mtd: mtd1: [/dev/loop0] erase_size = 6KiB [6553] [ 92.562351][ T187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.772453][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.805865][ T187] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 92.841308][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.871711][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'. [ 92.911849][ T187] usb 3-1: config 0 descriptor?? [ 92.949031][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 92.949045][ T30] audit: type=1400 audit(1785958056.732:457): avc: denied { create } for pid=6038 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.058342][ T30] audit: type=1400 audit(1785958056.732:458): avc: denied { ioctl } for pid=6038 comm="syz.3.61" path="socket:[9793]" dev="sockfs" ino=9793 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.124013][ T30] audit: type=1400 audit(1785958056.802:459): avc: denied { write } for pid=6038 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.490855][ T30] audit: type=1400 audit(1785958057.292:460): avc: denied { setopt } for pid=6059 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.644073][ T6065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.66'. [ 93.763184][ T187] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 93.772265][ T187] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 93.822709][ T30] audit: type=1400 audit(1785958057.622:461): avc: denied { create } for pid=6069 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.901510][ T30] audit: type=1400 audit(1785958057.632:462): avc: denied { setopt } for pid=6069 comm="syz.3.68" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.102495][ T30] audit: type=1400 audit(1785958057.902:463): avc: denied { create } for pid=6069 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.165929][ T30] audit: type=1400 audit(1785958057.952:464): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.247164][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 94.827984][ T30] audit: type=1400 audit(1785958058.632:465): avc: denied { shutdown } for pid=6079 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.319678][ T6094] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 95.349193][ T5723] usb 3-1: USB disconnect, device number 4 [ 95.349321][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 95.550923][ T30] audit: type=1800 audit(1785958059.352:466): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.76" name="idVendor" dev="configfs" ino=9816 res=0 errno=0 [ 96.321864][ T6106] ÿ: renamed from dummy0 (while UP) [ 96.608081][ T5723] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 97.576622][ T6123] overlay: filesystem on ./bus not supported as upperdir [ 97.604878][ T5723] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.627520][ T5723] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.636199][ T5723] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 97.647147][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.662839][ T5723] usb 1-1: config 0 descriptor?? [ 98.162442][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 98.190309][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 98.652313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.315852][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x3 [ 99.831634][ T5723] koneplus 0003:1E7D:2E22.0001: ignoring exceeding usage max [ 99.952058][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 99.962406][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 99.979850][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 99.991690][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.001710][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.013906][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.021611][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.539515][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.546978][ T5723] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.560289][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 100.560305][ T30] audit: type=1800 audit(1785958064.362:477): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.91" name="idVendor" dev="configfs" ino=10601 res=0 errno=0 [ 101.124751][ T5723] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 101.282360][ T5723] usb 1-1: USB disconnect, device number 4 [ 101.288306][ T30] audit: type=1800 audit(1785958064.402:478): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.91" name="idProduct" dev="configfs" ino=9949 res=0 errno=0 [ 101.329533][ T30] audit: type=1800 audit(1785958065.132:479): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.91" name="process_ump" dev="configfs" ino=10606 res=0 errno=0 [ 101.360418][ T30] audit: type=1800 audit(1785958065.162:480): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.91" name="direction" dev="configfs" ino=9961 res=0 errno=0 [ 101.524394][ T30] audit: type=1400 audit(1785958065.332:481): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.577357][ T6157] fido_id[6157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.605187][ T30] audit: type=1400 audit(1785958065.332:482): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.693780][ T30] audit: type=1400 audit(1785958065.332:483): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.794307][ T30] audit: type=1400 audit(1785958065.502:484): avc: denied { create } for pid=6159 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.151146][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.187327][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.227190][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.252581][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.602619][ T6185] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 103.646607][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 103.654341][ T6189] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 103.705194][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 105.154539][ T30] audit: type=1400 audit(1785958068.962:485): avc: denied { shutdown } for pid=6184 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.243080][ T30] audit: type=1400 audit(1785958069.042:486): avc: denied { remount } for pid=6196 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.777624][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 105.777639][ T30] audit: type=1800 audit(1785958069.582:488): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.103" name="idVendor" dev="configfs" ino=10687 res=0 errno=0 [ 105.863550][ T6210] syz.1.106 uses obsolete (PF_INET,SOCK_PACKET) [ 105.864104][ T30] audit: type=1800 audit(1785958069.622:489): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.103" name="idProduct" dev="configfs" ino=10690 res=0 errno=0 [ 106.537836][ T30] audit: type=1400 audit(1785958069.642:490): avc: denied { create } for pid=6206 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.671650][ T30] audit: type=1800 audit(1785958069.642:491): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.103" name="process_ump" dev="configfs" ino=10691 res=0 errno=0 [ 106.687920][ T6213] macvlan2: entered promiscuous mode [ 106.769962][ T6219] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 106.781492][ T6213] macvlan2: entered allmulticast mode [ 106.887290][ T30] audit: type=1400 audit(1785958069.642:492): avc: denied { create } for pid=6206 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.441955][ T30] audit: type=1400 audit(1785958069.652:493): avc: denied { setopt } for pid=6206 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.489664][ T30] audit: type=1400 audit(1785958069.652:494): avc: denied { create } for pid=6206 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 107.568912][ T30] audit: type=1400 audit(1785958068.916:495): avc: denied { create } for pid=6206 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.614118][ T30] audit: type=1400 audit(1785958069.506:496): avc: denied { name_bind } for pid=6215 comm="syz.3.108" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 107.709140][ T30] audit: type=1400 audit(1785958069.506:497): avc: denied { create } for pid=6215 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.809330][ T6232] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 107.818408][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 107.852710][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 110.627179][ T6253] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 111.564797][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 111.564814][ T30] audit: type=1800 audit(1785958074.366:508): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.121" name="idVendor" dev="configfs" ino=10085 res=0 errno=0 [ 111.686159][ T30] audit: type=1800 audit(1785958074.406:509): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.121" name="idProduct" dev="configfs" ino=10086 res=0 errno=0 [ 111.708347][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 111.793477][ T30] audit: type=1800 audit(1785958074.406:510): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.121" name="process_ump" dev="configfs" ino=10087 res=0 errno=0 [ 111.849522][ T30] audit: type=1800 audit(1785958074.406:511): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.121" name="direction" dev="configfs" ino=10088 res=0 errno=0 [ 111.907696][ T30] audit: type=1800 audit(1785958074.416:512): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.121" name="active" dev="configfs" ino=10089 res=0 errno=0 [ 111.953786][ T30] audit: type=1400 audit(1785958074.446:513): avc: denied { mmap_zero } for pid=6260 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 111.972402][ T805] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 111.988205][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 112.017043][ T30] audit: type=1400 audit(1785958074.586:514): avc: denied { write } for pid=6264 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.062656][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 112.133868][ T805] usb 5-1: device descriptor read/64, error -71 [ 112.462469][ T805] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 112.624383][ T805] usb 5-1: device descriptor read/64, error -71 [ 112.787815][ T805] usb usb5-port1: attempt power cycle [ 112.869927][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 113.152400][ T805] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 113.182811][ T805] usb 5-1: device descriptor read/8, error -71 [ 113.892364][ T805] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 113.923590][ T805] usb 5-1: device descriptor read/8, error -71 [ 113.941886][ T30] audit: type=1800 audit(1785958076.736:515): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.129" name="idVendor" dev="configfs" ino=10866 res=0 errno=0 [ 114.001641][ T30] audit: type=1800 audit(1785958076.796:516): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.129" name="idProduct" dev="configfs" ino=10869 res=0 errno=0 [ 114.065223][ T805] usb usb5-port1: unable to enumerate USB device [ 114.133364][ T6305] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 115.117697][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 115.150688][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 116.052398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.932791][ T30] audit: type=1800 audit(1785958080.726:517): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.147" name="idVendor" dev="configfs" ino=10198 res=0 errno=0 [ 117.990407][ T30] audit: type=1800 audit(1785958080.726:518): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.147" name="idProduct" dev="configfs" ino=10199 res=0 errno=0 [ 118.053443][ T6343] capability: warning: `syz.3.148' uses deprecated v2 capabilities in a way that may be insecure [ 118.100442][ T30] audit: type=1400 audit(1785958080.896:519): avc: denied { create } for pid=6344 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.137258][ T6343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.152759][ T6345] xt_hashlimit: max too large, truncated to 1048576 [ 118.211195][ T30] audit: type=1400 audit(1785958081.006:520): avc: denied { map } for pid=6344 comm="syz.2.149" path="socket:[10948]" dev="sockfs" ino=10948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 118.298002][ T30] audit: type=1400 audit(1785958081.096:521): avc: denied { cmd } for pid=6344 comm="iou-wrk-6345" path="socket:[10948]" dev="sockfs" ino=10948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.940573][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.141'. [ 119.086800][ T6360] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 119.905587][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.919262][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.016830][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.141118][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.841828][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 120.852877][ T6377] netlink: 92 bytes leftover after parsing attributes in process `syz.3.156'. [ 120.872596][ T30] audit: type=1400 audit(1785958083.666:522): avc: denied { create } for pid=6375 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.921627][ T6377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 120.955875][ T30] audit: type=1400 audit(1785958083.756:523): avc: denied { bind } for pid=6375 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.318306][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 121.499070][ T30] audit: type=1800 audit(1785958084.296:524): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.159" name="idVendor" dev="configfs" ino=11306 res=0 errno=0 [ 121.539383][ T6401] overlay: filesystem on ./bus not supported as upperdir [ 121.551956][ T30] audit: type=1800 audit(1785958084.326:525): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.161" name="idProduct" dev="configfs" ino=11046 res=0 errno=0 [ 121.592466][ T30] audit: type=1800 audit(1785958084.336:526): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.161" name="process_ump" dev="configfs" ino=11047 res=0 errno=0 [ 121.710183][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 121.734103][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 123.385890][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 123.718572][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.733192][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.767284][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.796726][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 123.796743][ T30] audit: type=1400 audit(1785958086.586:530): avc: denied { append } for pid=6413 comm="syz.3.168" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.796751][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.187483][ T30] audit: type=1400 audit(1785958086.986:531): avc: denied { write } for pid=6433 comm="syz.2.172" name="functions" dev="configfs" ino=8084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.234391][ T30] audit: type=1400 audit(1785958087.026:532): avc: denied { write } for pid=6433 comm="syz.2.172" name="target" dev="configfs" ino=3390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.285619][ T30] audit: type=1400 audit(1785958087.026:533): avc: denied { write } for pid=6433 comm="syz.2.172" name="usb_gadget" dev="configfs" ino=11090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.332166][ T6435] se_device not configured yet, cannot port link [ 124.347829][ T30] audit: type=1400 audit(1785958087.066:534): avc: denied { write } for pid=6433 comm="syz.2.172" name="naa.1234567890abcdef" dev="configfs" ino=11092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.411481][ T30] audit: type=1400 audit(1785958087.066:535): avc: denied { write } for pid=6433 comm="syz.2.172" name="core" dev="configfs" ino=3391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.515839][ T30] audit: type=1400 audit(1785958087.066:536): avc: denied { write } for pid=6433 comm="syz.2.172" name="rd_mcp_0" dev="configfs" ino=11102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.578292][ T30] audit: type=1400 audit(1785958087.116:537): avc: denied { write } for pid=6433 comm="syz.2.172" name="lun" dev="configfs" ino=11096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.602967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.650267][ T30] audit: type=1400 audit(1785958087.126:538): avc: denied { write } for pid=6433 comm="syz.2.172" name="lun_0" dev="configfs" ino=11115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.728212][ T30] audit: type=1400 audit(1785958087.126:539): avc: denied { create } for pid=6433 comm="syz.2.172" name="virtual_lun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 124.841129][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 124.870165][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 126.486403][ T6455] FAULT_INJECTION: forcing a failure. [ 126.486403][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.500463][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.4.177 Not tainted syzkaller #0 PREEMPT(full) [ 126.500488][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.500498][ T6455] Call Trace: [ 126.500504][ T6455] [ 126.500510][ T6455] dump_stack_lvl+0x100/0x190 [ 126.500537][ T6455] should_fail_ex.cold+0x5/0xa [ 126.500559][ T6455] _copy_from_user+0x2e/0xd0 [ 126.500586][ T6455] copy_msghdr_from_user+0x9f/0x4c0 [ 126.500607][ T6455] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.500637][ T6455] ___sys_sendmsg+0x106/0x1e0 [ 126.500656][ T6455] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.500672][ T6455] ? __lock_acquire+0x49f/0x1a40 [ 126.500694][ T6455] ? get_pid_task+0x106/0x250 [ 126.500737][ T6455] __sys_sendmsg+0x160/0x210 [ 126.500761][ T6455] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.500797][ T6455] do_syscall_64+0x115/0x870 [ 126.500818][ T6455] ? clear_bhb_loop+0x40/0x90 [ 126.500840][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.500857][ T6455] RIP: 0033:0x7f0dfdd9e0d9 [ 126.500872][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.500888][ T6455] RSP: 002b:00007f0dfebc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.500905][ T6455] RAX: ffffffffffffffda RBX: 00007f0dfe026180 RCX: 00007f0dfdd9e0d9 [ 126.500916][ T6455] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 126.500926][ T6455] RBP: 00007f0dfebc1090 R08: 0000000000000000 R09: 0000000000000000 [ 126.500936][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.500946][ T6455] R13: 00007f0dfe026218 R14: 00007f0dfe026180 R15: 00007fff99a90ac8 [ 126.500969][ T6455] [ 127.224400][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.233839][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.630630][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 127.666145][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 130.111239][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 130.111256][ T30] audit: type=1800 audit(1785958092.906:554): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.190" name="idVendor" dev="configfs" ino=11454 res=0 errno=0 [ 130.152998][ T30] audit: type=1800 audit(1785958092.956:555): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.190" name="idProduct" dev="configfs" ino=11456 res=0 errno=0 [ 130.208274][ T30] audit: type=1800 audit(1785958092.956:556): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.190" name="process_ump" dev="configfs" ino=11458 res=0 errno=0 [ 130.382025][ T30] audit: type=1400 audit(1785958093.176:557): avc: denied { listen } for pid=6491 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.466133][ T30] audit: type=1400 audit(1785958093.256:558): avc: denied { read } for pid=6507 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.508128][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 130.564581][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 131.412327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.458510][ T30] audit: type=1400 audit(1785958094.256:559): avc: denied { write } for pid=6514 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.549014][ T6515] overlayfs: missing 'lowerdir' [ 131.584913][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 131.618366][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 131.677624][ T30] audit: type=1400 audit(1785958094.476:560): avc: denied { execute } for pid=6522 comm="syz.2.202" path="/53/file1" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.743930][ T30] audit: type=1400 audit(1785958094.526:561): avc: denied { watch } for pid=6522 comm="syz.2.202" path="/53/net_prio.prioidx" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.800003][ T30] audit: type=1400 audit(1785958094.526:562): avc: denied { watch_sb watch_reads } for pid=6522 comm="syz.2.202" path="/53/net_prio.prioidx" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.842018][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 131.905169][ T30] audit: type=1400 audit(1785958094.586:563): avc: denied { create } for pid=6521 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 132.050362][ T6528] bond1 (unregistering): Released all slaves [ 132.359423][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 132.696264][ T6543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6543 comm=syz.2.211 [ 133.208841][ T6557] xt_hashlimit: size too large, truncated to 1048576 [ 133.947132][ T6565] Bluetooth: MGMT ver 1.23 [ 133.994086][ T6570] xt_hashlimit: size too large, truncated to 1048576 [ 135.521202][ T6585] netlink: 244 bytes leftover after parsing attributes in process `syz.2.221'. [ 135.535427][ T6585] Cannot find add_set index 0 as target [ 136.097033][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 136.097053][ T30] audit: type=1400 audit(1785958098.896:574): avc: denied { search } for pid=6583 comm="syz.2.221" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.249533][ T30] audit: type=1400 audit(1785958098.896:575): avc: denied { search } for pid=6583 comm="syz.2.221" name="usb_gadget" dev="configfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.284777][ T30] audit: type=1400 audit(1785958098.896:576): avc: denied { search } for pid=6583 comm="syz.2.221" name="g1" dev="configfs" ino=8083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.321291][ T30] audit: type=1400 audit(1785958098.896:577): avc: denied { search } for pid=6583 comm="syz.2.221" name="functions" dev="configfs" ino=8084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.371904][ T30] audit: type=1400 audit(1785958099.116:578): avc: denied { create } for pid=6590 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.476999][ T6596] warning: `syz.0.224' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.502814][ T6599] busy [ 136.717780][ T6608] xt_hashlimit: size too large, truncated to 1048576 [ 137.224488][ T30] audit: type=1800 audit(1785958100.026:579): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.233" name="idVendor" dev="configfs" ino=11630 res=0 errno=0 [ 137.273378][ T30] audit: type=1800 audit(1785958100.056:580): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.233" name="process_ump" dev="configfs" ino=11631 res=0 errno=0 [ 137.393140][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 139.789511][ T6633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.874562][ T6633] bond2 (unregistering): Released all slaves [ 141.177576][ T6669] xt_hashlimit: size too large, truncated to 1048576 [ 141.736977][ T30] audit: type=1400 audit(1785958103.545:581): avc: denied { mount } for pid=6656 comm="syz.4.244" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 141.964135][ T30] audit: type=1400 audit(1785958103.765:582): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.165067][ T30] audit: type=1400 audit(1785958103.965:583): avc: denied { read } for pid=6700 comm="syz.2.255" dev="sockfs" ino=12673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.171804][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 142.250652][ T30] audit: type=1400 audit(1785958103.965:584): avc: denied { bind } for pid=6700 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.316005][ T30] audit: type=1400 audit(1785958103.965:585): avc: denied { setopt } for pid=6700 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.389358][ T30] audit: type=1400 audit(1785958103.965:586): avc: denied { write } for pid=6700 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.641890][ T30] audit: type=1400 audit(1785958104.435:587): avc: denied { getopt } for pid=6714 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.708052][ T30] audit: type=1400 audit(1785958104.465:588): avc: denied { setopt } for pid=6714 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.767751][ T30] audit: type=1800 audit(1785958104.485:589): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.261" name="file0" dev="tmpfs" ino=321 res=0 errno=0 [ 143.225456][ T6734] xt_hashlimit: size too large, truncated to 1048576 [ 144.089532][ T30] audit: type=1400 audit(1785958105.895:590): avc: denied { mounton } for pid=6749 comm="syz.1.273" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.174813][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 144.567747][ T6764] 9p: Bad value for 'rfdno' [ 144.725338][ T805] IPVS: starting estimator thread 0... [ 144.854188][ T6779] IPVS: using max 50 ests per chain, 120000 per kthread [ 146.126308][ T6797] tmpfs: Bad value for 'mpol' [ 146.141337][ T6795] xt_hashlimit: size too large, truncated to 1048576 [ 146.961619][ T5805] IPVS: starting estimator thread 0... [ 147.083877][ T6816] IPVS: using max 79 ests per chain, 189600 per kthread [ 147.103656][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 147.103670][ T30] audit: type=1400 audit(1785958108.905:601): avc: denied { ioctl } for pid=6818 comm="syz.3.299" path="socket:[12919]" dev="sockfs" ino=12919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.157354][ T6823] netlink: 'syz.3.299': attribute type 5 has an invalid length. [ 147.412743][ T30] audit: type=1400 audit(1785958109.205:602): avc: denied { ioctl } for pid=6824 comm="syz.0.300" path="socket:[12953]" dev="sockfs" ino=12953 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.521161][ T6836] busy [ 147.690402][ T6840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6840 comm=syz.0.304 [ 147.753204][ T30] audit: type=1400 audit(1785958109.545:603): avc: denied { mount } for pid=6839 comm="syz.0.304" name="/" dev="ramfs" ino=12974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 147.903222][ T6843] xt_hashlimit: size too large, truncated to 1048576 [ 148.643299][ T30] audit: type=1400 audit(1785958110.445:604): avc: denied { getopt } for pid=6862 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.876001][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 149.400640][ T6876] busy [ 150.099540][ T6887] xt_hashlimit: size too large, truncated to 1048576 [ 150.657174][ T6899] lo speed is unknown, defaulting to 1000 [ 150.713787][ T6899] lo speed is unknown, defaulting to 1000 [ 150.778448][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 150.819316][ T6899] lo speed is unknown, defaulting to 1000 [ 150.860924][ T6899] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 150.939364][ T6899] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 150.992634][ T6899] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 151.023363][ T30] audit: type=1400 audit(1785958112.825:605): avc: denied { setopt } for pid=6905 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.053561][ T6899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.083514][ T6899] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.188191][ T30] audit: type=1400 audit(1785958112.975:606): avc: denied { mounton } for pid=6910 comm="syz.4.329" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 151.196972][ T6899] lo speed is unknown, defaulting to 1000 [ 151.324494][ T6899] lo speed is unknown, defaulting to 1000 [ 151.331564][ T6899] lo speed is unknown, defaulting to 1000 [ 151.340109][ T6899] lo speed is unknown, defaulting to 1000 [ 151.370166][ T6899] lo speed is unknown, defaulting to 1000 [ 152.070410][ T6926] busy [ 152.203993][ T6930] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 152.242386][ T30] audit: type=1400 audit(1785958114.025:607): avc: denied { mounton } for pid=6931 comm="syz.0.335" path="/proc/184/task" dev="proc" ino=12073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 153.228828][ T6944] xt_hashlimit: size too large, truncated to 1048576 [ 154.711769][ T6961] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 155.728778][ T6970] usbip-vudc usbip-vudc.0: gadget not bound [ 155.767729][ T6976] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 155.789716][ T6979] busy [ 155.803423][ T6970] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.507783][ T6984] overlay: filesystem on ./bus not supported as upperdir [ 156.809369][ T7000] xt_hashlimit: size too large, truncated to 1048576 [ 156.904951][ T30] audit: type=1400 audit(1785958118.705:608): avc: denied { bind } for pid=7001 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.311724][ T30] audit: type=1400 audit(1785958119.105:609): avc: denied { view } for pid=7009 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 157.400168][ T30] audit: type=1400 audit(1785958119.195:610): avc: denied { listen } for pid=7001 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.443261][ T30] audit: type=1400 audit(1785958119.225:611): avc: denied { accept } for pid=7001 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.456797][ T7014] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 158.399388][ T7021] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 159.406387][ T7038] overlay: filesystem on ./bus not supported as upperdir [ 159.458621][ T7039] busy [ 160.139145][ T30] audit: type=1400 audit(1785958121.935:612): avc: denied { read write } for pid=7052 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.187383][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.201323][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.211410][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.220659][ T30] audit: type=1400 audit(1785958121.935:613): avc: denied { open } for pid=7052 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.246133][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.256673][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.610663][ T7064] FAULT_INJECTION: forcing a failure. [ 160.610663][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.634397][ T7063] kernel read not supported for file /3\mÍïò%DÂØy]Ù”ô z_Îö\ªz™PZÃ.ÎÜÑ{¹µ–ê«ŽRÿÓH"B ‰”žŠ&Áˆyº¬œÛ%ËbYÑäo»  (pid: 7063 comm: syz.0.370) [ 160.649687][ T30] audit: type=1800 audit(1785958122.445:614): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.370" name=335C6DCDEFF22544C2D81B15795D0E1FD91694F40C127A5FCEF65CAA7A99505AC32ECEDCD17BB9B596EAAB8E52FFD3482242A089941A9E1604198A26C1887912BAAC9CDB1225CB6259D1E46FBB2005 dev="mqueue" ino=12237 res=0 errno=0 [ 160.731699][ T7064] CPU: 0 UID: 0 PID: 7064 Comm: syz.1.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.731729][ T7064] Tainted: [L]=SOFTLOCKUP [ 160.731735][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.731745][ T7064] Call Trace: [ 160.731750][ T7064] [ 160.731757][ T7064] dump_stack_lvl+0x100/0x190 [ 160.731783][ T7064] should_fail_ex.cold+0x5/0xa [ 160.731804][ T7064] _copy_from_user+0x2e/0xd0 [ 160.731828][ T7064] copy_msghdr_from_user+0x9f/0x4c0 [ 160.731847][ T7064] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.731876][ T7064] ___sys_sendmsg+0x106/0x1e0 [ 160.731900][ T7064] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.731916][ T7064] ? __lock_acquire+0x49f/0x1a40 [ 160.731938][ T7064] ? get_pid_task+0x106/0x250 [ 160.731980][ T7064] __sys_sendmsg+0x160/0x210 [ 160.732002][ T7064] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.732036][ T7064] do_syscall_64+0x115/0x870 [ 160.732058][ T7064] ? clear_bhb_loop+0x40/0x90 [ 160.732080][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.732097][ T7064] RIP: 0033:0x7fe6b799e0d9 [ 160.732112][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.732129][ T7064] RSP: 002b:00007fe6b88f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.732146][ T7064] RAX: ffffffffffffffda RBX: 00007fe6b7c25fa0 RCX: 00007fe6b799e0d9 [ 160.732157][ T7064] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 160.732166][ T7064] RBP: 00007fe6b88f2090 R08: 0000000000000000 R09: 0000000000000000 [ 160.732176][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.732186][ T7064] R13: 00007fe6b7c26038 R14: 00007fe6b7c25fa0 R15: 00007ffeb818e898 [ 160.732208][ T7064] [ 161.382116][ T200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.461110][ T7078] fuse: Bad value for 'fd' [ 161.483969][ T30] audit: type=1400 audit(1785958123.275:615): avc: denied { mount } for pid=7065 comm="syz.4.372" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 161.770981][ T30] audit: type=1400 audit(1785958123.565:616): avc: denied { create } for pid=7084 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 161.828572][ T7086] netlink: 632 bytes leftover after parsing attributes in process `syz.3.376'. [ 161.838485][ T30] audit: type=1400 audit(1785958123.625:617): avc: denied { write } for pid=7084 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 161.879899][ T200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.106305][ T200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.158479][ T7092] busy [ 162.192057][ T7052] lo speed is unknown, defaulting to 1000 [ 162.254055][ T200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.342353][ T5622] Bluetooth: hci5: command tx timeout [ 162.636141][ T30] audit: type=1400 audit(1785958124.435:618): avc: denied { search } for pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.735872][ T30] audit: type=1400 audit(1785958124.455:619): avc: denied { search } for pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.797586][ T200] bridge_slave_1: left allmulticast mode [ 162.818638][ T200] bridge_slave_1: left promiscuous mode [ 162.833184][ T30] audit: type=1400 audit(1785958124.455:620): avc: denied { search } for pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.871544][ T200] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.885236][ T30] audit: type=1400 audit(1785958124.455:621): avc: denied { read } for pid=5274 comm="dhcpcd" name="n30" dev="tmpfs" ino=2305 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.928808][ T30] audit: type=1400 audit(1785958124.455:622): avc: denied { open } for pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2305 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.952880][ T200] bridge_slave_0: left allmulticast mode [ 162.962384][ T200] bridge_slave_0: left promiscuous mode [ 162.968170][ T200] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.976625][ T30] audit: type=1400 audit(1785958124.455:623): avc: denied { getattr } for pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2305 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.030154][ T7109] netlink: zone id is out of range [ 163.055192][ T7109] netlink: zone id is out of range [ 163.076044][ T7109] netlink: zone id is out of range [ 163.085142][ T7109] netlink: zone id is out of range [ 163.086356][ T7111] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.382'. [ 163.117417][ T7109] netlink: zone id is out of range [ 163.139461][ T7109] netlink: zone id is out of range [ 163.152711][ T30] audit: type=1400 audit(1785958124.955:624): avc: denied { read } for pid=7112 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.177578][ T7109] netlink: zone id is out of range [ 163.199261][ T30] audit: type=1400 audit(1785958124.955:625): avc: denied { read open } for pid=7112 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.231189][ T7109] netlink: zone id is out of range [ 163.233046][ T30] audit: type=1400 audit(1785958124.955:626): avc: denied { getattr } for pid=7112 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.346559][ T200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.368788][ T7109] netlink: zone id is out of range [ 163.380399][ T7109] netlink: zone id is out of range [ 163.454823][ T200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.510932][ T200] bond0 (unregistering): Released all slaves [ 163.706773][ T7121] capability: warning: `syz.4.384' uses 32-bit capabilities (legacy support in use) [ 163.736942][ T200] rxrpc: Leaked peer e7 {1} 127.0.0.1:7003 [ 163.755183][ T30] audit: type=1400 audit(1785958125.555:627): avc: denied { setopt } for pid=7120 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.503311][ T5622] Bluetooth: hci5: command tx timeout [ 164.550246][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.095251][ T7141] bridge_slave_0 (unregistering): left allmulticast mode [ 165.114808][ T7145] busy [ 165.139730][ T7141] bridge_slave_0 (unregistering): left promiscuous mode [ 165.170085][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.181877][ T7151] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 165.253821][ T7151] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 165.319142][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.359502][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.367846][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.375588][ T7052] bridge_slave_0: entered allmulticast mode [ 165.387237][ T7052] bridge_slave_0: entered promiscuous mode [ 165.419777][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.443835][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.465355][ T7052] bridge_slave_1: entered allmulticast mode [ 165.473229][ T7052] bridge_slave_1: entered promiscuous mode [ 165.500572][ T200] hsr_slave_0: left promiscuous mode [ 165.514514][ T200] hsr_slave_1: left promiscuous mode [ 165.598948][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 165.607881][ T200] veth1_macvtap: left promiscuous mode [ 165.618631][ T200] veth0_macvtap: left promiscuous mode [ 165.626662][ T200] veth1_vlan: left promiscuous mode [ 165.632079][ T200] veth0_vlan: left promiscuous mode [ 166.384540][ T200] team0 (unregistering): Port device team_slave_1 removed [ 166.402140][ T200] team0 (unregistering): Port device team_slave_0 removed [ 166.474673][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.486558][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.523047][ T7052] team0: Port device team_slave_0 added [ 166.548946][ T7052] team0: Port device team_slave_1 added [ 166.582336][ T5622] Bluetooth: hci5: command tx timeout [ 166.592647][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.613240][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.640508][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.655909][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.676863][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.712584][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.784907][ T7052] hsr_slave_0: entered promiscuous mode [ 166.791437][ T7052] hsr_slave_1: entered promiscuous mode [ 167.407856][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.183291][ T7052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.232679][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.258467][ T7052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.304721][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.315755][ T7212] net_ratelimit: 12 callbacks suppressed [ 168.315774][ T7212] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 168.333237][ T7052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.466466][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.474510][ T7052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.497405][ T7218] busy [ 168.501159][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.674390][ T5622] Bluetooth: hci5: command tx timeout [ 169.287278][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.313733][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.320716][ T7213] raw_sendmsg: syz.1.402 forgot to set AF_INET. Fix it! [ 169.346668][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.353834][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.387784][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.394976][ T7227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.474259][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 169.474275][ T30] audit: type=1400 audit(1785958131.275:648): avc: denied { write } for pid=7206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.702636][ T30] audit: type=1400 audit(1785958131.495:649): avc: denied { write } for pid=7244 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.823936][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 170.004631][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 171.675756][ T30] audit: type=1400 audit(1785958131.483:650): avc: denied { bind } for pid=7281 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.712144][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 171.758326][ T30] audit: type=1400 audit(1785958131.563:651): avc: denied { bind } for pid=7281 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.828902][ T30] audit: type=1400 audit(1785958131.563:652): avc: denied { listen } for pid=7281 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.894757][ T30] audit: type=1400 audit(1785958131.563:653): avc: denied { connect } for pid=7281 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.943499][ T30] audit: type=1400 audit(1785958131.593:654): avc: denied { read } for pid=7281 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.977832][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.011211][ T30] audit: type=1400 audit(1785958131.683:655): avc: denied { write } for pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.089011][ T30] audit: type=1400 audit(1785958131.843:656): avc: denied { write } for pid=7297 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.141842][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.358575][ T30] audit: type=1400 audit(1785958132.163:657): avc: denied { nlmsg_read } for pid=7308 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.449330][ T7052] veth0_vlan: entered promiscuous mode [ 172.467025][ T7282] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 172.601044][ T7052] veth1_vlan: entered promiscuous mode [ 172.631486][ T7052] veth0_macvtap: entered promiscuous mode [ 172.641004][ T7052] veth1_macvtap: entered promiscuous mode [ 172.716468][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.772806][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.826576][ T97] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.853442][ T97] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.925269][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.947030][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.994232][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.011103][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.057601][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.066310][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.360028][ T7354] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 174.554552][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.474153][ T7351] bridge_slave_1 (unregistering): left allmulticast mode [ 175.498604][ T7351] bridge_slave_1 (unregistering): left promiscuous mode [ 175.506770][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 175.538935][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.961837][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 175.961852][ T30] audit: type=1400 audit(1785958134.756:664): avc: denied { write } for pid=7343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.011912][ T7377] busy [ 176.135433][ T30] audit: type=1400 audit(1785958134.936:665): avc: denied { write } for pid=7379 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.344313][ T30] audit: type=1400 audit(1785958135.146:666): avc: denied { connect } for pid=7383 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.410298][ T30] audit: type=1400 audit(1785958135.176:667): avc: denied { checkpoint_restore } for pid=7373 comm="syz.1.430" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.087716][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 177.249757][ T30] audit: type=1400 audit(1785958136.006:668): avc: denied { read } for pid=7405 comm="syz.5.435" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.670090][ T30] audit: type=1400 audit(1785958136.466:669): avc: denied { write } for pid=7390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.806436][ T30] audit: type=1400 audit(1785958136.606:670): avc: denied { write } for pid=7416 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.817812][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.850884][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.887583][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.921801][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.955142][ T7444] Cannot find set identified by id 0 to match [ 178.992007][ T7444] EXT4-fs: Conflicting test_dummy_encryption options [ 179.019624][ T30] audit: type=1400 audit(1785958136.816:671): avc: denied { bind } for pid=7443 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.075536][ T30] audit: type=1400 audit(1785958136.816:672): avc: denied { read } for pid=7443 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.115233][ T30] audit: type=1400 audit(1785958136.846:673): avc: denied { write } for pid=7423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.978787][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 180.978803][ T30] audit: type=1400 audit(1785958137.782:679): avc: denied { read } for pid=7482 comm="syz.5.451" path="socket:[16441]" dev="sockfs" ino=16441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.591247][ T7484] loop5: detected capacity change from 0 to 7 [ 181.691120][ T30] audit: type=1400 audit(1785958137.490:680): avc: denied { mount } for pid=7499 comm="syz.0.455" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.768468][ T7484] Dev loop5: unable to read RDB block 7 [ 181.807991][ T7484] loop5: unable to read partition table [ 181.840501][ T7484] loop5: partition table beyond EOD, truncated [ 181.875521][ T7484] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.916213][ T30] audit: type=1400 audit(1785958137.700:681): avc: denied { write } for pid=7480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.051105][ T30] audit: type=1400 audit(1785958137.850:682): avc: denied { write } for pid=7514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.621960][ T30] audit: type=1400 audit(1785958138.420:683): avc: denied { getopt } for pid=7518 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.723012][ T30] audit: type=1400 audit(1785958138.530:684): avc: denied { read write } for pid=7530 comm="syz.5.457" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 182.786345][ T30] audit: type=1400 audit(1785958138.550:685): avc: denied { open } for pid=7530 comm="syz.5.457" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 182.862078][ T7535] xt_hashlimit: size too large, truncated to 1048576 [ 182.886353][ T30] audit: type=1400 audit(1785958138.550:686): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 183.086316][ T30] audit: type=1400 audit(1785958138.890:687): avc: denied { write } for pid=7521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.160487][ T30] audit: type=1400 audit(1785958138.960:688): avc: denied { write } for pid=7546 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.327396][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 183.623139][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 183.745160][ T7573] SELinux: invalid class [ 183.797026][ T7573] SELinux: failed to load policy [ 184.122989][ T187] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.273872][ T187] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.286859][ T187] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 184.297026][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.305368][ T187] usb 6-1: Product: syz [ 184.309731][ T187] usb 6-1: Manufacturer: syz [ 184.314745][ T187] usb 6-1: SerialNumber: syz [ 184.333623][ T187] symbolserial 6-1:1.0: symbol converter detected [ 184.349727][ T187] usb 6-1: symbol converter now attached to ttyUSB0 [ 184.542490][ T187] usb 6-1: USB disconnect, device number 2 [ 184.560738][ T187] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 184.571804][ T187] symbolserial 6-1:1.0: device disconnected [ 185.356950][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 185.807766][ T7602] xt_hashlimit: size too large, truncated to 1048576 [ 186.699481][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 186.699572][ T30] audit: type=1400 audit(1785958141.504:700): avc: denied { mounton } for pid=7618 comm="syz.1.475" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 186.734205][ T30] audit: type=1400 audit(1785958141.544:701): avc: denied { mounton } for pid=7618 comm="syz.1.475" path="/100/bus" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.886009][ T7619] siw: device registration error -23 [ 186.961751][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.075032][ T30] audit: type=1400 audit(1785958141.884:702): avc: denied { write } for pid=7628 comm="syz.1.477" name="functions" dev="configfs" ino=8084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.090470][ T7629] [ 187.099951][ T7629] ====================================================== [ 187.106969][ T7629] WARNING: possible circular locking dependency detected [ 187.109074][ T30] audit: type=1400 audit(1785958141.884:703): avc: denied { write } for pid=7628 comm="syz.1.477" name="header" dev="configfs" ino=15673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.113982][ T7629] syzkaller #0 Tainted: G L [ 187.113993][ T7629] ------------------------------------------------------ [ 187.113999][ T7629] syz.1.477/7629 is trying to acquire lock: [ 187.114009][ T7629] ffffffff901d0fe8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.114062][ T7629] [ 187.114062][ T7629] but task is already holding lock: [ 187.114068][ T7629] ffff8880567ea740 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 187.114120][ T7629] [ 187.114120][ T7629] which lock already depends on the new lock. [ 187.114120][ T7629] [ 187.114131][ T7629] [ 187.114131][ T7629] the existing dependency chain (in reverse order) is: [ 187.114137][ T7629] [ 187.114137][ T7629] -> #2 [ 187.137044][ T30] audit: type=1400 audit(1785958141.894:704): avc: denied { write } for pid=7628 comm="syz.1.477" name="ss" dev="configfs" ino=15683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.142474][ T7629] (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 187.142504][ T7629] lock_acquire+0x1b9/0x370 [ 187.149586][ T30] audit: type=1400 audit(1785958141.894:705): avc: denied { write } for pid=7628 comm="syz.1.477" name="ss" dev="configfs" ino=15683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.155352][ T7629] down_write+0x8b/0x1f0 [ 187.155375][ T7629] configfs_depend_item_unlocked+0xf3/0x6a0 [ 187.155401][ T7629] usbg_make_tpg+0x261/0x620 [ 187.155419][ T7629] target_fabric_make_tpg+0xab/0x8c0 [ 187.155444][ T7629] configfs_mkdir+0x51e/0xb70 [ 187.155463][ T7629] vfs_mkdir+0x361/0x850 [ 187.155485][ T7629] filename_mkdirat+0x48b/0x5e0 [ 187.155501][ T7629] __x64_sys_mkdir+0x6b/0x90 [ 187.155517][ T7629] do_syscall_64+0x115/0x870 [ 187.168300][ T30] audit: type=1400 audit(1785958141.894:706): avc: denied { write } for pid=7628 comm="syz.1.477" name="uncompressed" dev="configfs" ino=15687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.174015][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.174038][ T7629] [ 187.174038][ T7629] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 187.174064][ T7629] lock_acquire+0x1b9/0x370 [ 187.184637][ T30] audit: type=1400 audit(1785958141.894:707): avc: denied { write } for pid=7628 comm="syz.1.477" name="header" dev="configfs" ino=15686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.194828][ T7629] __mutex_lock+0x1a4/0x1bd0 [ 187.194853][ T7629] tcm_set_name+0x29/0xb0 [ 187.204054][ T30] audit: type=1400 audit(1785958141.894:708): avc: denied { write } for pid=7628 comm="syz.1.477" name="h" dev="configfs" ino=15702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.208757][ T7629] function_make+0x21c/0x3f0 [ 187.208780][ T7629] configfs_mkdir+0x51e/0xb70 [ 187.208802][ T7629] vfs_mkdir+0x361/0x850 [ 187.422288][ T7629] filename_mkdirat+0x48b/0x5e0 [ 187.427654][ T7629] __x64_sys_mkdir+0x6b/0x90 [ 187.432749][ T7629] do_syscall_64+0x115/0x870 [ 187.437833][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.444233][ T7629] [ 187.444233][ T7629] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 187.452474][ T7629] check_prev_add+0xeb/0xe60 [ 187.457559][ T7629] __lock_acquire+0x136c/0x1a40 [ 187.462914][ T7629] lock_acquire+0x1b9/0x370 [ 187.467937][ T7629] __mutex_lock+0x1a4/0x1bd0 [ 187.473032][ T7629] uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.479694][ T7629] configfs_symlink+0x540/0x11f0 [ 187.485139][ T7629] vfs_symlink+0x178/0x4d0 [ 187.490063][ T7629] filename_symlinkat+0x2a6/0x560 [ 187.495581][ T7629] __x64_sys_symlink+0x79/0xb0 [ 187.500847][ T7629] do_syscall_64+0x115/0x870 [ 187.505947][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.512348][ T7629] [ 187.512348][ T7629] other info that might help us debug this: [ 187.512348][ T7629] [ 187.522650][ T7629] Chain exists of: [ 187.522650][ T7629] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 187.522650][ T7629] [ 187.537316][ T7629] Possible unsafe locking scenario: [ 187.537316][ T7629] [ 187.544756][ T7629] CPU0 CPU1 [ 187.550108][ T7629] ---- ---- [ 187.555467][ T7629] lock(&sb->s_type->i_mutex_key#24); [ 187.560918][ T7629] lock(&opts->dep_lock); [ 187.567838][ T7629] lock(&sb->s_type->i_mutex_key#24); [ 187.575823][ T7629] lock(gadget_subsys.su_mutex); [ 187.580832][ T7629] [ 187.580832][ T7629] *** DEADLOCK *** [ 187.580832][ T7629] [ 187.588947][ T7629] 2 locks held by syz.1.477/7629: [ 187.593949][ T7629] #0: ffff88801e344450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 187.603444][ T7629] #1: ffff8880567ea740 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 187.614299][ T7629] [ 187.614299][ T7629] stack backtrace: [ 187.620182][ T7629] CPU: 1 UID: 0 PID: 7629 Comm: syz.1.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.620199][ T7629] Tainted: [L]=SOFTLOCKUP [ 187.620202][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 187.620209][ T7629] Call Trace: [ 187.620214][ T7629] [ 187.620218][ T7629] dump_stack_lvl+0x100/0x190 [ 187.620250][ T7629] print_circular_bug.cold+0x178/0x1c7 [ 187.620277][ T7629] check_noncircular+0x146/0x160 [ 187.620295][ T7629] ? audit_log_end+0x24/0x30 [ 187.620315][ T7629] check_prev_add+0xeb/0xe60 [ 187.620328][ T7629] __lock_acquire+0x136c/0x1a40 [ 187.620342][ T7629] lock_acquire+0x1b9/0x370 [ 187.620354][ T7629] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.620375][ T7629] ? __pfx___might_resched+0x10/0x10 [ 187.620394][ T7629] ? audit_inode_permission+0x1ea/0x2a0 [ 187.620417][ T7629] __mutex_lock+0x1a4/0x1bd0 [ 187.620438][ T7629] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.620453][ T7629] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.620466][ T7629] ? __lock_acquire+0x49f/0x1a40 [ 187.620479][ T7629] ? __pfx___mutex_lock+0x10/0x10 [ 187.620492][ T7629] ? selinux_inode_permission+0x14a/0x1130 [ 187.620508][ T7629] ? __pfx___might_resched+0x10/0x10 [ 187.620527][ T7629] ? make_vfsgid+0xf1/0x140 [ 187.620554][ T7629] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.620575][ T7629] ? security_inode_permission+0xbf/0x250 [ 187.620594][ T7629] uvcg_streaming_header_allow_link+0x7c/0x650 [ 187.620607][ T7629] ? inode_permission+0x374/0x620 [ 187.620621][ T7629] ? mntput_no_expire+0xe7/0x220 [ 187.620632][ T7629] configfs_symlink+0x540/0x11f0 [ 187.620649][ T7629] ? __pfx_configfs_symlink+0x10/0x10 [ 187.620674][ T7629] vfs_symlink+0x178/0x4d0 [ 187.620697][ T7629] filename_symlinkat+0x2a6/0x560 [ 187.620718][ T7629] ? __pfx_filename_symlinkat+0x10/0x10 [ 187.620733][ T7629] ? strncpy_from_user+0x19d/0x2d0 [ 187.620750][ T7629] ? do_getname+0x191/0x390 [ 187.620763][ T7629] __x64_sys_symlink+0x79/0xb0 [ 187.620776][ T7629] do_syscall_64+0x115/0x870 [ 187.620788][ T7629] ? clear_bhb_loop+0x40/0x90 [ 187.620807][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.620824][ T7629] RIP: 0033:0x7fe6b799e0d9 [ 187.620838][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.620854][ T7629] RSP: 002b:00007fe6b88f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 187.620869][ T7629] RAX: ffffffffffffffda RBX: 00007fe6b7c25fa0 RCX: 00007fe6b799e0d9 [ 187.620876][ T7629] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000 [ 187.620882][ T7629] RBP: 00007fe6b7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 187.620888][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.620894][ T7629] R13: 00007fe6b7c26038 R14: 00007fe6b7c25fa0 R15: 00007ffeb818e898 [ 187.620904][ T7629] [ 187.904166][ T30] audit: type=1400 audit(1785958141.894:709): avc: denied { write } for pid=7628 comm="syz.1.477" name="h" dev="configfs" ino=15702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.966571][ T5860] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 187.975260][ T5860] usb 6-1: config 0 has no interface number 0 [ 187.987896][ T5860] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.026142][ T5860] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 188.037597][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.047564][ T5860] usb 6-1: Product: syz [ 188.062322][ T5860] usb 6-1: Manufacturer: syz [ 188.067500][ T5860] usb 6-1: SerialNumber: syz [ 188.078200][ T5860] usb 6-1: config 0 descriptor?? [ 188.123809][ T5860] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 188.315665][ T5860] usb 6-1: USB disconnect, device number 3 [ 188.324096][ T5860] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 188.664254][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.670631][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.742333][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 190.752556][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 190.753195][ T5614] Bluetooth: hci1: command 0x0406 tx timeout