last executing test programs: 1m42.989720255s ago: executing program 4 (id=983): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000700)=@rnullb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m42.19757903s ago: executing program 4 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000001500)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0xe}) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbf9, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001340)='stack\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0xa3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x20, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x240}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000340)={&(0x7f0000000240)=[{0x4, 0x1, 0x4, 0x5, 0x80000001}, {0x80, 0x525, 0x94, 0x0, 0xce}, {0x10, 0x0, 0x1, 0x0, 0x4}, {0xff, 0x9, 0x6c4e, 0x1, 0xd3}, {0x2, 0x7, 0x8, 0xfffffffffffffff2, 0x9}, {0x8, 0x9, 0x0, 0x6, 0x1}], 0x6, 0x28, 0x8, 0xa0a4}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 1m41.74276551s ago: executing program 2 (id=987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m41.72827114s ago: executing program 4 (id=988): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000014) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x29) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x28000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r6, 0x40044104, &(0x7f0000000080)=0xff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) 1m41.512970574s ago: executing program 2 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) 1m40.754465107s ago: executing program 2 (id=990): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x441, 0x800003a, r6, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) 1m40.094623743s ago: executing program 4 (id=991): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5a387b911eb941ecce87bebe66b71b56fe697a23732450a635d9f660c5322f9c9f681dbee42de67ec62a8781c5eb925e79ef37a72e9fcc6217cdd2bf7dee2f32965d7613aa0e23f516613ffb626fa18a88f8adc8b17dab3d1004c59909cd0164e1cd2db25a68fb5685eb7be67934a48662f8661584037a9e11", 0x79}], 0x1, r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000568000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1m38.105730723s ago: executing program 4 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./binfmt/register\x00', 0x1, 0xcd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff04, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback}, "000022ebffff0700"}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) 1m37.503294972s ago: executing program 4 (id=996): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000700)=@rnullb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m36.03083515s ago: executing program 2 (id=998): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000100)={{}, "adebb0a596604d40a6330b82f0e1dab2ea94bb0b5e6adefd6f3fbb6d27fc5c2ea74935dedfffe9a1b05f5960e6d6d73909a4e1be941ffa17515ab77ffdc05cbecd61ab7eabe170843b6d89c4e83fcb4eae3f495ca6ab512bea918bf0d2e6c9fe231451ed7d2ff446fbb70f9be33a971e458043ae47110e9e2047bd4b47d081b38675de76201b978ab68007cad9cdbd402d2f17c55429863dd4c3859b143330781c59469ad8c2b67d9412ce976893857143c7e00fd11d43e4d836a2acf60e00d0572362bbc92ff13e3b7687b59af420efd080d3ecb2eec95938259d247b0bb59e70b0932a8be2895f0283bcd568cb7158229decc208e8462cbd2fb0d78738df93d4356b2a1476ad1d09086384a401720e27762ac5c9380319dd759a65adfdf0b5e61cc8544abebcdba770a604346c3039dcb85b28063a718add6d258f364577d53cc0caf8001e52a5eec82421834ee498ac12d97761ce0d3a2374b9ae64aa9b74acd516a47a319641660876516850be0f3df07efb5cafc6b1c8db379ae45756f41675e4ac2ced8a07d8445d4280548af0e48f85db27c199979a7f6ddcb06143e4bf82be7f7bd3196ca9a72ab953798798771cdc728aaff09990d0601669dbfd7013ce22abba44add25ccc0a8fe36dac522dffd30db78791277a797d018b5f0964f44df17d2957a06164a657c9d4757bfc1911cd790ea8189f17a0288830ed26b36878d86ecceab4c7eaec0a861d1e130a83ae5ef140ac142f144efe978b1f77055f3046c60bfd5423ad1ccdd85cd50240213941e7ef7a3a4658d3a956b4afd2ee31136759875d481e62fa7b39c07cad764c74975670230a5e7f353bd20c34f47af8fa537faa6d51fd1bfe27a44220b5fadf8ad286e3369fbd3ec2361d9a9e2e9d0e27912e5bb50fac879f15413ec6a14766d50a04a6433fe5be57421e9e3e22ec9b633b664babfd06205f68aca7fe10832d1c2969d0a6bdaaf79a7a1082519c9be965990c67d1aba7a82bb49aad882001f1577c6abdc9e3ce1a1a17525f642032c70b75f3284e1247a8824357cf48a037930c1245a6af947524ea416bfc05ed98565faca53cc425adb1e638911cb55e697a4888aa8b10ce8cfe8d9901951eee6a2ee66a272032ea50a69c0498d5602f2286331cf8b4d5578c494b4049e4117373f0b563ccca79d93cc914a912212607f58c1dd56f42ce89064d13d10371a01081acb79faccc1d401367e3b9e0d37f421cf023c01cb7ad862e72b563d4a233d69c16a8df1d449f12472ee5c76a89cbd80b566a4f9869cd3fec1aad2f4c86b69cdd0830cd0a22f9e92eade378c56d83d6cfff75da9c3459e6217bda0dcc574373bc5944c0a49b67e823b36eebe3604061d98b6760f5bc2d827383e0c598f1047c3677d604a85748d0bb12775c97a6ea5405c24de79cb5c1e5adc7155ef4b9132d5fba518b8d19c01c3e1d4fa395e5849d65b432d236542c5db57d11fca16c192672379df443ef38e32b58091c7c6f41711c6a01f321afb25a65c9239d90f7dfc4236f77b045505536bc33a11515bf600e8d85bd2e7274e218f1ddf29dd90047d9706e658ca259f69574f3589aef2284ab94300aa9e058e14d5562657a44004b85a24c37e9cb1a0bd1344a408ec0aaa473f7d5578fcf977fe56a1ad83b7b195cb9091ebdc4d7f5b2eba2e796e7efc9342ce8529f863d2d2d576963e9b685fa62fdcfc952f4850a8656011fa37e50ec0d3d53472bcaa4da3a2527e6e98b86818fde6f011d96bbabccd90a139921045f934be20b81daabeb972d8f125496fbc106f2c9965b7ce3bb5b34d76a14d9975f26e6812087ca4e3f3908ffd406e131acaa2a8c1b17cab307b10cd207fd45705b7be18f743828e0f51c70c1f902e70d7b6dd89816582f82bd57f5e5cb5ba7750d111aacf864ec31626a379a8fcad71583b98f5eb154b9f61017b2288393018c5a300d11efd97a9a32ca134231f3f167fd50a52f6e0cd5692f9ea171981b7f8b8a73d21d1863ac3924594871bbaf7fc4ea5da221514627f42c06a57fb838b6b899588fd9b6d9a0f14c535b6e41bf4c1cc98a043c7eeef2896eac3391b4c9b783772084c2a954fb26490f43ec81540cae541551599a34da51b60088eab9f4b842e5a8bbfc705413d88bfda4d5c5db738a1a047ead98d665439ae98c2ed443e01afc184966868e1eef71d52ed7fd1d82c47bc066475babef2b44fb668b7358e6a7ca9eaea6c392edce5b5ffadd8d1a75a2080a66359536860f7daadd566ec1174601348005f8d1aabb0fd6171124e8aa4b0af296b812ad97bf68b79794500ddcd4b7f0d3b5d1e8f2ad39ff509654dc9c1e09ca717e2d59db6ebce17c6da8fb178ff7f52f6a52de8486af80f3d82ecbbc94a049d3e0ab9e21dbab993c616299a21c9deba57b92bfabb39686fc3af4ab9151a7bbdd3a6ee6e44ad1a434a8c3a324c761cad58adfcb25dc5588b805c5ff094643212a6e710b63b9f19e28acb2748da08a9f32afdce7e5c3f49916b82afc3e29c5291015667c7d61285ac8a46fe230f3e75e6be92587b9ce1b6ae16191e944e1070e4bfc4f45b75cc985e6efc7409586f108ac2a31fa88cf13c77a47f7286d9f6e0b9edfcb3d26fd343a42c55da55c7bf1d84cf4fd176074b4651644ad8226fd800a71f073b63fdcfbd6f870b76c9b323f887ee17deecc9b9cfa5f46d257939a4df89aea5ae6b75539d18a2ca2766f900892fccf8e46c2826141dea465bf33d540c9a6bbf6cc4497cf8446e233cb2c3aaf26d52d4956d04bb6bbca49af80cef638ec81b5cdcd14e8801615e4e7669bb40b221707f94497b534557af6fa5020448b94ba153fde5b67b9d0e43e524ad8d56117a5cc90c3518aae1ea5ce2c6bac435924f8c28892c186b440ed71276bbb8a458eb31552e46b70eb9707fb3524abe8765e7fefaccfdbb4f56479244e133d51905b249c56ea7991ae7f856fd981354ec9d7b06726a24e9ba89fc41e1cbc04e02a890f1d8c64138c41ce23cff431e93d95edf1965a840700b23bbcda61a8a0a8c2fbcad838cf622e073fd25ffb2ac481d90a262d874081b96af75959235f71083c55fa0020ef1d3e65b77b6783113886d70ac67cd586176c3d7018f5b689a7de204abb3d730879db57383cdd7783d9080f6716a9e21b3fc2f8f0ba1bdf035c6a1442b6f234fa26f0573cf792528f62b343021846714c231b3be3d66ece281cdcd92cde8df6ea7c7d42646920a0b4e37af2fe024a472283fd3d44a5a20820163e9401dfd6fdf678a5d086e4221aea0fe052a759899f31b0914c401fbf00fb24b52eba7f45e6664e873feb45084ea4b06a99baca95a8baa46b30d62b38e36721bfedfb868d4f0c654235be58ee1b5be5c9093b9e769a09c53ce70a7393b12424d09c00d7171d1452226a939d4ec3a58aa7b70df81a1def2b2bb4ee2e9aa091b1b5898634582710109481e43f518290ffe013db34c63d47ed5178a87cd90de08d295f24ffc49436facbd254b4c678dc8727e8923b2ff3b3e574b24fa8f34a13b518908d489497afb7dbbc58368d72729da962af2c10d9ec5060c2e1699a08c1206b4540d2a68c34ce845d19883b2d02fe5da67fe7d45a3a824c0188479cebccef93a1c82ca596a0493c1c85ee5522d6164f2a15b7aca311826869acae7627659f1b0269ae52cd36e6e4e7c6361a102140af4ae9d0bf2342ce0757232a9752267a11823f865a59fa44528ad5a458a390ab7ae3e6bd0e2010921a8223307f5ad7e62b58bc50f15b0579b0d3ee05a9b75d0c9b2f1bef83e7f9c84887e4b8eb6101f71a03dba94e059681daab3a5e081bd5df7a8c3aed5bfa76acb83345035c0d86702a6a23f8c12a51d32e209c77700af71d221751ba5a489b36ac078f2f166e18854922b26a74fe56e2edb484aea41e0e948f22b7bbd0d5186921d316b25aece47adaff5daf4dfff62ab6173e49ecac4047f7750bbda82ca4a10cf5750f3ec5d4e01fa861bc5bdcd316d9843d66bf20c4d4fefab7710e68e0da662973236e587f412b91e108eba7ca023735b278bd5aeb69e21d1bb0209ef15222c7bd3405422dfd19db2877c6aa9fbf106cc043ca4c36a16c10858ace7cdcf782972f77ad78bacf3f7cc3bcba0599b562a066454a696ab738d3b145ef220b97c5f1f3ae06a4db133b56ae60d6ea35800833cdec0690116b90d5cd705208a901b2b1d772426f3c94cd7512c83d675fb8e2768b341eb7f34f7965099a93caf08dbb38932f29952fc7b923ee68d86e9bbda140a4ddf2bbf9bf3c561acc87642a8296dce21f4f36cfc31e15570fe3e1e5adea05126734eaecc48eb63423ed94ec47a35e941757cc396aa61b74cf51de276f7461aa3b871b4cfcc8b1e491b00ec247c83d2d30b1d2d5dd758c434b09bd1fbc97bf600096e0f628a3dabef1e1d7f82bc5189f4c807e7b56af23f0c13d546d75af3b4ff86208418ba399c3fcd1012cebc099b45d2f973bc942343cd22be6ea25849a848f09fa5533705fcce59271480c32ce010885baa28103132609ef7e8c280dbf27e48b5d24276e8418b83dd82b5e653e2d0b23eecf5b27ca4c4dfb8c88552f15d31ab778b33221e84efa793b05a70a8ef59d1ea736b5faf59844a060aa3e3de786a2cbf6d412724fd137e44585f8903ff4b213c3170069d21de6042dd03aeb3a241649505903b209598e9de130096f75ba5b162fb2aef54e3f681b683fd505224eea5b81f7d5ce18ec15d4760390c0aaa0a0951e7b1b588f06f1affb4dd8d24fbf6764ff1c4713202127418fae71baed7a5bd128008a0bf1d802ae4303628cf8c1c672cbbae099eee1f67a6a254b8ebe37e8603305561ed9a417066ffe00747df46c3ac4faa64a3a0cc1503f24ae93dd19c5bb9bdb5e1f1829cf1cc823c1ca8db96beba2d553a2a204782bb73bc12d50ed25fe66859cee1823d7c9aa996f29b175cf7833735a2aa4a644cf93bb0003a8cfa35a343b6fed2782035c1aa24bf274f8add6f2587ca51c00300a91545945e1c39ade22a535e95c85523f181271ff20516043e9908852727b1f98b505427d5b77b8e3bf6321411a691270146d642726690ad57c384c42c03ecc2353fb6fff9b5116a37e7060ae3db4aab6151be1837ba360dceb3948a2bcba88878bde6c27081e83867a572c2bf506cf1147a216a6a5d93fea875c2478a0de1fa50dd71aba59322c6d8d408a317816516adb1460d3a90a33b1111897062d9bebe02f9d2fb14752d1d1c60746af085ac8590fa0254474d441699659cd40f7105496356870414908101a0e939790f70f792866063423369178c9972a826def450f98635ff69fc0ed3f12ad6f4685118ebcf45ab8409a8737d99db067abcfb90c1574a527d41af37c7d6778735c8fcc26efae97ba61196cc64ef7034914b90115c32a6b7677b02c2b744e1344b8529ebf77ab200b355851762f3096f2840a8f14e24e76bb78f31dc487b10b323241da04df2dce923957853d1d0d7891e2b0807498ef3b0dab20772eb723f4eba21ac0a2beb657c6c9a64b1e68d3e07e09358583a3b14150118b6100f06e9d365172b708f987e5e3dd3d08438dad65630fa31e8debc86e6bd40b734a9f522d2d70260d1e4be72d076f7e70afb7d1ee0e1b67d1309b5807815a12bfd0a56a6a2165be18f9bf979798f469030f7adcd4ef2d8672ed89e44db294f25a1ef2accfed485b11074b7f9663d3739400"}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={0x0}, 0x0}, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002280)=0x2000, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002880)=[{{&(0x7f0000001100)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/4096, 0x1000}, 0xe8}, {{&(0x7f0000002900)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002340)=""/47, 0x2f}, {&(0x7f0000002380)=""/18, 0x12}, {&(0x7f00000023c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/198, 0xc6}, {&(0x7f0000002500)=""/191, 0xbf}, {&(0x7f00000025c0)=""/248, 0xf8}, {&(0x7f00000026c0)=""/98, 0x62}, {&(0x7f0000002740)=""/135, 0x87}], 0x8}, 0x10}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/217) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000080)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 1m29.746419791s ago: executing program 2 (id=1007): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./binfmt/register\x00', 0x1, 0xcd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff04, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback}, "000022ebffff0700"}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) 1m29.062496541s ago: executing program 2 (id=1008): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x441, 0x800003a, r5, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1m22.352803569s ago: executing program 32 (id=996): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000700)=@rnullb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m12.119360725s ago: executing program 33 (id=1008): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x441, 0x800003a, r5, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 21.590907155s ago: executing program 3 (id=1106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="8dfcd7dc9331f334"}], 0x2, 0x0, 0x96}, 0x4048884) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r6, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) 17.47855592s ago: executing program 3 (id=1111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 16.292027714s ago: executing program 0 (id=1113): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019b40)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) file_setattr(r1, 0x0, &(0x7f0000000000)={0x7000, 0xfffffffc, 0x2, 0x0, 0x402}, 0x18, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x79}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000055000500010000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=r0, @ANYBLOB="01000000ef010101000000000000000000000000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000b00)=0x6, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 16.022761194s ago: executing program 1 (id=1114): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r1, &(0x7f0000000140)="26899e7a297d15fa13568863b7e8d5c23c719d403720a1106c8bcd34f579a7141fa570cc42ed9a8421886bbf30753888b252deeb5a533aaa856ca3085684ceebb2d3420fb3f4fff702e0f62f9d4abdcf28d7f9e74119178abc3fa0a9cd3da2a6ee0061a63a5416bc37c6e2d7e423c36853a0b12a260bdcdf9614464c607a9f8a339064fe82e375266b7e053a9dd5fd146913e96225d102aaa81610cbb1a1960cf79b398449972b0af34b371820fa87b424b6a53cd2777ca7221d07a38d155fafede48816bcaebdbd4b6bf17a8d3c9ae06e82ce63810b6245b181fbcf75836189d81a0d2b8b58cdaebb4a4360c1c2ed0d334805dab3", 0xf5) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 16.017547525s ago: executing program 3 (id=1115): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) fanotify_init(0x200, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x40, 0x0) 14.809531957s ago: executing program 3 (id=1116): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x482c0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edf", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40001, 0x1e5}, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='ipvlan0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000419000/0x8000)=nil, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13.091425194s ago: executing program 1 (id=1119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 11.089160984s ago: executing program 0 (id=1120): close(0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001400090527bd7000fddbdf25021f00cb", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) lstat(&(0x7f0000000080)='./rpc_pipefs/gssd/clntXX/gssd/file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00H\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000400"/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, 0x0, &(0x7f0000000480)}, 0x1c) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) r13 = dup(r12) write$6lowpan_enable(r13, &(0x7f0000000000)='0', 0xfffffd86) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3703", 0x2, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r6, r11, &(0x7f0000000200)={0x0, 0x14e1, 0x2, 0x3, 0x1}, 0x0, 0x4, &(0x7f0000000540)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r10, '\x00', {0x3, 0x626, 0x0, 0x0}}, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, r5, &(0x7f0000001280)) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r14, 0x89ee, &(0x7f0000000000)=0x2) 10.607885724s ago: executing program 1 (id=1121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000006c000000060a010400000000000000000100fffd0900010073797a300000000008000b4000000000440004802c000180090001007866726d000000001c00028005000300010000000800014000000015080002400000000314000180090001006c617374"], 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) (fail_nth: 1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap$binder(&(0x7f000097d000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xb19) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00006fe000/0xa000)=nil, 0xa000, 0x400000c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x25e2, 0x4) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r7}, 0x0, 0x0, &(0x7f0000000180)={0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001800010400000000000000000a000000fe030001000000000800040001000000080006006400000006001500070000001400168008000100060000000800040001"], 0x48}}, 0x0) 10.530375407s ago: executing program 5 (id=1122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000006c000000060a010400000000000000000100fffd0900010073797a300000000008000b4000000000440004802c000180090001007866726d000000001c00028005000300010000000800014000000015080002400000000314000180090001006c617374"], 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap$binder(&(0x7f000097d000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xb19) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00006fe000/0xa000)=nil, 0xa000, 0x400000c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x25e2, 0x4) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r7}, 0x0, 0x0, &(0x7f0000000180)={0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001800010400000000000000000a000000fe030001000000000800040001000000080006006400000006001500070000001400168008000100060000000800040001"], 0x48}}, 0x0) 9.121315151s ago: executing program 3 (id=1124): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x428142) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = io_uring_setup(0x3a63, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x9, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 8.11231123s ago: executing program 5 (id=1126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="8dfcd7dc9331f334"}], 0x2, 0x0, 0x96}, 0x4048884) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r6, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) 8.062556769s ago: executing program 1 (id=1127): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)}, {0x0}, {&(0x7f0000001000)="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", 0x45d}], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x18, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340)="8e6b373c083a4aa28e5588524a41399bf5fbb0f58b843bb2980b248235f47fbd138ca6f66ab492d8720f", &(0x7f0000000380)="e1c265e436668d5b10d718", 0x80, r2}, 0x38) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a"], 0x0) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3, 0x10, 0x1805, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e0000001400028005001900010000000500"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)={0x0, 0x1}) 7.985319806s ago: executing program 6 (id=1128): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r7, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) pwrite64(r3, &(0x7f0000000180)='Y', 0x1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x88, r9, 0xacf5e67dd0b583a1, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1, 0x2, 0x2, 0x1000}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x81, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x61}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r10) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000050000003000018006000100020000000600020011000000140003007f0000010000000000000000000000000600040013c4000030000280140001007f00000100000000000000000000000006000200275a810b00000800030000000000080004000100"], 0x74}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030008ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.982916043s ago: executing program 3 (id=1129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x1, 0x1, 0x4a9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 7.510973848s ago: executing program 0 (id=1130): write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 5.115571795s ago: executing program 6 (id=1131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0xffd8) 5.038765548s ago: executing program 5 (id=1132): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40) ioctl$FE_READ_UNCORRECTED_BLOCKS(r0, 0x80046f49, &(0x7f0000000040)) (fail_nth: 1) 4.992021542s ago: executing program 1 (id=1133): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x441, 0x800003a, r5, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) lstat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) 4.88496545s ago: executing program 5 (id=1134): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x482c0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edf", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40001, 0x1e5}, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='ipvlan0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000419000/0x8000)=nil, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.774356943s ago: executing program 6 (id=1135): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000540)=@ethtool_coalesce={0xe, 0xc, 0x7f, 0x2, 0xffff, 0x2, 0x2, 0x5, 0xfb94, 0xfffff801, 0x7, 0xd1f4, 0x8, 0x4, 0x7, 0x4, 0x200156, 0x1, 0x4, 0x0, 0x8000, 0x4}}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0xffffffffffff7fff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x2003}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000009c0)={0x2020}, 0x2020) ioctl$RTC_AIE_OFF(r4, 0x7002) 3.777008684s ago: executing program 0 (id=1136): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 3.733180684s ago: executing program 1 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0) write$tcp_mem(r0, 0x0, 0x0) 3.653788794s ago: executing program 5 (id=1138): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000014) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x29) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x28000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000080)=0xff) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r3}, 0x10) 2.58737055s ago: executing program 6 (id=1139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="8dfcd7dc9331f334"}], 0x2, 0x0, 0x96}, 0x4048884) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2.566851297s ago: executing program 5 (id=1140): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="7379730000009419c20882310e8f72f225164f9e"]) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) unshare(0x64000600) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xaf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 2.498926476s ago: executing program 0 (id=1141): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0x1b9}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000edf4cbdb4c2a3020f60414001980085cabb6a7010048010000180002801420018008000100e00000020800020064010101100001800c0002"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8004) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) sendmsg$nl_route(r3, 0x0, 0x4054) setns(0xc9, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r5, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) io_uring_setup(0x5ba8, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.61868197s ago: executing program 0 (id=1142): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x1000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300070000000000000000000a000000000000003f0d011c92a180c310951900fcd6a9d6ccae0d67c20dc96d253ff89ce69ddbd97f8a1d4c3b85903ddc47f000aab7673d51546340460537e185f60056f8236a39c539e7a346d92e954b97ce62fb02a358b095511e0a55525292e0487bc46d29ca27af90d9511415f7bd3b352ca8dfff16feb7fb4cbed71605648a331d0aa543246b73a2b082908b41d88e5595c5e6260adb8abd90c82436851d7f8a63b00a96d056dea764ca", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r2}, &(0x7f0000000b00), 0x0}, 0x20) write(r1, &(0x7f00000000c0)="8f2a0a6500000000000000070580a7b6070d63e286a5cefe", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="00001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, 0x0, &(0x7f00000004c0), 0x80, r6, 0x0, 0x7}, 0x38) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000005780)={0x2020}, 0x2020) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f00000013c0)) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 227.19749ms ago: executing program 6 (id=1143): r0 = socket(0x21, 0x80002, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f00000002c0)) 0s ago: executing program 6 (id=1144): write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) kernel console output (not intermixed with test programs): mount failed w/return code = -112 [ 446.737046][ T8448] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 446.985603][ T8448] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.025609][ T8448] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.025706][ T8448] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.025733][ T8448] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.025884][ T8448] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 200, changing to 11 [ 447.025915][ T8448] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8805, setting to 1024 [ 447.110554][ T8448] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.110613][ T8448] usb 3-1: Product: syz [ 447.110680][ T8448] usb 3-1: Manufacturer: syz [ 447.571810][ T8448] cdc_wdm 3-1:1.0: skipping garbage [ 447.573020][ T8448] cdc_wdm 3-1:1.0: skipping garbage [ 447.723261][ T8448] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 447.723315][ T8448] cdc_wdm 3-1:1.0: Unknown control protocol [ 447.906948][ T8448] usb 3-1: USB disconnect, device number 25 [ 448.426998][ T8448] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 448.596103][ T8448] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.597061][ T8448] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.597084][ T8448] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.597101][ T8448] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.597137][ T8448] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 200, changing to 11 [ 448.597182][ T8448] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8805, setting to 1024 [ 448.598509][ T8448] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.598525][ T8448] usb 3-1: Product: syz [ 448.598535][ T8448] usb 3-1: Manufacturer: syz [ 448.700830][ T8448] cdc_wdm 3-1:1.0: skipping garbage [ 448.700869][ T8448] cdc_wdm 3-1:1.0: skipping garbage [ 448.727384][ T8448] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 448.727405][ T8448] cdc_wdm 3-1:1.0: Unknown control protocol [ 450.030261][ T48] usb 3-1: USB disconnect, device number 26 [ 450.223193][ T9069] syzkaller1: entered promiscuous mode [ 450.223215][ T9069] syzkaller1: entered allmulticast mode [ 450.246352][ T9069] FAULT_INJECTION: forcing a failure. [ 450.246352][ T9069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.246385][ T9069] CPU: 1 UID: 0 PID: 9069 Comm: syz.1.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.246410][ T9069] Tainted: [L]=SOFTLOCKUP [ 450.246416][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 450.246434][ T9069] Call Trace: [ 450.246440][ T9069] [ 450.246448][ T9069] dump_stack_lvl+0x100/0x190 [ 450.246477][ T9069] should_fail_ex.cold+0x5/0xa [ 450.246503][ T9069] _copy_from_iter+0x1f4/0x1690 [ 450.246534][ T9069] ? __pfx__copy_from_iter+0x10/0x10 [ 450.246556][ T9069] ? __lock_acquire+0x5c0/0x1f40 [ 450.246576][ T9069] ? _parse_integer_limit+0x1ac/0x220 [ 450.246607][ T9069] ? _kstrtoull+0x144/0x200 [ 450.246632][ T9069] ? __pfx__kstrtoull+0x10/0x10 [ 450.246662][ T9069] tun_get_user+0x265/0x3cc0 [ 450.246691][ T9069] ? __lock_acquire+0x5c0/0x1f40 [ 450.246716][ T9069] ? __lock_acquire+0x5c0/0x1f40 [ 450.246735][ T9069] ? __pfx_tun_get_user+0x10/0x10 [ 450.246760][ T9069] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 450.246796][ T9069] ? find_held_lock+0x2b/0x80 [ 450.246821][ T9069] ? tun_get+0x191/0x370 [ 450.246842][ T9069] ? tun_get+0x191/0x370 [ 450.246870][ T9069] tun_chr_write_iter+0xdc/0x200 [ 450.246896][ T9069] vfs_write+0x6af/0x1050 [ 450.246918][ T9069] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 450.246945][ T9069] ? __pfx_vfs_write+0x10/0x10 [ 450.246964][ T9069] ? find_held_lock+0x2b/0x80 [ 450.247003][ T9069] ksys_write+0x12a/0x250 [ 450.247024][ T9069] ? __pfx_ksys_write+0x10/0x10 [ 450.247053][ T9069] do_syscall_64+0x123/0x790 [ 450.247078][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.247097][ T9069] RIP: 0033:0x7feec3b9e199 [ 450.247113][ T9069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.247130][ T9069] RSP: 002b:00007feec4afb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.247147][ T9069] RAX: ffffffffffffffda RBX: 00007feec3e25fa0 RCX: 00007feec3b9e199 [ 450.247159][ T9069] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 450.247170][ T9069] RBP: 00007feec4afb090 R08: 0000000000000000 R09: 0000000000000000 [ 450.247180][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.247191][ T9069] R13: 00007feec3e26038 R14: 00007feec3e25fa0 R15: 00007ffe4e867658 [ 450.247215][ T9069] [ 450.448610][ T9075] JFS: discard option not supported on device [ 450.448842][ T9075] Mount JFS Failure: -5 [ 450.448850][ T9075] jfs_mount failed w/return code = -5 [ 451.005952][ T5721] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 451.175409][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 451.177088][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.177128][ T5721] usb 5-1: New USB device found, idVendor=15c2, idProduct=003e, bcdDevice=df.01 [ 451.178102][ T5721] usb 5-1: config 8 has an invalid interface number: 14 but max is 0 [ 451.178125][ T5721] usb 5-1: config 8 has no interface number 0 [ 451.178149][ T5721] usb 5-1: config 8 interface 14 has no altsetting 0 [ 451.237060][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.237085][ T5721] usb 5-1: Product: syz [ 451.237098][ T5721] usb 5-1: Manufacturer: syz [ 451.237111][ T5721] usb 5-1: SerialNumber: syz [ 451.386530][ T9080] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 451.701280][ T9083] syzkaller1: entered promiscuous mode [ 451.701297][ T9083] syzkaller1: entered allmulticast mode [ 452.944255][ T5721] imon 5-1:8.14: unable to register, err -19 [ 452.966121][ T5721] usb 5-1: USB disconnect, device number 37 [ 453.479735][ T30] audit: type=1400 audit(1791377894.792:471): avc: denied { ioctl } for pid=9092 comm="syz.0.847" path="socket:[19037]" dev="sockfs" ino=19037 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 453.770527][ T5721] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 454.008497][ T9109] JFS: discard option not supported on device [ 454.009079][ T9109] Mount JFS Failure: -5 [ 454.009103][ T9109] jfs_mount failed w/return code = -5 [ 454.546041][ T5721] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 454.606346][ T30] audit: type=1326 audit(1791377895.922:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.856" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec6f9e199 code=0x7ffc0000 [ 454.607926][ T30] audit: type=1326 audit(1791377895.922:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.856" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec6f9e199 code=0x7ffc0000 [ 454.738512][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.738558][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.798116][ T5721] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 454.800206][ T5721] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 454.800267][ T5721] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 454.801524][ T5721] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 454.801614][ T5721] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 454.848959][ T5721] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 454.864563][ T5721] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 454.864874][ T5721] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 454.929850][ T5721] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 455.833819][ T9119] loop8: detected capacity change from 0 to 7 [ 455.909201][ T9119] Dev loop8: unable to read RDB block 7 [ 455.909226][ T9119] loop8: unable to read partition table [ 455.909333][ T9119] loop8: partition table beyond EOD, truncated [ 455.909352][ T9119] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 456.006105][ T9127] JFS: discard option not supported on device [ 456.006691][ T9127] Mount JFS Failure: -5 [ 456.006704][ T9127] jfs_mount failed w/return code = -5 [ 456.620145][ T9131] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 456.620145][ T9131] [ 456.620175][ T9131] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 456.620459][ T9131] CIFS: Attempting to mount //127.0.0.1/share [ 456.815569][ T9132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9132 comm=syz.4.862 [ 456.985558][ T9131] CIFS: VFS: cifs_mount failed w/return code = -112 [ 457.031032][ T5721] usb 4-1: USB disconnect, device number 27 [ 457.158401][ T5721] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 457.403763][ T5721] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 457.404431][ T5721] keyspan 4-1:1.0: device disconnected [ 457.440470][ T30] audit: type=1400 audit(1791377898.752:474): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 457.499063][ T30] audit: type=1400 audit(1791377898.812:475): avc: denied { read } for pid=5612 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.502463][ T30] audit: type=1400 audit(1791377898.812:476): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.504954][ T30] audit: type=1400 audit(1791377898.812:477): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.593317][ T30] audit: type=1400 audit(1791377898.902:478): avc: denied { create } for pid=9142 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.594601][ T30] audit: type=1400 audit(1791377898.902:479): avc: denied { write } for pid=9142 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.594826][ T30] audit: type=1400 audit(1791377898.902:480): avc: denied { nlmsg_write } for pid=9142 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.747564][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 458.747613][ T30] audit: type=1400 audit(1791377899.952:507): avc: denied { create } for pid=9150 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.747675][ T30] audit: type=1400 audit(1791377899.952:508): avc: denied { write } for pid=9150 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.747737][ T30] audit: type=1400 audit(1791377899.962:509): avc: denied { execmem } for pid=9150 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 459.931764][ T30] audit: type=1400 audit(1791377900.542:510): avc: denied { read } for pid=9147 comm="syz.3.865" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 459.931832][ T30] audit: type=1400 audit(1791377900.542:511): avc: denied { open } for pid=9147 comm="syz.3.865" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 460.284115][ T30] audit: type=1400 audit(1791377901.592:512): avc: denied { allowed } for pid=9156 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 460.284163][ T30] audit: type=1400 audit(1791377901.592:513): avc: denied { create } for pid=9156 comm="syz.0.868" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.284219][ T30] audit: type=1400 audit(1791377901.592:514): avc: denied { map } for pid=9156 comm="syz.0.868" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.284249][ T30] audit: type=1400 audit(1791377901.592:515): avc: denied { read write } for pid=9156 comm="syz.0.868" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.433966][ T30] audit: type=1326 audit(1791377901.742:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.4.866" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbec6f9e199 code=0x0 [ 460.791980][ T9160] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 460.791980][ T9160] [ 460.792036][ T9160] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 460.792288][ T9160] CIFS: Attempting to mount //127.0.0.1/share [ 461.267479][ T9160] CIFS: VFS: cifs_mount failed w/return code = -112 [ 461.824552][ T9174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.872'. [ 463.327433][ T8448] Process accounting resumed [ 463.563215][ T9187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.877'. [ 463.697277][ T5693] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 464.720740][ T5693] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 464.721673][ T5693] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.721700][ T5693] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.721723][ T5693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 464.721749][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.738887][ T5693] usb 3-1: config 0 descriptor?? [ 464.835344][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 464.835361][ T30] audit: type=1400 audit(1791377906.142:570): avc: denied { read write } for pid=9199 comm="syz.4.880" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 464.836031][ T30] audit: type=1400 audit(1791377906.152:571): avc: denied { open } for pid=9199 comm="syz.4.880" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 464.838791][ T30] audit: type=1400 audit(1791377906.152:572): avc: denied { ioctl } for pid=9199 comm="syz.4.880" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 464.839663][ T30] audit: type=1400 audit(1791377906.152:573): avc: denied { create } for pid=9199 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 464.987254][ T30] audit: type=1400 audit(1791377906.302:574): avc: denied { create } for pid=9182 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 464.988414][ T30] audit: type=1400 audit(1791377906.302:575): avc: denied { write } for pid=9182 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 466.568547][ T5693] sony 0003:054C:0268.0002: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 466.568581][ T5693] sony 0003:054C:0268.0002: failed to claim input [ 466.709275][ T5693] usb 3-1: USB disconnect, device number 27 [ 466.846937][ T9210] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 466.846937][ T9210] [ 466.846966][ T9210] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 466.847321][ T9210] CIFS: Attempting to mount //127.0.0.1/share [ 467.693608][ T9210] CIFS: VFS: cifs_mount failed w/return code = -112 [ 468.135001][ T9220] JFS: discard option not supported on device [ 468.135739][ T9220] Mount JFS Failure: -5 [ 468.135762][ T9220] jfs_mount failed w/return code = -5 [ 468.138466][ T30] audit: type=1400 audit(1791377909.442:576): avc: denied { create } for pid=9217 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 468.138563][ T30] audit: type=1400 audit(1791377909.442:577): avc: denied { mounton } for pid=9217 comm="syz.1.885" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 468.599581][ T9207] fido_id[9207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 468.816365][ T9226] JFS: discard option not supported on device [ 468.816955][ T9226] Mount JFS Failure: -5 [ 468.816980][ T9226] jfs_mount failed w/return code = -5 [ 470.385832][ T30] audit: type=1400 audit(1791377911.702:578): avc: denied { setopt } for pid=9238 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 470.395366][ T30] audit: type=1400 audit(1791377911.702:579): avc: denied { read write } for pid=9238 comm="syz.2.891" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 470.442837][ T30] audit: type=1400 audit(1791377911.752:580): avc: denied { open } for pid=9238 comm="syz.2.891" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 470.764721][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 470.926463][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 470.986325][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.986476][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.651610][ T9] usb 2-1: config 0 descriptor?? [ 471.943283][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 471.943336][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 471.944803][ T9] usb 2-1: USB disconnect, device number 26 [ 472.246720][ T30] audit: type=1400 audit(1791377913.562:581): avc: denied { getopt } for pid=9253 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.249486][ T30] audit: type=1400 audit(1791377913.562:582): avc: denied { create } for pid=9257 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 473.648687][ T30] audit: type=1400 audit(1791377914.532:583): avc: denied { watch watch_reads } for pid=9257 comm="syz.0.897" path="/183" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 473.755454][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 475.401397][ T30] audit: type=1400 audit(1791377916.712:584): avc: denied { mount } for pid=9274 comm="syz.2.903" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 475.404088][ T30] audit: type=1400 audit(1791377916.712:585): avc: denied { search } for pid=9274 comm="syz.2.903" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.415049][ T30] audit: type=1400 audit(1791377916.722:586): avc: denied { search } for pid=9274 comm="syz.2.903" name="usb_gadget" dev="configfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.415088][ T30] audit: type=1400 audit(1791377916.722:587): avc: denied { search } for pid=9274 comm="syz.2.903" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.415117][ T30] audit: type=1400 audit(1791377916.722:588): avc: denied { search } for pid=9274 comm="syz.2.903" name="usb_gadget" dev="configfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.429416][ T30] audit: type=1400 audit(1791377916.722:589): avc: denied { search } for pid=9274 comm="syz.2.903" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.429458][ T30] audit: type=1400 audit(1791377916.722:590): avc: denied { search } for pid=9274 comm="syz.2.903" name="usb_gadget" dev="configfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.429490][ T30] audit: type=1400 audit(1791377916.722:591): avc: denied { search } for pid=9274 comm="syz.2.903" name="g1" dev="configfs" ino=11413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.429521][ T30] audit: type=1400 audit(1791377916.722:592): avc: denied { read write } for pid=9274 comm="syz.2.903" name="idProduct" dev="configfs" ino=20428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 475.429558][ T30] audit: type=1400 audit(1791377916.722:593): avc: denied { open } for pid=9274 comm="syz.2.903" path="/187/config/usb_gadget/g1/idProduct" dev="configfs" ino=20428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 475.732265][ T9] usb 1-1: USB disconnect, device number 34 [ 476.087464][ T5693] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 476.458923][ T5693] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 476.635411][ T5693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.635457][ T5693] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.635493][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.000920][ T5693] usb 3-1: config 0 descriptor?? [ 477.193753][ T5693] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 479.438408][ T9296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.908'. [ 479.588354][ T48] usb 3-1: USB disconnect, device number 28 [ 479.822941][ T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 479.976148][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 479.977304][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.977318][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 479.977342][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.978605][ T9] usb 5-1: config 0 descriptor?? [ 479.980511][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 479.980697][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 480.036650][ T48] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 480.099864][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 480.100625][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 480.100676][ T9] usb 5-1: media controller created [ 480.104031][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.192719][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 480.192821][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 480.200103][ T48] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 480.205023][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.205060][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.213359][ T48] usb 3-1: config 0 descriptor?? [ 480.256651][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 480.260782][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 480.260804][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 480.418437][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 480.418474][ T9] dvb-usb: error while querying for an remote control event. [ 480.576600][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 480.576668][ T9] dvb-usb: error while querying for an remote control event. [ 480.596247][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 480.596321][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 480.609794][ T48] usb 3-1: USB disconnect, device number 29 [ 480.736860][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 480.736956][ T9] dvb-usb: error while querying for an remote control event. [ 480.765170][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 480.765203][ T30] audit: type=1400 audit(1791377922.002:621): avc: denied { open } for pid=9298 comm="syz.4.896" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 481.026282][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 481.027399][ T9] dvb-usb: error while querying for an remote control event. [ 481.031915][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.078422][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.225855][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 481.225892][ T9] dvb-usb: error while querying for an remote control event. [ 481.387744][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 481.387771][ T9] dvb-usb: error while querying for an remote control event. [ 481.505367][ T48] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 481.545488][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 481.545518][ T9] dvb-usb: error while querying for an remote control event. [ 481.666481][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 481.669690][ T48] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 481.674056][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.674097][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.678816][ T48] usb 3-1: config 0 descriptor?? [ 481.684260][ T48] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.728258][ T48] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 481.736493][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 481.736510][ T9] dvb-usb: error while querying for an remote control event. [ 482.285190][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 482.285217][ T9] dvb-usb: error while querying for an remote control event. [ 482.325958][ T30] audit: type=1400 audit(1791377923.642:622): avc: denied { write } for pid=9305 comm="syz.2.910" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 482.435343][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 482.435370][ T9] dvb-usb: error while querying for an remote control event. [ 482.621001][ T5602] dvb-usb: bulk message failed: -22 (1/0) [ 482.621035][ T5602] dvb-usb: error while querying for an remote control event. [ 482.622968][ T9] usb 5-1: USB disconnect, device number 38 [ 484.662477][ T30] audit: type=1400 audit(1791377925.972:623): avc: denied { read write } for pid=9350 comm="syz.0.919" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 484.663397][ T30] audit: type=1400 audit(1791377925.972:624): avc: denied { open } for pid=9350 comm="syz.0.919" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 484.728650][ T48] usb 3-1: USB disconnect, device number 30 [ 484.733927][ T30] audit: type=1400 audit(1791377926.042:625): avc: denied { ioctl } for pid=9350 comm="syz.0.919" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 484.754830][ T30] audit: type=1400 audit(1791377926.062:626): avc: denied { write } for pid=9350 comm="syz.0.919" name="wireless" dev="proc" ino=4026532993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 484.922941][ T48] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 485.770064][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 486.028246][ T8448] Process accounting resumed [ 487.726466][ T30] audit: type=1400 audit(1791377929.042:627): avc: denied { setattr } for pid=9373 comm="syz.0.925" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 487.784731][ T30] audit: type=1400 audit(1791377929.092:628): avc: denied { write } for pid=9377 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.186663][ T9396] JFS: discard option not supported on device [ 488.187429][ T9396] Mount JFS Failure: -5 [ 488.187452][ T9396] jfs_mount failed w/return code = -5 [ 489.167611][ T30] audit: type=1400 audit(1791377930.482:629): avc: denied { create } for pid=9390 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 489.175381][ T30] audit: type=1400 audit(1791377930.482:630): avc: denied { connect } for pid=9390 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 489.202277][ T30] audit: type=1400 audit(1791377930.492:631): avc: denied { ioctl } for pid=9390 comm="syz.4.930" path="socket:[20607]" dev="sockfs" ino=20607 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 489.746643][ T30] audit: type=1400 audit(1791377931.062:632): avc: denied { read write } for pid=9390 comm="syz.4.930" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 489.767920][ T30] audit: type=1400 audit(1791377931.062:633): avc: denied { open } for pid=9390 comm="syz.4.930" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 489.851024][ T30] audit: type=1400 audit(1791377931.162:634): avc: denied { ioctl } for pid=9390 comm="syz.4.930" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 490.036537][ T30] audit: type=1400 audit(1791377931.352:635): avc: denied { read write } for pid=9398 comm="syz.0.932" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 490.037679][ T30] audit: type=1400 audit(1791377931.352:636): avc: denied { open } for pid=9398 comm="syz.0.932" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 490.718452][ T9411] FAULT_INJECTION: forcing a failure. [ 490.718452][ T9411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.718477][ T9411] CPU: 1 UID: 0 PID: 9411 Comm: syz.3.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.718493][ T9411] Tainted: [L]=SOFTLOCKUP [ 490.718497][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 490.718503][ T9411] Call Trace: [ 490.718507][ T9411] [ 490.718512][ T9411] dump_stack_lvl+0x100/0x190 [ 490.718533][ T9411] should_fail_ex.cold+0x5/0xa [ 490.718549][ T9411] _copy_from_user+0x2e/0xd0 [ 490.718564][ T9411] copy_msghdr_from_user+0x9f/0x4c0 [ 490.718578][ T9411] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 490.718594][ T9411] ? lock_acquire+0x1d1/0x380 [ 490.718612][ T9411] ? get_pid_task+0x2a/0x250 [ 490.718628][ T9411] ___sys_sendmsg+0x106/0x1e0 [ 490.718642][ T9411] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.718654][ T9411] ? get_pid_task+0x106/0x250 [ 490.718676][ T9411] ? find_held_lock+0x2b/0x80 [ 490.718702][ T9411] __sys_sendmsg+0x160/0x210 [ 490.718718][ T9411] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.718742][ T9411] do_syscall_64+0x123/0x790 [ 490.718757][ T9411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.718769][ T9411] RIP: 0033:0x7f439bb9e199 [ 490.718778][ T9411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.718788][ T9411] RSP: 002b:00007f439ca6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.718799][ T9411] RAX: ffffffffffffffda RBX: 00007f439be25fa0 RCX: 00007f439bb9e199 [ 490.718806][ T9411] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 490.718815][ T9411] RBP: 00007f439ca6e090 R08: 0000000000000000 R09: 0000000000000000 [ 490.718821][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.718828][ T9411] R13: 00007f439be26038 R14: 00007f439be25fa0 R15: 00007fff54dde938 [ 490.718842][ T9411] [ 490.896527][ T5732] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 492.072559][ T5732] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 492.085601][ T5732] usb 1-1: config 255 has an invalid interface number: 97 but max is 0 [ 492.085618][ T5732] usb 1-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 492.085627][ T5732] usb 1-1: config 255 has an invalid interface descriptor of length 3, skipping [ 492.085637][ T5732] usb 1-1: config 255 has an invalid descriptor of length 248, skipping remainder of the config [ 492.085646][ T5732] usb 1-1: config 255 has no interface number 0 [ 492.085661][ T5732] usb 1-1: config 255 interface 97 has no altsetting 0 [ 492.089437][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.089452][ T5732] usb 1-1: Product: syz [ 492.089460][ T5732] usb 1-1: Manufacturer: syz [ 492.089469][ T5732] usb 1-1: SerialNumber: syz [ 492.240403][ T5602] Process accounting resumed [ 492.480271][ T5732] usb 1-1: USB disconnect, device number 35 [ 495.805360][ T48] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 495.958683][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 495.958722][ T48] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 495.959632][ T48] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 495.961365][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.961385][ T48] usb 4-1: Product: 㙬쀞ｬ⑵徫䈓阣䵂횅㘻螚㗈雊ỵߊ䉳洟澣렙둌ड㿰齻帨谎ï’ç™ì¤­îŸ¨Ñ½ê™¬ë—ï°–ê»ç¤¯ [ 495.961403][ T48] usb 4-1: Manufacturer: æ˜ãŠ‚é ¦Ä㌰앬翂㌎激ඨॻïžá€¼ãšâ°¯æŸ“礢嫛䕔ࢲ漚ᥢ猰당濭ᛱ佞뮆鸱뺇ꌽꘃሲ껶Ꙡ䙭耧䤅 [ 495.961419][ T48] usb 4-1: SerialNumber: syz [ 495.967815][ T1309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.968044][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.968070][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.046988][ T8448] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 496.094408][ T9443] overlay: Unknown parameter 'hash' [ 496.198232][ T8448] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 496.199107][ T8448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.199131][ T8448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.207462][ T8448] usb 2-1: config 0 descriptor?? [ 496.258525][ T48] usb 4-1: 1:1 : unsupported sample bitwidth 4 in 6 bytes [ 496.258555][ T48] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 496.293695][ T48] usb 4-1: failed to enable PITCH for EP 0x1 [ 496.302015][ T48] usb 4-1: unit 2 not found! [ 496.302036][ T48] usb 4-1: unit 0 not found! [ 496.505458][ T9448] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 496.505458][ T9448] [ 496.505511][ T9448] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 496.505755][ T9448] CIFS: Attempting to mount //127.0.0.1/share [ 496.780501][ T8448] usbhid 2-1:0.0: can't add hid device: -71 [ 496.780599][ T8448] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 497.247208][ T8448] usb 2-1: USB disconnect, device number 28 [ 497.285192][ T9448] CIFS: VFS: Error connecting to socket. Aborting operation. [ 497.285218][ T9448] CIFS: VFS: cifs_mount failed w/return code = -4 [ 497.370153][ T48] usb 4-1: USB disconnect, device number 28 [ 497.502173][ T9457] JFS: discard option not supported on device [ 497.502957][ T9457] Mount JFS Failure: -5 [ 497.502980][ T9457] jfs_mount failed w/return code = -5 [ 498.878885][ T8448] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 499.047845][ T8448] usb 2-1: Using ep0 maxpacket: 32 [ 499.048724][ T8448] usb 2-1: device descriptor read/all, error -71 [ 499.074226][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 499.074241][ T30] audit: type=1400 audit(1791377940.382:638): avc: denied { read write } for pid=9467 comm="syz.0.954" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 499.074399][ T30] audit: type=1400 audit(1791377940.382:639): avc: denied { open } for pid=9467 comm="syz.0.954" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 499.088036][ T9468] FAULT_INJECTION: forcing a failure. [ 499.088036][ T9468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.088066][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.954 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.088090][ T9468] Tainted: [L]=SOFTLOCKUP [ 499.088095][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 499.088104][ T9468] Call Trace: [ 499.088110][ T9468] [ 499.088116][ T9468] dump_stack_lvl+0x100/0x190 [ 499.088143][ T9468] should_fail_ex.cold+0x5/0xa [ 499.088167][ T9468] copy_fpstate_to_sigframe+0x82d/0xae0 [ 499.088183][ T9468] ? do_raw_spin_lock+0x128/0x260 [ 499.088207][ T9468] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 499.088236][ T9468] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 499.088261][ T9468] ? x86_task_fpu+0x5f/0x90 [ 499.088284][ T9468] get_sigframe+0x3fb/0x940 [ 499.088312][ T9468] ? __pfx_get_sigframe+0x10/0x10 [ 499.088334][ T9468] ? rcu_is_watching+0x13/0xc0 [ 499.088358][ T9468] ? siginfo_layout+0x156/0x290 [ 499.088378][ T9468] x64_setup_rt_frame+0x12f/0xce0 [ 499.088406][ T9468] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 499.088435][ T9468] arch_do_signal_or_restart+0x5ee/0x7e0 [ 499.088459][ T9468] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 499.088488][ T9468] ? fput+0x7c/0x100 [ 499.088520][ T9468] exit_to_user_mode_loop+0x139/0x700 [ 499.088541][ T9468] ? rcu_is_watching+0x13/0xc0 [ 499.088564][ T9468] do_syscall_64+0x661/0x790 [ 499.088585][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.088601][ T9468] RIP: 0033:0x7f8ecbb5e9ce [ 499.088614][ T9468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.088629][ T9468] RSP: 002b:00007f8ecca8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.088645][ T9468] RAX: 0000000000000001 RBX: 00007f8ecca906c0 RCX: 00007f8ecbb5e9ce [ 499.088655][ T9468] RDX: 0000000000000001 RSI: 00007f8ecca90090 RDI: 0000000000000005 [ 499.088664][ T9468] RBP: 00007f8ecca90090 R08: 0000000000000000 R09: 0000000000000000 [ 499.088674][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.088683][ T9468] R13: 00007f8ecbe26038 R14: 00007f8ecbe25fa0 R15: 00007fff5de2b258 [ 499.088704][ T9468] [ 499.289510][ T9326] udevd[9326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.403601][ T30] audit: type=1400 audit(1791377940.712:640): avc: denied { nlmsg_read } for pid=9471 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.736573][ T9481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.957'. [ 499.903700][ T9482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.955'. [ 500.261210][ T48] Process accounting resumed [ 501.177269][ T30] audit: type=1400 audit(1791377942.492:641): avc: denied { create } for pid=9485 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 501.245438][ T30] audit: type=1400 audit(1791377942.552:642): avc: denied { mount } for pid=9485 comm="syz.0.959" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 502.866444][ T30] audit: type=1400 audit(1791377944.182:643): avc: denied { mount } for pid=9488 comm="syz.1.960" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 502.889744][ T30] audit: type=1400 audit(1791377944.192:644): avc: denied { mounton } for pid=9488 comm="syz.1.960" path="/187/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 502.890327][ T9489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 502.947389][ T30] audit: type=1400 audit(1791377944.262:645): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 502.992045][ T30] audit: type=1400 audit(1791377944.302:646): avc: denied { mount } for pid=9488 comm="syz.1.960" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 503.149131][ T30] audit: type=1400 audit(1791377944.462:647): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 504.055679][ T9504] netlink: 'syz.1.964': attribute type 5 has an invalid length. [ 504.629189][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 504.629200][ T30] audit: type=1400 audit(1791377945.942:649): avc: denied { ioctl } for pid=9507 comm="syz.2.953" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20792 ioctlcmd=0xaf81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 504.632622][ T30] audit: type=1400 audit(1791377945.942:650): avc: denied { module_request } for pid=9507 comm="syz.2.953" kmod="net-pf-16-proto-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 504.706055][ T30] audit: type=1400 audit(1791377946.022:651): avc: denied { ioctl } for pid=9507 comm="syz.2.953" path="/dev/video36" dev="devtmpfs" ino=1043 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 504.942900][ T9513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 504.977224][ T9513] FAULT_INJECTION: forcing a failure. [ 504.977224][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 504.977253][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.2.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.977276][ T9513] Tainted: [L]=SOFTLOCKUP [ 504.977282][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 504.977291][ T9513] Call Trace: [ 504.977297][ T9513] [ 504.977303][ T9513] dump_stack_lvl+0x100/0x190 [ 504.977331][ T9513] should_fail_ex.cold+0x5/0xa [ 504.977358][ T9513] should_failslab+0xc2/0x120 [ 504.977383][ T9513] __kmalloc_cache_noprof+0x91/0x6d0 [ 504.977404][ T9513] ? ovl_iterate+0xa74/0x10d0 [ 504.977426][ T9513] ovl_iterate+0xa74/0x10d0 [ 504.977445][ T9513] ? __pfx_down_write+0x10/0x10 [ 504.977468][ T9513] ? __pfx_down_read_killable+0x10/0x10 [ 504.977493][ T9513] ? __pfx_ovl_iterate+0x10/0x10 [ 504.977510][ T9513] wrap_directory_iterator+0xa2/0xe0 [ 504.977534][ T9513] iterate_dir+0x296/0xae0 [ 504.977559][ T9513] __x64_sys_getdents64+0x13b/0x2c0 [ 504.977582][ T9513] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 504.977604][ T9513] ? fput+0x7c/0x100 [ 504.977629][ T9513] ? __pfx_filldir64+0x10/0x10 [ 504.977660][ T9513] do_syscall_64+0x123/0x790 [ 504.977682][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.977701][ T9513] RIP: 0033:0x7fb59959e199 [ 504.977716][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.977733][ T9513] RSP: 002b:00007fb59a3e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 504.977749][ T9513] RAX: ffffffffffffffda RBX: 00007fb599825fa0 RCX: 00007fb59959e199 [ 504.977760][ T9513] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000003 [ 504.977769][ T9513] RBP: 00007fb59a3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 504.977779][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.977788][ T9513] R13: 00007fb599826038 R14: 00007fb599825fa0 R15: 00007ffcc2d3e0d8 [ 504.977812][ T9513] [ 505.540799][ T9522] overlayfs: failed to resolve 'uid>00000000000000000000': -2 [ 506.087135][ T9526] netlink: 'syz.0.969': attribute type 4 has an invalid length. [ 506.584494][ T30] audit: type=1400 audit(1791377947.892:652): avc: denied { search } for pid=9528 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.584605][ T30] audit: type=1400 audit(1791377947.892:653): avc: denied { search } for pid=9528 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.584699][ T30] audit: type=1400 audit(1791377947.892:654): avc: denied { search } for pid=9528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.584793][ T30] audit: type=1400 audit(1791377947.892:655): avc: denied { search } for pid=9528 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.691767][ T30] audit: type=1400 audit(1791377948.002:656): avc: denied { read } for pid=9532 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.693462][ T30] audit: type=1400 audit(1791377948.002:657): avc: denied { read open } for pid=9532 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.693768][ T30] audit: type=1400 audit(1791377948.002:658): avc: denied { getattr } for pid=9532 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.485902][ T5693] Process accounting resumed [ 511.593673][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 511.593687][ T30] audit: type=1400 audit(1791377952.902:668): avc: denied { write } for pid=9557 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.613063][ T30] audit: type=1400 audit(1791377952.912:669): avc: denied { remove_name } for pid=9557 comm="rm" name="resolv.conf.ifb0.ipv4ll" dev="tmpfs" ino=3029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.618688][ T30] audit: type=1400 audit(1791377952.912:670): avc: denied { unlink } for pid=9557 comm="rm" name="resolv.conf.ifb0.ipv4ll" dev="tmpfs" ino=3029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 511.903345][ T30] audit: type=1400 audit(1791377953.212:671): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 511.992091][ T30] audit: type=1400 audit(1791377953.302:672): avc: denied { ioctl } for pid=9569 comm="syz.2.978" path="socket:[20873]" dev="sockfs" ino=20873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 511.992528][ T30] audit: type=1400 audit(1791377953.302:673): avc: denied { setopt } for pid=9569 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.007400][ T30] audit: type=1400 audit(1791377953.312:674): avc: denied { bind } for pid=9569 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.045512][ T5693] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 513.627157][ T5693] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 513.628649][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.628689][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.636591][ T5693] usb 5-1: config 0 descriptor?? [ 513.667407][ T5732] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 513.756679][ T30] audit: type=1326 audit(1791377955.072:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9564 comm="syz.3.977" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f439bb9e199 code=0x0 [ 513.825352][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 513.826043][ T5732] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 513.826948][ T5732] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 513.826970][ T5732] usb 3-1: config 0 has no interface number 0 [ 513.827003][ T5732] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 513.827026][ T5732] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 513.827486][ T30] audit: type=1400 audit(1791377955.142:676): avc: denied { bind } for pid=9564 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.828947][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.828963][ T5732] usb 3-1: Product: syz [ 513.828972][ T5732] usb 3-1: Manufacturer: syz [ 513.828980][ T5732] usb 3-1: SerialNumber: syz [ 513.831178][ T5732] usb 3-1: config 0 descriptor?? [ 513.832997][ T9570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 513.833128][ T9570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 513.895524][ T5693] usbhid 5-1:0.0: can't add hid device: -71 [ 513.895620][ T5693] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 513.900474][ T5693] usb 5-1: USB disconnect, device number 39 [ 514.048998][ T9570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 514.049112][ T9570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 514.284531][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.284939][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.300226][ T5732] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 514.300384][ T5732] asix 3-1:0.34: probe with driver asix failed with error -71 [ 514.317216][ T5732] usb 3-1: USB disconnect, device number 31 [ 514.326116][ T30] audit: type=1400 audit(1791377955.642:677): avc: denied { write } for pid=9568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.366657][ T5693] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 515.503925][ T5693] usb 5-1: Using ep0 maxpacket: 32 [ 515.575705][ T5693] usb 5-1: device descriptor read/all, error -71 [ 516.554258][ T9610] FAULT_INJECTION: forcing a failure. [ 516.554258][ T9610] name failslab, interval 1, probability 0, space 0, times 0 [ 516.554281][ T9610] CPU: 1 UID: 0 PID: 9610 Comm: syz.2.985 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.554296][ T9610] Tainted: [L]=SOFTLOCKUP [ 516.554300][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 516.554307][ T9610] Call Trace: [ 516.554311][ T9610] [ 516.554316][ T9610] dump_stack_lvl+0x100/0x190 [ 516.554337][ T9610] should_fail_ex.cold+0x5/0xa [ 516.554353][ T9610] should_failslab+0xc2/0x120 [ 516.554370][ T9610] __kmalloc_noprof+0xfc/0x840 [ 516.554382][ T9610] ? rcu_is_watching+0x13/0xc0 [ 516.554399][ T9610] ? tomoyo_realpath_from_path+0xb6/0x690 [ 516.554419][ T9610] tomoyo_realpath_from_path+0xb6/0x690 [ 516.554438][ T9610] tomoyo_path_number_perm+0x23c/0x580 [ 516.554451][ T9610] ? tomoyo_path_number_perm+0x22e/0x580 [ 516.554465][ T9610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 516.554484][ T9610] ? __lock_acquire+0x5c0/0x1f40 [ 516.554504][ T9610] ? __fget_files+0x34/0x3d0 [ 516.554520][ T9610] ? find_held_lock+0x2b/0x80 [ 516.554536][ T9610] ? hook_file_ioctl_common+0x140/0x440 [ 516.554556][ T9610] ? __fget_files+0x21f/0x3d0 [ 516.554573][ T9610] security_file_ioctl+0xd3/0x230 [ 516.554589][ T9610] __x64_sys_ioctl+0xb7/0x210 [ 516.554603][ T9610] do_syscall_64+0x123/0x790 [ 516.554618][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.554629][ T9610] RIP: 0033:0x7fb59959e199 [ 516.554638][ T9610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.554649][ T9610] RSP: 002b:00007fb59a3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.554660][ T9610] RAX: ffffffffffffffda RBX: 00007fb599825fa0 RCX: 00007fb59959e199 [ 516.554666][ T9610] RDX: 0000200000000200 RSI: 0000000000008916 RDI: 0000000000000005 [ 516.554673][ T9610] RBP: 00007fb59a3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 516.554679][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.554685][ T9610] R13: 00007fb599826038 R14: 00007fb599825fa0 R15: 00007ffcc2d3e0d8 [ 516.554700][ T9610] [ 516.554705][ T9610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 516.924864][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 516.924881][ T30] audit: type=1400 audit(1791377958.232:679): avc: denied { write } for pid=9600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.089384][ T30] audit: type=1400 audit(1791377958.402:680): avc: denied { write } for pid=9620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.912035][ T966] Process accounting resumed [ 519.790928][ T30] audit: type=1400 audit(1791377961.102:681): avc: denied { write } for pid=9626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.158639][ T30] audit: type=1400 audit(1791377961.472:682): avc: denied { write } for pid=9654 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.477386][ T9661] FAULT_INJECTION: forcing a failure. [ 520.477386][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.477419][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.1.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.477443][ T9661] Tainted: [L]=SOFTLOCKUP [ 520.477449][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 520.477460][ T9661] Call Trace: [ 520.477466][ T9661] [ 520.477473][ T9661] dump_stack_lvl+0x100/0x190 [ 520.477503][ T9661] should_fail_ex.cold+0x5/0xa [ 520.477528][ T9661] _copy_from_user+0x2e/0xd0 [ 520.477552][ T9661] copy_msghdr_from_user+0x9f/0x4c0 [ 520.477575][ T9661] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 520.477602][ T9661] ? lock_acquire+0x1d1/0x380 [ 520.477622][ T9661] ? get_pid_task+0x2a/0x250 [ 520.477648][ T9661] ___sys_sendmsg+0x106/0x1e0 [ 520.477676][ T9661] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.477698][ T9661] ? get_pid_task+0x106/0x250 [ 520.477731][ T9661] ? find_held_lock+0x2b/0x80 [ 520.477771][ T9661] __sys_sendmsg+0x160/0x210 [ 520.477797][ T9661] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.477835][ T9661] do_syscall_64+0x123/0x790 [ 520.477858][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.477876][ T9661] RIP: 0033:0x7feec3b9e199 [ 520.477891][ T9661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.477906][ T9661] RSP: 002b:00007feec4afb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.477924][ T9661] RAX: ffffffffffffffda RBX: 00007feec3e25fa0 RCX: 00007feec3b9e199 [ 520.477935][ T9661] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 520.477946][ T9661] RBP: 00007feec4afb090 R08: 0000000000000000 R09: 0000000000000000 [ 520.477956][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.477966][ T9661] R13: 00007feec3e26038 R14: 00007feec3e25fa0 R15: 00007ffe4e867658 [ 520.477988][ T9661] [ 520.887717][ T30] audit: type=1400 audit(1791377962.202:683): avc: denied { mount } for pid=9669 comm="syz.4.994" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 521.080230][ T30] audit: type=1400 audit(1791377962.392:684): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 522.421331][ T9682] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 522.438636][ T5732] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 522.523195][ T30] audit: type=1400 audit(1791377963.832:685): avc: denied { write } for pid=9659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.580958][ T9677] ceph: No mds server is up or the cluster is laggy [ 522.694718][ T30] audit: type=1400 audit(1791377964.002:686): avc: denied { write } for pid=9690 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.997967][ T30] audit: type=1400 audit(1791377964.302:687): avc: denied { read } for pid=9696 comm="syz.3.992" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.998017][ T30] audit: type=1400 audit(1791377964.302:688): avc: denied { open } for pid=9696 comm="syz.3.992" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.998054][ T30] audit: type=1400 audit(1791377964.302:689): avc: denied { create } for pid=9698 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 523.003312][ T30] audit: type=1400 audit(1791377964.312:690): avc: denied { ioctl } for pid=9696 comm="syz.3.992" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 523.336247][ T5602] Process accounting resumed [ 525.263847][ T30] audit: type=1400 audit(1791377966.572:691): avc: denied { write } for pid=9692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.464461][ T9725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'. [ 526.639747][ T30] audit: type=1400 audit(1791377967.952:692): avc: denied { write } for pid=9726 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.911083][ T30] audit: type=1400 audit(1791377972.222:693): avc: denied { getopt } for pid=9752 comm="syz.0.1010" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 533.000181][ T9766] JFS: discard option not supported on device [ 533.000873][ T9766] Mount JFS Failure: -5 [ 533.000896][ T9766] jfs_mount failed w/return code = -5 [ 533.558913][ T5732] Process accounting resumed [ 534.331148][ T30] audit: type=1400 audit(1791377975.642:694): avc: denied { mmap_zero } for pid=9768 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 536.624574][ T30] audit: type=1400 audit(1791377977.932:695): avc: denied { ioctl } for pid=9789 comm="syz-executor" path="socket:[21149]" dev="sockfs" ino=21149 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.655201][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.663757][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.671951][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.672773][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.673232][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.704321][ T30] audit: type=1400 audit(1791377978.012:696): avc: denied { mounton } for pid=9789 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 537.039518][ T30] audit: type=1400 audit(1791377978.352:697): avc: denied { sys_module } for pid=9789 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 537.460353][ T9807] JFS: discard option not supported on device [ 537.461146][ T9807] Mount JFS Failure: -5 [ 537.461171][ T9807] jfs_mount failed w/return code = -5 [ 538.100174][ T5964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.687545][ T5604] Bluetooth: hci5: command tx timeout [ 538.824536][ T5964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.988054][ T5964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.031960][ T30] audit: type=1400 audit(1791377980.342:698): avc: denied { read } for pid=5612 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.061892][ T30] audit: type=1400 audit(1791377980.372:699): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.063833][ T30] audit: type=1400 audit(1791377980.372:700): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.183304][ T30] audit: type=1400 audit(1791377980.492:701): avc: denied { mounton } for pid=9811 comm="syz.0.1021" path="/210/dev" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 539.183336][ T30] audit: type=1400 audit(1791377980.492:702): avc: denied { mount } for pid=9811 comm="syz.0.1021" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 539.183356][ T30] audit: type=1400 audit(1791377980.492:703): avc: denied { mount } for pid=9811 comm="syz.0.1021" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 539.268909][ T30] audit: type=1400 audit(1791377980.582:704): avc: denied { create } for pid=9817 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.378188][ T5964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.804229][ T9818] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 540.775494][ T5604] Bluetooth: hci5: command tx timeout [ 541.019727][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.020003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.081629][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.100650][ T9830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.100851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.203671][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 542.203691][ T30] audit: type=1400 audit(1791377982.852:748): avc: denied { read } for pid=9835 comm="syz.3.1025" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 542.203730][ T30] audit: type=1400 audit(1791377982.852:749): avc: denied { open } for pid=9835 comm="syz.3.1025" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 542.203767][ T30] audit: type=1400 audit(1791377983.002:750): avc: denied { create } for pid=9835 comm="syz.3.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 542.203800][ T30] audit: type=1400 audit(1791377983.142:751): avc: denied { watch watch_reads } for pid=9835 comm="syz.3.1025" path="/205" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 542.203831][ T30] audit: type=1400 audit(1791377983.162:752): avc: denied { name_bind } for pid=9835 comm="syz.3.1025" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 542.209733][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.265396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.438913][ T30] audit: type=1400 audit(1791377983.752:753): avc: denied { create } for pid=9836 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 542.469170][ T30] audit: type=1400 audit(1791377983.752:754): avc: denied { allowed } for pid=9836 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 542.525015][ T30] audit: type=1400 audit(1791377983.822:755): avc: denied { create } for pid=9836 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 542.525172][ T30] audit: type=1400 audit(1791377983.832:756): avc: denied { ioctl } for pid=9836 comm="syz.0.1026" path="socket:[22205]" dev="sockfs" ino=22205 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 542.527848][ T30] audit: type=1400 audit(1791377983.832:757): avc: denied { read write } for pid=9836 comm="syz.0.1026" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 542.872647][ T5604] Bluetooth: hci5: command tx timeout [ 543.806392][ T9825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.959935][ T5964] bridge_slave_1: left allmulticast mode [ 543.959972][ T5964] bridge_slave_1: left promiscuous mode [ 543.961921][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.004356][ T5964] bridge_slave_0: left allmulticast mode [ 544.004380][ T5964] bridge_slave_0: left promiscuous mode [ 544.004585][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.925429][ T5604] Bluetooth: hci5: command tx timeout [ 546.912872][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.917771][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.924356][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.926144][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.927306][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 548.017804][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 548.017822][ T30] audit: type=1400 audit(1791377989.332:775): avc: denied { write } for pid=9879 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.017858][ T30] audit: type=1400 audit(1791377989.332:776): avc: denied { remove_name } for pid=9879 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3071 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.017891][ T30] audit: type=1400 audit(1791377989.332:777): avc: denied { unlink } for pid=9879 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3071 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 548.182955][ T30] audit: type=1400 audit(1791377989.492:778): avc: denied { sys_module } for pid=9871 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 548.567376][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.598460][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.604935][ T5964] bond0 (unregistering): Released all slaves [ 548.683023][ T966] Process accounting resumed [ 548.692649][ T30] audit: type=1400 audit(1791377990.002:779): avc: denied { create } for pid=9882 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 548.718410][ T30] audit: type=1400 audit(1791377990.032:780): avc: denied { connect } for pid=9882 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 548.719532][ T30] audit: type=1400 audit(1791377990.032:781): avc: denied { ioctl } for pid=9882 comm="syz.3.1027" path="socket:[22268]" dev="sockfs" ino=22268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 548.720346][ T30] audit: type=1400 audit(1791377990.032:782): avc: denied { write } for pid=9882 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.965374][ T5601] Bluetooth: hci0: command tx timeout [ 550.371884][ T30] audit: type=1400 audit(1791377991.682:783): avc: denied { mount } for pid=9887 comm="syz.1.1034" name="/" dev="rpc_pipefs" ino=22279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 550.400949][ T30] audit: type=1400 audit(1791377991.712:784): avc: denied { read } for pid=9887 comm="syz.1.1034" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 550.443770][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 550.477968][ T5964] tipc: Left network mode [ 550.514538][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.514618][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.514722][ T9789] bridge_slave_0: entered allmulticast mode [ 550.516179][ T9789] bridge_slave_0: entered promiscuous mode [ 550.521224][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.522446][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.523650][ T9789] bridge_slave_1: entered allmulticast mode [ 550.528718][ T9789] bridge_slave_1: entered promiscuous mode [ 550.688140][ T9789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.707530][ T9789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.741988][ T9897] netlink: 'syz.1.1034': attribute type 10 has an invalid length. [ 552.017203][ T9906] Driver unsupported XDP return value 0 on prog (id 139) dev N/A, expect packet loss! [ 552.045352][ T5601] Bluetooth: hci0: command tx timeout [ 552.973059][ T9888] input: syz0 as /devices/virtual/input/input47 [ 552.978784][ T9897] veth0_vlan: entered allmulticast mode [ 552.983952][ T9897] team0: Device veth0_vlan failed to register rx_handler [ 553.192561][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 553.192577][ T30] audit: type=1400 audit(1791377994.502:800): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 553.217264][ T9789] team0: Port device team_slave_0 added [ 554.213739][ T5601] Bluetooth: hci0: command tx timeout [ 555.317638][ T9789] team0: Port device team_slave_1 added [ 555.500597][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.500614][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.500635][ T9789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.517741][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.517756][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.517775][ T9789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.654245][ T5964] hsr_slave_0: left promiscuous mode [ 555.660168][ T5964] hsr_slave_1: left promiscuous mode [ 555.661047][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.661078][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.675109][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.675127][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.621363][ T5601] Bluetooth: hci0: command tx timeout [ 556.748765][ T5964] veth1_macvtap: left promiscuous mode [ 556.748819][ T5964] veth0_macvtap: left promiscuous mode [ 556.748908][ T5964] veth1_vlan: left promiscuous mode [ 556.748989][ T5964] veth0_vlan: left promiscuous mode [ 557.059918][ T30] audit: type=1400 audit(1791377998.372:801): avc: denied { write } for pid=9935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.268159][ T30] audit: type=1400 audit(1791377998.582:802): avc: denied { write } for pid=9950 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.338669][ T5964] team0 (unregistering): Port device team_slave_1 removed [ 557.368698][ T5964] team0 (unregistering): Port device team_slave_0 removed [ 557.412750][ T1309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.413132][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.413177][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.586499][ T30] audit: type=1400 audit(1791377998.882:803): avc: denied { name_connect } for pid=9952 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 557.731938][ T30] audit: type=1400 audit(1791377998.972:804): avc: denied { create } for pid=9952 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 557.732097][ T30] audit: type=1400 audit(1791377998.982:805): avc: denied { read } for pid=9952 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 557.813539][ T30] audit: type=1400 audit(1791377999.102:806): avc: denied { write } for pid=9952 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 558.187749][ T30] audit: type=1400 audit(1791377999.302:807): avc: denied { mount } for pid=9954 comm="syz.1.1041" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 558.188731][ T30] audit: type=1400 audit(1791377999.502:808): avc: denied { setopt } for pid=9952 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 559.615747][ T30] audit: type=1400 audit(1791378000.932:809): avc: denied { append } for pid=9965 comm="syz.3.1043" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 559.700578][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 559.811642][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 559.862603][ T1217] Process accounting resumed [ 559.868536][ T30] audit: type=1400 audit(1791378001.172:810): avc: denied { read } for pid=9952 comm="syz.0.1042" name="sg0" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 559.868578][ T30] audit: type=1400 audit(1791378001.182:811): avc: denied { open } for pid=9952 comm="syz.0.1042" path="/dev/sg0" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 560.099975][ T30] audit: type=1400 audit(1791378001.402:812): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 560.220539][ T9789] hsr_slave_0: entered promiscuous mode [ 560.246768][ T9789] hsr_slave_1: entered promiscuous mode [ 560.255174][ T9789] debugfs: 'hsr0' already exists in 'hsr' [ 560.255202][ T9789] Cannot create hsr debugfs directory [ 560.768985][ T30] audit: type=1400 audit(1791378002.082:813): avc: denied { shutdown } for pid=9974 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.889148][ T30] audit: type=1400 audit(1791378002.192:814): avc: denied { map } for pid=9976 comm="syz.1.1046" path="/dev/ublkc9" dev="devtmpfs" ino=2946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 564.847531][ T5964] IPVS: stop unused estimator thread 0... [ 564.858841][ T30] audit: type=1400 audit(1791378006.172:815): avc: denied { write } for pid=9981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.179387][ T30] audit: type=1400 audit(1791378006.492:816): avc: denied { write } for pid=10018 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.288466][ T1217] Process accounting resumed [ 565.811381][ T5964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.363040][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 566.871350][ T30] audit: type=1400 audit(1791378008.172:817): avc: denied { mount } for pid=10027 comm="syz.1.1053" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 567.222240][ T5964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.047649][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.049788][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.049875][ T9871] bridge_slave_0: entered allmulticast mode [ 568.054191][ T9871] bridge_slave_0: entered promiscuous mode [ 568.111998][ T5964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.139889][ T30] audit: type=1400 audit(1791378009.452:818): avc: denied { bind } for pid=10034 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.140205][ T30] audit: type=1400 audit(1791378009.452:819): avc: denied { listen } for pid=10034 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.165161][ T30] audit: type=1400 audit(1791378009.462:820): avc: denied { read } for pid=10034 comm="syz.0.1055" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 568.165199][ T30] audit: type=1400 audit(1791378009.462:821): avc: denied { open } for pid=10034 comm="syz.0.1055" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 568.701821][ T30] audit: type=1400 audit(1791378009.692:822): avc: denied { create } for pid=10034 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 568.701869][ T30] audit: type=1400 audit(1791378009.702:823): avc: denied { setopt } for pid=10034 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 568.760146][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.760217][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.760331][ T9871] bridge_slave_1: entered allmulticast mode [ 568.762061][ T9871] bridge_slave_1: entered promiscuous mode [ 569.750698][ T30] audit: type=1400 audit(1791378010.602:824): avc: denied { write } for pid=10038 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 569.880377][ T5964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.937579][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 569.937596][ T30] audit: type=1400 audit(1791378011.252:826): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 569.951254][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.962067][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.003966][ T9789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 570.017909][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.018598][ T9789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 570.025047][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.075813][ T9789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 570.089689][ T9] Process accounting resumed [ 570.104221][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.115589][ T9789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 570.142140][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.147578][ T9871] team0: Port device team_slave_0 added [ 570.157141][ T9871] team0: Port device team_slave_1 added [ 570.407913][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.407931][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.407954][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.413175][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.413189][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.413208][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.625911][ T30] audit: type=1400 audit(1791378011.942:827): avc: denied { write } for pid=10043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.838561][ T30] audit: type=1400 audit(1791378012.152:828): avc: denied { write } for pid=10071 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.939974][ T5964] bridge_slave_1: left allmulticast mode [ 570.939991][ T5964] bridge_slave_1: left promiscuous mode [ 570.940092][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.947472][ T5964] bridge_slave_0: left allmulticast mode [ 570.947494][ T5964] bridge_slave_0: left promiscuous mode [ 570.947643][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.253670][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1056'. [ 572.279979][ T30] audit: type=1400 audit(1791378013.592:829): avc: denied { read write } for pid=10079 comm="syz.3.1056" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 572.281133][ T30] audit: type=1400 audit(1791378013.592:830): avc: denied { open } for pid=10079 comm="syz.3.1056" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 572.365210][ T30] audit: type=1400 audit(1791378013.672:831): avc: denied { sqpoll } for pid=10079 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 572.526512][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.529901][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.532703][ T5964] bond0 (unregistering): Released all slaves [ 572.564634][T10072] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1059'. [ 572.584743][ T30] audit: type=1400 audit(1791378013.892:832): avc: denied { create } for pid=10079 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 572.587358][ T9871] hsr_slave_0: entered promiscuous mode [ 572.589871][ T9871] hsr_slave_1: entered promiscuous mode [ 572.591956][ T9871] debugfs: 'hsr0' already exists in 'hsr' [ 572.591972][ T9871] Cannot create hsr debugfs directory [ 572.609608][ T30] audit: type=1400 audit(1791378013.922:833): avc: denied { create } for pid=10079 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 572.635725][ T30] audit: type=1400 audit(1791378013.942:834): avc: denied { ioctl } for pid=10079 comm="syz.3.1056" path="socket:[23846]" dev="sockfs" ino=23846 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 572.639524][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 572.771436][ T5964] rxrpc: Leaked peer c1 {1} 127.0.0.1:7003 [ 573.870913][ T5964] hsr_slave_0: left promiscuous mode [ 573.897383][ T5964] hsr_slave_1: left promiscuous mode [ 573.919738][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.919813][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.958344][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1064'. [ 574.011831][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.014755][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.237848][ T5964] veth1_macvtap: left promiscuous mode [ 574.237873][ T5964] veth0_macvtap: left promiscuous mode [ 574.237921][ T5964] veth1_vlan: left promiscuous mode [ 574.237952][ T5964] veth0_vlan: left promiscuous mode [ 574.531945][ T5732] Process accounting resumed [ 574.614333][ T30] audit: type=1400 audit(1791378015.892:835): avc: denied { write } for pid=10108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.463664][ T30] audit: type=1400 audit(1791378016.772:836): avc: denied { write } for pid=10130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.672250][ T30] audit: type=1400 audit(1791378016.982:837): avc: denied { mount } for pid=10132 comm="syz.0.1066" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 575.721957][ T30] audit: type=1400 audit(1791378017.032:838): avc: denied { setattr } for pid=10132 comm="syz.0.1066" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 575.751718][ T30] audit: type=1400 audit(1791378017.062:839): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 575.795217][ T5964] team0 (unregistering): Port device team_slave_1 removed [ 575.821598][ T5964] team0 (unregistering): Port device team_slave_0 removed [ 575.912082][ T5732] Process accounting resumed [ 577.001571][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 577.022222][ T9789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.168467][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1068'. [ 577.193877][ T9789] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.628360][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.628448][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.639202][ T5964] IPVS: stop unused estimator thread 0... [ 578.651360][ T9871] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 578.696521][ T9871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.707509][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.707583][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.709104][ T9871] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 578.749103][ T9871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.773306][ T9871] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 578.783564][ T9871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.804425][ T9871] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 578.814832][ T9871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.109623][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.142544][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.187580][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.187673][ T6741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.468467][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.468562][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.716888][ T30] audit: type=1400 audit(1791378021.022:840): avc: denied { write } for pid=10160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.184080][ T9871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.577172][ T30] audit: type=1400 audit(1791378022.882:841): avc: denied { write } for pid=10194 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.301789][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 583.780442][ T30] audit: type=1400 audit(1791378025.092:842): avc: denied { connect } for pid=10211 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 584.829717][ T9789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.282359][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.450732][ T9789] veth0_vlan: entered promiscuous mode [ 585.474783][ T9789] veth1_vlan: entered promiscuous mode [ 585.570870][ T9789] veth0_macvtap: entered promiscuous mode [ 585.583562][ T9789] veth1_macvtap: entered promiscuous mode [ 585.663163][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 585.681136][ T30] audit: type=1400 audit(1791378026.992:843): avc: denied { write } for pid=10233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.748438][ T9789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.763999][ T9789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.796640][ T5964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.826311][ T1021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.858695][ T6741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.858970][ T6741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.923750][ T30] audit: type=1400 audit(1791378027.232:844): avc: denied { write } for pid=10264 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.098695][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 589.114592][ T9871] veth0_vlan: entered promiscuous mode [ 589.140701][ T5867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.140720][ T5867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.225620][ T9871] veth1_vlan: entered promiscuous mode [ 589.249703][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.249722][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.340998][T10283] JFS: discard option not supported on device [ 589.341865][T10283] Mount JFS Failure: -5 [ 589.341888][T10283] jfs_mount failed w/return code = -5 [ 589.343583][ T30] audit: type=1400 audit(1791378030.642:845): avc: denied { create } for pid=10277 comm="syz.1.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 589.343754][ T30] audit: type=1400 audit(1791378030.652:846): avc: denied { mounton } for pid=10277 comm="syz.1.1084" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 589.744479][ T30] audit: type=1400 audit(1791378030.712:847): avc: denied { write } for pid=10277 comm="syz.1.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.791623][ T30] audit: type=1400 audit(1791378031.102:848): avc: denied { mounton } for pid=9789 comm="syz-executor" path="/root/syzkaller.on2Alg/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 589.829655][ T9871] veth0_macvtap: entered promiscuous mode [ 589.833503][T10285] FAULT_INJECTION: forcing a failure. [ 589.833503][T10285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.833525][T10285] CPU: 1 UID: 0 PID: 10285 Comm: syz.0.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.833540][T10285] Tainted: [L]=SOFTLOCKUP [ 589.833544][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 589.833550][T10285] Call Trace: [ 589.833554][T10285] [ 589.833559][T10285] dump_stack_lvl+0x100/0x190 [ 589.833579][T10285] should_fail_ex.cold+0x5/0xa [ 589.833595][T10285] _copy_from_user+0x2e/0xd0 [ 589.833611][T10285] __sys_bpf+0x2f5/0x4a30 [ 589.833627][T10285] ? __pfx___sys_bpf+0x10/0x10 [ 589.833639][T10285] ? find_held_lock+0x2b/0x80 [ 589.833655][T10285] ? get_pid_task+0xfc/0x250 [ 589.833670][T10285] ? get_pid_task+0xfc/0x250 [ 589.833692][T10285] ? find_held_lock+0x2b/0x80 [ 589.833715][T10285] ? rcu_read_lock_any_held+0x6a/0x90 [ 589.833733][T10285] ? find_held_lock+0x2b/0x80 [ 589.833749][T10285] ? ksys_write+0x190/0x250 [ 589.833762][T10285] ? ksys_write+0x190/0x250 [ 589.833774][T10285] ? lock_acquire+0x1d1/0x380 [ 589.833798][T10285] ? fput+0x7c/0x100 [ 589.833814][T10285] ? ksys_write+0x1ac/0x250 [ 589.833828][T10285] ? __x64_sys_bpf+0xce/0x140 [ 589.833840][T10285] __x64_sys_bpf+0xce/0x140 [ 589.833853][T10285] ? do_syscall_64+0xae/0x790 [ 589.833867][T10285] do_syscall_64+0x123/0x790 [ 589.833880][T10285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.833891][T10285] RIP: 0033:0x7f8ecbb9e199 [ 589.833901][T10285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.833912][T10285] RSP: 002b:00007f8ecca90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.833922][T10285] RAX: ffffffffffffffda RBX: 00007f8ecbe25fa0 RCX: 00007f8ecbb9e199 [ 589.833929][T10285] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 589.833936][T10285] RBP: 00007f8ecca90090 R08: 0000000000000000 R09: 0000000000000000 [ 589.833942][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.833949][T10285] R13: 00007f8ecbe26038 R14: 00007f8ecbe25fa0 R15: 00007fff5de2b258 [ 589.833963][T10285] [ 589.835035][ T30] audit: type=1400 audit(1791378031.142:849): avc: denied { mount } for pid=9789 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 589.842270][ T9871] veth1_macvtap: entered promiscuous mode [ 589.875929][ T30] audit: type=1400 audit(1791378031.182:850): avc: denied { mounton } for pid=9789 comm="syz-executor" path="/root/syzkaller.on2Alg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 589.882089][ T30] audit: type=1400 audit(1791378031.192:851): avc: denied { mounton } for pid=9789 comm="syz-executor" path="/root/syzkaller.on2Alg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 589.907630][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.922148][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.927148][ T30] audit: type=1400 audit(1791378031.242:852): avc: denied { mounton } for pid=9789 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 589.929467][ T30] audit: type=1400 audit(1791378031.242:853): avc: denied { mount } for pid=9789 comm="syz-executor" name="/" dev="gadgetfs" ino=8435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 589.962221][ T30] audit: type=1400 audit(1791378031.262:854): avc: denied { mount } for pid=9789 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 590.036104][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.038036][ T6131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.038068][ T6131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.038095][ T6131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.150085][ T5867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.150107][ T5867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.544955][T10314] Invalid ELF header magic: != ELF [ 592.546445][T10314] overlayfs: overlapping lowerdir path [ 592.856431][ T5601] block nbd1: Receive control failed (result -32) [ 592.864825][T10313] block nbd1: shutting down sockets [ 593.099396][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.099446][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.935659][T10334] JFS: discard option not supported on device [ 593.936443][T10334] Mount JFS Failure: -5 [ 593.936467][T10334] jfs_mount failed w/return code = -5 [ 594.095393][ T1217] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 594.247237][ T1217] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 594.250417][ T1217] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 594.250458][ T1217] usb 4-1: config 1 has no interface number 0 [ 594.312368][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.312392][ T1217] usb 4-1: Product: syz [ 594.312404][ T1217] usb 4-1: Manufacturer: syz [ 594.312417][ T1217] usb 4-1: SerialNumber: syz [ 594.363791][ T1217] usb 4-1: 3:1 : does not exist [ 594.363813][ T1217] usb 4-1: 3:2 : does not exist [ 594.491316][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 594.501233][T10337] ref_ctr increment failed for inode: 0x12 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888024288c40 [ 594.503573][T10343] FAULT_INJECTION: forcing a failure. [ 594.503573][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 594.503598][T10343] CPU: 0 UID: 0 PID: 10343 Comm: syz.1.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.503620][T10343] Tainted: [L]=SOFTLOCKUP [ 594.503626][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 594.503635][T10343] Call Trace: [ 594.503640][T10343] [ 594.503647][T10343] dump_stack_lvl+0x100/0x190 [ 594.503674][T10343] should_fail_ex.cold+0x5/0xa [ 594.503697][T10343] should_failslab+0xc2/0x120 [ 594.503720][T10343] __kvmalloc_node_noprof+0x113/0x9b0 [ 594.503740][T10343] ? lock_acquire+0x1d1/0x380 [ 594.503758][T10343] ? __might_fault+0xc5/0x140 [ 594.503776][T10343] ? seq_read_iter+0x819/0x1270 [ 594.503802][T10343] seq_read_iter+0x819/0x1270 [ 594.503832][T10343] seq_read+0x344/0x4d0 [ 594.503853][T10343] ? __pfx_seq_read+0x10/0x10 [ 594.503873][T10343] ? lock_acquire+0x1d1/0x380 [ 594.503893][T10343] ? avc_policy_seqno+0x9/0x20 [ 594.503908][T10343] ? selinux_file_permission+0x8f/0x6d0 [ 594.503934][T10343] ? rw_verify_area+0xce/0x6d0 [ 594.503950][T10343] ? __pfx_seq_read+0x10/0x10 [ 594.503970][T10343] vfs_read+0x1e4/0xb40 [ 594.503988][T10343] ? lock_acquire+0x1d1/0x380 [ 594.504005][T10343] ? __fget_files+0x34/0x3d0 [ 594.504026][T10343] ? __pfx_vfs_read+0x10/0x10 [ 594.504041][T10343] ? find_held_lock+0x2b/0x80 [ 594.504065][T10343] ? __fget_files+0x215/0x3d0 [ 594.504089][T10343] ? __fget_files+0x21f/0x3d0 [ 594.504117][T10343] ksys_read+0x12a/0x250 [ 594.504134][T10343] ? __pfx_ksys_read+0x10/0x10 [ 594.504159][T10343] do_syscall_64+0x123/0x790 [ 594.504179][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.504195][T10343] RIP: 0033:0x7feec3b9e199 [ 594.504209][T10343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.504223][T10343] RSP: 002b:00007feec4afb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.504239][T10343] RAX: ffffffffffffffda RBX: 00007feec3e25fa0 RCX: 00007feec3b9e199 [ 594.504249][T10343] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 594.504258][T10343] RBP: 00007feec4afb090 R08: 0000000000000000 R09: 0000000000000000 [ 594.504268][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.504277][T10343] R13: 00007feec3e26038 R14: 00007feec3e25fa0 R15: 00007ffe4e867658 [ 594.504300][T10343] [ 594.810860][T10347] FAULT_INJECTION: forcing a failure. [ 594.810860][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 594.810891][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.1.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.810915][T10347] Tainted: [L]=SOFTLOCKUP [ 594.810922][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 594.810932][T10347] Call Trace: [ 594.810938][T10347] [ 594.810945][T10347] dump_stack_lvl+0x100/0x190 [ 594.810976][T10347] should_fail_ex.cold+0x5/0xa [ 594.811002][T10347] should_failslab+0xc2/0x120 [ 594.811028][T10347] kmem_cache_alloc_noprof+0x92/0x6a0 [ 594.811057][T10347] ? do_getname+0x35/0x390 [ 594.811081][T10347] do_getname+0x35/0x390 [ 594.811102][T10347] do_sys_openat2+0xc7/0x1e0 [ 594.811130][T10347] ? __pfx_do_sys_openat2+0x10/0x10 [ 594.811159][T10347] ? __fget_files+0x21f/0x3d0 [ 594.811190][T10347] __x64_sys_openat+0x12d/0x210 [ 594.811218][T10347] ? __pfx___x64_sys_openat+0x10/0x10 [ 594.811255][T10347] do_syscall_64+0x123/0x790 [ 594.811278][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.811297][T10347] RIP: 0033:0x7feec3b5e9ce [ 594.811313][T10347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.811331][T10347] RSP: 002b:00007feec4afaf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 594.811350][T10347] RAX: ffffffffffffffda RBX: 00007feec4afb6c0 RCX: 00007feec3b5e9ce [ 594.811362][T10347] RDX: 0000000000000002 RSI: 00007feec3c351da RDI: ffffffffffffff9c [ 594.811373][T10347] RBP: 00007feec3c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 594.811384][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.811394][T10347] R13: 00007feec3e26038 R14: 00007feec3e25fa0 R15: 00007ffe4e867658 [ 594.811420][T10347] [ 594.874340][T10350] FAULT_INJECTION: forcing a failure. [ 594.874340][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 594.874371][T10350] CPU: 0 UID: 0 PID: 10350 Comm: syz.0.1098 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.874396][T10350] Tainted: [L]=SOFTLOCKUP [ 594.874402][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 594.874412][T10350] Call Trace: [ 594.874418][T10350] [ 594.874425][T10350] dump_stack_lvl+0x100/0x190 [ 594.874455][T10350] should_fail_ex.cold+0x5/0xa [ 594.874481][T10350] should_failslab+0xc2/0x120 [ 594.874507][T10350] kmem_cache_alloc_noprof+0x92/0x6a0 [ 594.874528][T10350] ? __fget_files+0x215/0x3d0 [ 594.874558][T10350] ? create_new_namespaces+0x30/0xac0 [ 594.874587][T10350] create_new_namespaces+0x30/0xac0 [ 594.874617][T10350] __do_sys_setns+0x213/0x1f30 [ 594.874644][T10350] ? __pfx___do_sys_setns+0x10/0x10 [ 594.874674][T10350] do_syscall_64+0x123/0x790 [ 594.874697][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.874715][T10350] RIP: 0033:0x7f8ecbb9e199 [ 594.874730][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.874748][T10350] RSP: 002b:00007f8ecca90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 594.874768][T10350] RAX: ffffffffffffffda RBX: 00007f8ecbe25fa0 RCX: 00007f8ecbb9e199 [ 594.874779][T10350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 594.874790][T10350] RBP: 00007f8ecbc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 594.874800][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.874811][T10350] R13: 00007f8ecbe26038 R14: 00007f8ecbe25fa0 R15: 00007fff5de2b258 [ 594.874834][T10350] [ 595.974543][ T5602] usb 4-1: USB disconnect, device number 29 [ 596.056243][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 596.056260][ T30] audit: type=1400 audit(1791378037.362:881): avc: denied { ioctl } for pid=10358 comm="syz.0.1100" path="/dev/video8" dev="devtmpfs" ino=945 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 596.106451][ T30] audit: type=1400 audit(1791378037.422:882): avc: denied { write } for pid=10359 comm="syz.6.1101" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 596.130786][ T30] audit: type=1400 audit(1791378037.432:883): avc: denied { create } for pid=10359 comm="syz.6.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 596.155845][ T30] audit: type=1400 audit(1791378037.452:884): avc: denied { connect } for pid=10359 comm="syz.6.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 598.885347][ T30] audit: type=1400 audit(1791378040.172:885): avc: denied { setattr } for pid=10389 comm="syz.6.1109" name="midiC2D0" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 601.236900][ T30] audit: type=1400 audit(1791378042.552:886): avc: denied { setopt } for pid=10400 comm="syz.6.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 601.271522][ T30] audit: type=1400 audit(1791378042.582:887): avc: denied { bind } for pid=10400 comm="syz.6.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 602.238670][ T30] audit: type=1400 audit(1791378043.552:888): avc: denied { ioctl } for pid=10400 comm="syz.6.1110" path="socket:[25640]" dev="sockfs" ino=25640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 602.391223][T10415] FAULT_INJECTION: forcing a failure. [ 602.391223][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.391252][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.1.1102 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.391273][T10415] Tainted: [L]=SOFTLOCKUP [ 602.391278][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 602.391287][T10415] Call Trace: [ 602.391291][T10415] [ 602.391297][T10415] dump_stack_lvl+0x100/0x190 [ 602.391322][T10415] should_fail_ex.cold+0x5/0xa [ 602.391343][T10415] _copy_from_user+0x2e/0xd0 [ 602.391362][T10415] move_addr_to_kernel+0x65/0x170 [ 602.391380][T10415] __sys_connect+0xb5/0x170 [ 602.391398][T10415] ? __pfx___sys_connect+0x10/0x10 [ 602.391414][T10415] ? __fget_files+0x21f/0x3d0 [ 602.391440][T10415] ? __pfx_ksys_write+0x10/0x10 [ 602.391460][T10415] __x64_sys_connect+0x72/0xb0 [ 602.391477][T10415] ? lockdep_hardirqs_on+0x7d/0x110 [ 602.391494][T10415] do_syscall_64+0x123/0x790 [ 602.391513][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.391528][T10415] RIP: 0033:0x7feec3b9e199 [ 602.391542][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.391554][T10415] RSP: 002b:00007feec4afb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 602.391569][T10415] RAX: ffffffffffffffda RBX: 00007feec3e25fa0 RCX: 00007feec3b9e199 [ 602.391579][T10415] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000005 [ 602.391591][T10415] RBP: 00007feec4afb090 R08: 0000000000000000 R09: 0000000000000000 [ 602.391600][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.391609][T10415] R13: 00007feec3e26038 R14: 00007feec3e25fa0 R15: 00007ffe4e867658 [ 602.391629][T10415] [ 602.587578][ T30] audit: type=1400 audit(1791378043.902:889): avc: denied { write } for pid=10379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.680808][ T30] audit: type=1400 audit(1791378043.992:890): avc: denied { write } for pid=10420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.761877][ T1217] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 603.917089][ T1217] usb 2-1: Using ep0 maxpacket: 8 [ 603.920595][ T1217] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 603.923266][ T1217] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 603.923292][ T1217] usb 2-1: config 0 has no interface number 0 [ 603.923325][ T1217] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.923345][ T1217] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 603.923366][ T1217] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 603.923387][ T1217] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 603.923409][ T1217] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.925153][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.925172][ T1217] usb 2-1: Product: syz [ 603.925184][ T1217] usb 2-1: Manufacturer: syz [ 603.925198][ T1217] usb 2-1: SerialNumber: syz [ 603.933309][ T1217] usb 2-1: config 0 descriptor?? [ 604.147621][ T1217] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 604.168289][ T30] audit: type=1326 audit(1791378045.482:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.6.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f092b19e199 code=0x0 [ 604.260455][T10439] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 604.260951][T10439] batman_adv: batadv0: Adding interface: gretap1 [ 604.260961][T10439] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.260982][T10439] batman_adv: batadv0: Interface activated: gretap1 [ 604.608679][ T30] audit: type=1400 audit(1791378045.892:892): avc: denied { setopt } for pid=10419 comm="syz.1.1114" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 604.641064][ T1217] usb 2-1: USB disconnect, device number 31 [ 608.092147][T10463] FAULT_INJECTION: forcing a failure. [ 608.092147][T10463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.092180][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.1.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.092204][T10463] Tainted: [L]=SOFTLOCKUP [ 608.092211][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 608.092221][T10463] Call Trace: [ 608.092228][T10463] [ 608.092235][T10463] dump_stack_lvl+0x100/0x190 [ 608.092266][T10463] should_fail_ex.cold+0x5/0xa [ 608.092292][T10463] _copy_from_user+0x2e/0xd0 [ 608.092316][T10463] copy_msghdr_from_user+0x9f/0x4c0 [ 608.092339][T10463] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 608.092373][T10463] ? lock_acquire+0x1d1/0x380 [ 608.092394][T10463] ? get_pid_task+0x2a/0x250 [ 608.092420][T10463] ___sys_sendmsg+0x106/0x1e0 [ 608.092443][T10463] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.092463][T10463] ? get_pid_task+0x106/0x250 [ 608.092497][T10463] ? find_held_lock+0x2b/0x80 [ 608.092540][T10463] __sys_sendmsg+0x160/0x210 [ 608.092567][T10463] ? __pfx___sys_sendmsg+0x10/0x10 [ 608.092607][T10463] do_syscall_64+0x123/0x790 [ 608.092630][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.092648][T10463] RIP: 0033:0x7feec3b9e199 [ 608.092662][T10463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.092679][T10463] RSP: 002b:00007feec4afb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.092697][T10463] RAX: ffffffffffffffda RBX: 00007feec3e25fa0 RCX: 00007feec3b9e199 [ 608.092709][T10463] RDX: 0000000024000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 608.092720][T10463] RBP: 00007feec4afb090 R08: 0000000000000000 R09: 0000000000000000 [ 608.092730][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.092740][T10463] R13: 00007feec3e26038 R14: 00007feec3e25fa0 R15: 00007ffe4e867658 [ 608.092763][T10463] [ 608.735536][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1122'. [ 608.735596][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1122'. [ 609.255093][ T30] audit: type=1400 audit(1791378050.562:893): avc: denied { write } for pid=10453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.418002][T10492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1120'. [ 610.680642][ T30] audit: type=1400 audit(1791378051.992:894): avc: denied { write } for pid=10486 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.918072][ T30] audit: type=1400 audit(1791378052.222:895): avc: denied { create } for pid=10493 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 613.379262][T10507] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1128'. [ 613.605475][T10522] FAULT_INJECTION: forcing a failure. [ 613.605475][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 613.605507][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.5.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.605532][T10522] Tainted: [L]=SOFTLOCKUP [ 613.605539][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 613.605550][T10522] Call Trace: [ 613.605556][T10522] [ 613.605564][T10522] dump_stack_lvl+0x100/0x190 [ 613.605594][T10522] should_fail_ex.cold+0x5/0xa [ 613.605621][T10522] should_failslab+0xc2/0x120 [ 613.605647][T10522] __kmalloc_noprof+0xfc/0x840 [ 613.605668][T10522] ? rcu_is_watching+0x13/0xc0 [ 613.605695][T10522] ? tomoyo_realpath_from_path+0xb6/0x690 [ 613.605725][T10522] tomoyo_realpath_from_path+0xb6/0x690 [ 613.605761][T10522] tomoyo_path_number_perm+0x23c/0x580 [ 613.605782][T10522] ? tomoyo_path_number_perm+0x22e/0x580 [ 613.605805][T10522] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 613.605834][T10522] ? __lock_acquire+0x5c0/0x1f40 [ 613.605867][T10522] ? __fget_files+0x34/0x3d0 [ 613.605889][T10522] ? find_held_lock+0x2b/0x80 [ 613.605914][T10522] ? hook_file_ioctl_common+0x140/0x440 [ 613.605947][T10522] ? __fget_files+0x21f/0x3d0 [ 613.605973][T10522] security_file_ioctl+0xd3/0x230 [ 613.605995][T10522] __x64_sys_ioctl+0xb7/0x210 [ 613.606018][T10522] do_syscall_64+0x123/0x790 [ 613.606043][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.606061][T10522] RIP: 0033:0x7fbb6d39e199 [ 613.606076][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.606091][T10522] RSP: 002b:00007fbb6e287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.606108][T10522] RAX: ffffffffffffffda RBX: 00007fbb6d625fa0 RCX: 00007fbb6d39e199 [ 613.606120][T10522] RDX: 0000200000000040 RSI: 0000000080046f49 RDI: 0000000000000003 [ 613.606130][T10522] RBP: 00007fbb6e287090 R08: 0000000000000000 R09: 0000000000000000 [ 613.606140][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.606149][T10522] R13: 00007fbb6d626038 R14: 00007fbb6d625fa0 R15: 00007ffd2b39a5d8 [ 613.606174][T10522] [ 613.607059][T10522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 614.901405][ T30] audit: type=1400 audit(1791378056.212:896): avc: denied { getopt } for pid=10532 comm="syz.6.1135" lport=44517 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 615.028742][ T1217] Process accounting resumed [ 616.736112][T10547] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1141'. [ 616.737887][ T30] audit: type=1400 audit(1791378058.052:897): avc: denied { create } for pid=10546 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 616.738345][ T30] audit: type=1400 audit(1791378058.052:898): avc: denied { setopt } for pid=10546 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 616.739104][ T30] audit: type=1400 audit(1791378058.052:899): avc: denied { bind } for pid=10546 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 616.772811][ T30] audit: type=1400 audit(1791378058.082:900): avc: denied { read } for pid=10546 comm="syz.0.1141" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 616.772851][ T30] audit: type=1400 audit(1791378058.082:901): avc: denied { open } for pid=10546 comm="syz.0.1141" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 616.845414][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 617.773348][ T7476] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 618.125418][T10553] ceph: No mds server is up or the cluster is laggy [ 618.345567][ T7476] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 618.498152][ T30] audit: type=1400 audit(1791378059.812:902): avc: denied { create } for pid=10568 comm="syz.6.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 618.506496][ T30] audit: type=1400 audit(1791378059.822:903): avc: denied { getopt } for pid=10568 comm="syz.6.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 618.625334][ T7476] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 618.777147][ T7476] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 618.781309][ T7476] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.781400][ T7476] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 618.781433][ T7476] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.842707][ T7476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 618.842744][ T7476] usb 1-1: Product: syz [ 618.842770][ T7476] usb 1-1: Manufacturer: syz [ 618.850949][ T1309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.851285][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.851325][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.922797][ T7476] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 618.947789][ C0] ================================================================== [ 618.947805][ C0] BUG: KASAN: slab-out-of-bounds in find_endpoint+0x2a3/0x2c0 [ 618.947833][ C0] Read of size 1 at addr ffff8880569fc512 by task kworker/0:6/7476 [ 618.947849][ C0] [ 618.947860][ C0] CPU: 0 UID: 0 PID: 7476 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.947887][ C0] Tainted: [L]=SOFTLOCKUP [ 618.947893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 618.947904][ C0] Workqueue: usb_hub_wq hub_event [ 618.947923][ C0] Call Trace: [ 618.947929][ C0] [ 618.947937][ C0] dump_stack_lvl+0x100/0x190 [ 618.947958][ C0] print_report+0x13d/0x4b0 [ 618.947974][ C0] ? __virt_addr_valid+0x239/0x430 [ 618.947986][ C0] ? find_endpoint+0x2a3/0x2c0 [ 618.947996][ C0] kasan_report+0xdf/0x1c0 [ 618.948012][ C0] ? find_endpoint+0x2a3/0x2c0 [ 618.948023][ C0] find_endpoint+0x2a3/0x2c0 [ 618.948035][ C0] dummy_timer+0x500/0x3820 [ 618.948047][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 618.948066][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 618.948078][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 618.948094][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 618.948106][ C0] ? mark_held_locks+0x40/0x70 [ 618.948118][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 618.948129][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 618.948141][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 618.948160][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 618.948170][ C0] handle_softirqs+0x1e6/0x9d0 [ 618.948183][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 618.948194][ C0] ? _raw_spin_unlock+0x28/0x50 [ 618.948203][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 618.948214][ C0] __irq_exit_rcu+0x16a/0x210 [ 618.948225][ C0] irq_exit_rcu+0x9/0x30 [ 618.948236][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 618.948248][ C0] [ 618.948251][ C0] [ 618.948255][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.948267][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 618.948279][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 9e 11 f6 48 89 df e8 fe f4 11 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 d8 00 f6 65 48 83 3d b4 43 b7 08 00 74 16 5b [ 618.948289][ C0] RSP: 0018:ffffc900053ee930 EFLAGS: 00000246 [ 618.948298][ C0] RAX: 0000000000000006 RBX: ffff888029d60000 RCX: 0000000000000040 [ 618.948305][ C0] RDX: 0000000000000001 RSI: ffffffff8e38f6ca RDI: ffffffff8c623a80 [ 618.948312][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 618.948319][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 618.948325][ C0] R13: ffff88802ab67478 R14: 0000000000000000 R15: ffff88802ab67400 [ 618.948335][ C0] dummy_urb_enqueue+0x56c/0x880 [ 618.948350][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 618.948362][ C0] ? usb_kill_urb+0x19e/0x320 [ 618.948374][ C0] ? __pfx_usb_kill_urb+0x10/0x10 [ 618.948387][ C0] usb_submit_urb+0x827/0x19b0 [ 618.948408][ C0] garmin_init_session+0x95/0x200 [ 618.948425][ C0] garmin_port_probe+0x256/0x310 [ 618.948441][ C0] ? __pfx_garmin_port_probe+0x10/0x10 [ 618.948456][ C0] usb_serial_device_probe+0x106/0x3e0 [ 618.948470][ C0] ? __pfx_usb_serial_device_probe+0x10/0x10 [ 618.948483][ C0] really_probe+0x241/0xa60 [ 618.948498][ C0] __driver_probe_device+0x210/0x460 [ 618.948512][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 618.948523][ C0] driver_probe_device+0x4a/0x140 [ 618.948537][ C0] __device_attach_driver+0x1df/0x320 [ 618.948551][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 618.948565][ C0] bus_for_each_drv+0x159/0x1e0 [ 618.948577][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 618.948588][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 618.948598][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 618.948609][ C0] __device_attach+0x1e4/0x4d0 [ 618.948623][ C0] ? __pfx___device_attach+0x10/0x10 [ 618.948637][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 618.948652][ C0] device_initial_probe+0xaf/0xd0 [ 618.948666][ C0] bus_probe_device+0x64/0x160 [ 618.948679][ C0] device_add+0x121d/0x1970 [ 618.948695][ C0] ? __pfx_device_add+0x10/0x10 [ 618.948712][ C0] usb_serial_probe.cold+0x257e/0x29fc [ 618.948725][ C0] ? __pfx_garmin_read_int_callback+0x10/0x10 [ 618.948738][ C0] usb_probe_interface+0x386/0x9b0 [ 618.948750][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 618.948761][ C0] ? kernfs_put+0x3f/0x60 [ 618.948772][ C0] ? sysfs_create_link+0x68/0xc0 [ 618.948787][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 618.948799][ C0] really_probe+0x241/0xa60 [ 618.948813][ C0] __driver_probe_device+0x210/0x460 [ 618.948826][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 618.948837][ C0] driver_probe_device+0x4a/0x140 [ 618.948851][ C0] __device_attach_driver+0x1df/0x320 [ 618.948865][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 618.948879][ C0] bus_for_each_drv+0x159/0x1e0 [ 618.948891][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 618.948905][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 618.948916][ C0] __device_attach+0x1e4/0x4d0 [ 618.948929][ C0] ? __pfx___device_attach+0x10/0x10 [ 618.948944][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 618.948958][ C0] device_initial_probe+0xaf/0xd0 [ 618.948973][ C0] bus_probe_device+0x64/0x160 [ 618.948985][ C0] device_add+0x121d/0x1970 [ 618.949001][ C0] ? __pfx_device_add+0x10/0x10 [ 618.949019][ C0] usb_set_configuration+0xd97/0x1dc0 [ 618.949038][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 618.949052][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 618.949066][ C0] usb_probe_device+0xef/0x400 [ 618.949075][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 618.949085][ C0] really_probe+0x241/0xa60 [ 618.949099][ C0] __driver_probe_device+0x210/0x460 [ 618.949113][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 618.949124][ C0] driver_probe_device+0x4a/0x140 [ 618.949138][ C0] __device_attach_driver+0x1df/0x320 [ 618.949152][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 618.949166][ C0] bus_for_each_drv+0x159/0x1e0 [ 618.949177][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 618.949189][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 618.949202][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 618.949213][ C0] __device_attach+0x1e4/0x4d0 [ 618.949227][ C0] ? __pfx___device_attach+0x10/0x10 [ 618.949241][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 618.949255][ C0] device_initial_probe+0xaf/0xd0 [ 618.949270][ C0] bus_probe_device+0x64/0x160 [ 618.949282][ C0] device_add+0x121d/0x1970 [ 618.949298][ C0] ? __pfx_device_add+0x10/0x10 [ 618.949313][ C0] ? add_device_randomness+0xc9/0x110 [ 618.949325][ C0] ? usb_new_device.part.0+0xe50/0x1686 [ 618.949341][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 618.949357][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 618.949373][ C0] hub_event.cold+0x1e3/0xe90 [ 618.949392][ C0] ? __pfx_hub_event+0x10/0x10 [ 618.949405][ C0] ? __bfs+0x130/0x2a0 [ 618.949415][ C0] ? lock_acquire+0x1d1/0x380 [ 618.949426][ C0] ? process_one_work+0xa2c/0x1b10 [ 618.949443][ C0] ? process_one_work+0x906/0x1b10 [ 618.949458][ C0] ? process_one_work+0x906/0x1b10 [ 618.949474][ C0] process_one_work+0xac7/0x1b10 [ 618.949491][ C0] ? __pfx_process_one_work+0x10/0x10 [ 618.949507][ C0] ? lock_acquire+0x1d1/0x380 [ 618.949520][ C0] ? __pfx_hub_event+0x10/0x10 [ 618.949529][ C0] worker_thread+0x5ef/0xe50 [ 618.949540][ C0] ? __pfx_worker_thread+0x10/0x10 [ 618.949549][ C0] ? kthread+0x13a/0x450 [ 618.949564][ C0] ? __pfx_worker_thread+0x10/0x10 [ 618.949572][ C0] kthread+0x373/0x450 [ 618.949586][ C0] ? __pfx_kthread+0x10/0x10 [ 618.949601][ C0] ret_from_fork+0x730/0xd60 [ 618.949613][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 618.949624][ C0] ? rcu_is_watching+0x13/0xc0 [ 618.949639][ C0] ? __switch_to+0x800/0x10f0 [ 618.949653][ C0] ? __pfx_kthread+0x10/0x10 [ 618.949668][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.949682][ C0] [ 618.949686][ C0] [ 618.949688][ C0] Allocated by task 9789: [ 618.949694][ C0] kasan_save_stack+0x30/0x50 [ 618.949706][ C0] kasan_save_track+0x14/0x30 [ 618.949718][ C0] __kasan_kmalloc+0xaa/0xb0 [ 618.949730][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 618.949739][ C0] device_add+0xd3f/0x1970 [ 618.949756][ C0] netdev_register_kobject+0x1df/0x410 [ 618.949768][ C0] register_netdevice+0x15b6/0x25a0 [ 618.949783][ C0] __ip_tunnel_create+0x52b/0x670 [ 618.949798][ C0] ip_tunnel_init_net+0x230/0x780 [ 618.949807][ C0] vti_init_net+0x2e/0x140 [ 618.949817][ C0] ops_init+0x1e2/0x5f0 [ 618.949830][ C0] setup_net+0x118/0x3a0 [ 618.949844][ C0] copy_net_ns+0x345/0x7a0 [ 618.949853][ C0] create_new_namespaces+0x3ea/0xac0 [ 618.949864][ C0] unshare_nsproxy_namespaces+0xf2/0x220 [ 618.949875][ C0] ksys_unshare+0x4a2/0xa70 [ 618.949886][ C0] __x64_sys_unshare+0x31/0x40 [ 618.949900][ C0] do_syscall_64+0x123/0x790 [ 618.949910][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.949920][ C0] [ 618.949922][ C0] The buggy address belongs to the object at ffff8880569fc400 [ 618.949922][ C0] which belongs to the cache kmalloc-512 of size 512 [ 618.949930][ C0] The buggy address is located 2 bytes to the right of [ 618.949930][ C0] allocated 272-byte region [ffff8880569fc400, ffff8880569fc510) [ 618.949941][ C0] [ 618.949943][ C0] The buggy address belongs to the physical page: [ 618.949948][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x569fc [ 618.949958][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 618.949966][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 618.949975][ C0] page_type: f5(slab) [ 618.949984][ C0] raw: 00fff00000000040 ffff88801c031c80 dead000000000100 dead000000000122 [ 618.949993][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 618.950002][ C0] head: 00fff00000000040 ffff88801c031c80 dead000000000100 dead000000000122 [ 618.950011][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 618.950019][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 618.950028][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 618.950033][ C0] page dumped because: kasan: bad access detected [ 618.950038][ C0] page_owner tracks the page as allocated [ 618.950041][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5737, tgid 5737 (kworker/u8:8), ts 65580879019 [ 618.950058][ C0] post_alloc_hook+0xfd/0x120 [ 618.950067][ C0] get_page_from_freelist+0x110d/0x35d0 [ 618.950077][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 618.950088][ C0] new_slab+0xa9/0x6e0 [ 618.950096][ C0] refill_objects+0xe3/0x410 [ 618.950106][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 618.950115][ C0] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 618.950124][ C0] alloc_bprm+0x86/0x9e0 [ 618.950134][ C0] kernel_execve+0x8f/0x3a0 [ 618.950145][ C0] call_usermodehelper_exec_async+0x239/0x4b0 [ 618.950155][ C0] ret_from_fork+0x730/0xd60 [ 618.950165][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.950175][ C0] page last free pid 1 tgid 1 ts 17156958840 stack trace: [ 618.950182][ C0] free_pages_prepare+0x586/0xe00 [ 618.950190][ C0] __free_contig_range_common+0x14f/0x250 [ 618.950199][ C0] destroy_args+0xa8/0x7a0 [ 618.950212][ C0] debug_vm_pgtable+0x1d69/0x3490 [ 618.950224][ C0] do_one_initcall+0x11c/0x6f0 [ 618.950234][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 618.950247][ C0] kernel_init+0x21/0x1e0 [ 618.950258][ C0] ret_from_fork+0x730/0xd60 [ 618.950268][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.950278][ C0] [ 618.950281][ C0] Memory state around the buggy address: [ 618.950285][ C0] ffff8880569fc400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 618.950292][ C0] ffff8880569fc480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 618.950299][ C0] >ffff8880569fc500: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 618.950304][ C0] ^ [ 618.950309][ C0] ffff8880569fc580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 618.950316][ C0] ffff8880569fc600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 618.950321][ C0] ================================================================== [ 618.950326][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 620.150536][ C0] CPU: 0 UID: 0 PID: 7476 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.161443][ C0] Tainted: [L]=SOFTLOCKUP [ 620.165756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 620.175784][ C0] Workqueue: usb_hub_wq hub_event [ 620.180784][ C0] Call Trace: [ 620.184033][ C0] [ 620.186851][ C0] dump_stack_lvl+0x100/0x190 [ 620.191522][ C0] vpanic+0x553/0x970 [ 620.195482][ C0] ? __pfx_vpanic+0x10/0x10 [ 620.199964][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 620.204972][ C0] ? find_endpoint+0x2a3/0x2c0 [ 620.209707][ C0] panic+0xd1/0xe0 [ 620.213401][ C0] ? __pfx_panic+0x10/0x10 [ 620.217834][ C0] ? end_report.part.0+0x23/0x90 [ 620.222745][ C0] ? rcu_is_watching+0x13/0xc0 [ 620.227490][ C0] ? end_report.part.0+0x23/0x90 [ 620.232402][ C0] check_panic_on_warn.cold+0x19/0x34 [ 620.237750][ C0] end_report.part.0+0x3a/0x90 [ 620.242492][ C0] kasan_report.cold+0xe/0x18 [ 620.247151][ C0] ? find_endpoint+0x2a3/0x2c0 [ 620.251891][ C0] find_endpoint+0x2a3/0x2c0 [ 620.256452][ C0] dummy_timer+0x500/0x3820 [ 620.260936][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 620.267596][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.273375][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 620.278997][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 620.283919][ C0] ? mark_held_locks+0x40/0x70 [ 620.288656][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 620.294444][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 620.299356][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 620.304542][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 620.309624][ C0] handle_softirqs+0x1e6/0x9d0 [ 620.314361][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 620.319614][ C0] ? _raw_spin_unlock+0x28/0x50 [ 620.324434][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 620.330049][ C0] __irq_exit_rcu+0x16a/0x210 [ 620.334704][ C0] irq_exit_rcu+0x9/0x30 [ 620.338916][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 620.344520][ C0]