last executing test programs: 47.828308443s ago: executing program 3 (id=72): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00007ce000/0x2000)=nil, 0x2000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000e900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xa, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x6}, {0xfff1, 0x10}, {0xe, 0xa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004815) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r3, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000070005ff00000000000000002358aeac", @ANYRES32=0x0, @ANYBLOB="0100000034010500f3fc12800000010069703667726500000000028000001500d8fd07000a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0xdcb, &(0x7f0000000140)=0x1) setfsuid(0x0) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000215000/0x2000)=nil, &(0x7f0000245000/0x11000)=nil], &(0x7f00000000c0)=[0x2, 0x4, 0x5, 0x0, 0x4, 0x8000, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2) 44.680091947s ago: executing program 3 (id=88): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_getres(0xfffffffffffffff1, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fcntl$getflags(r0, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mprotect(&(0x7f0000241000/0x400000)=nil, 0x400000, 0x0) gettid() recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000180)={"07e2e0ecd2758574579b8faa46e1c5a71a08cee894aca99fe7e547bf225f", 0xffffff15, 0x0, 0x1, 0x9, 0x8, 0x4fd, 0xaa, 0x4, [0x3ff, 0x6, 0xfffffb0f, 0x1, 0x1, 0xa, 0x0, 0xfffffffd, 0x6, 0xfa79, 0x80000000, 0x5, 0x6, 0x3, 0x6, 0x3ff, 0x6a, 0xe, 0x9]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000080)={0x3, {"e249a38e7b0252a0eea064156561fd0a", "ea6f962fefc5a5a1d5cc0a6a16debd47", "47375848a00f6e08b5c9c718f83a0311"}, 0xfffffff9, 0x5}) fcntl$notify(r0, 0x402, 0x1c) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 44.161774232s ago: executing program 4 (id=93): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x1a, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40) 44.131626892s ago: executing program 2 (id=94): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000240)={0x20000, 0x4, 0x10000000000337, 0x200, 0x3, 0xfffffffffffffffd, 0x8f7e, 0x8, 0x1}) write(r2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xb, 0x1}, {0x1, 0xffff}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044010) getpid() sendmsg$nl_route(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130000002bbd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="0024000e00001000000000b8c054c9a26edb4e00000800000000000000f9fffb0400000000"], 0x4c}}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) 36.957402697s ago: executing program 4 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ad41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) unshare(0x2a020480) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000) pidfd_send_signal(r5, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="00000000b500"}) setns(r4, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000200)=@tcp, 0x2}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000340)={0x7, 0x7b, 0x2}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 35.668487947s ago: executing program 1 (id=97): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x3}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x401, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0x800ff, 0x0, 0x2, 0x6, 0x7519de1, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x100, 0x200b39c, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0x0, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x5, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x489, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x5fb, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0xcf, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x7, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 35.538265062s ago: executing program 3 (id=98): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00007ce000/0x2000)=nil, 0x2000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000e900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xa, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x6}, {0xfff1, 0x10}, {0xe, 0xa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004815) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r3, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000070005ff00000000000000002358aeac", @ANYRES32=0x0, @ANYBLOB="0100000034010500f3fc12800000010069703667726500000000028000001500d8fd07000a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0xdcb, &(0x7f0000000140)=0x1) setfsuid(0x0) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000215000/0x2000)=nil, &(0x7f0000245000/0x11000)=nil], &(0x7f00000000c0)=[0x2, 0x4, 0x5, 0x0, 0x4, 0x8000, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2) 35.107164409s ago: executing program 4 (id=99): mkdir(&(0x7f0000000000)='./file0\x00', 0xcd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 34.863964788s ago: executing program 2 (id=100): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000"], 0x0) socket$inet(0x2, 0x5, 0xac23) fsopen(0x0, 0x0) syz_emit_vhci(0x0, 0xe) 32.71472308s ago: executing program 2 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) close(0x3) 32.541369281s ago: executing program 4 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setns(0xc9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000200)=@tcp, 0x2}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000340)={0x7, 0x7b, 0x2}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) clock_getres(0xfffffffffffffffe, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0x2, 0x10}, 0x1) 32.526397328s ago: executing program 1 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", 0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r5, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000480)={{&(0x7f0000000200)=[{0x2, 0x2, 0x80000000, {0x8000000000000000, 0x10001}, 0xd, 0x40, 0x10}, {0x200, 0x0, 0xffffffffffffff7f, {0xbc, 0x5}, 0x3ff, 0x9, 0x1}], 0x2, 0x40, 0x1, 0x2}, {&(0x7f0000000300)=[{0xfffffffffffff60e, 0x8}, {0x1, 0xaa}], 0x2, 0x10, 0x15e, 0x3}, {&(0x7f0000000340)=[0x4, 0x5], 0x2, 0x8, 0x3ff, 0x6}, {&(0x7f00000003c0)=[{0x7, 0x9, 0x4, 0x40008, 0x7f}, {0x72a64f0e, 0x0, 0x4, 0x8, 0xfffffffe}], 0x2, 0x28, 0xf0e, 0x6}, {&(0x7f0000000440)=[0x100000001], 0x1, 0x8, 0x3d, 0x6}}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000940)={{r6}, "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"}) r7 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r7, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) (async) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') (async) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8}, 0x94) 32.269309203s ago: executing program 3 (id=104): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) link(0x0, 0x0) unlink(&(0x7f00000004c0)='./file1\x00') 32.255353193s ago: executing program 1 (id=105): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000012c"], 0xa8}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 32.086310797s ago: executing program 1 (id=106): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x1a, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40) 31.48514355s ago: executing program 2 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (fail_nth: 2) 31.466617523s ago: executing program 0 (id=108): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close_range(r1, r1, 0x2) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$RTC_PIE_ON(r1, 0x80004509) (async) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0xe, 0x0, '\x00', @zc_export}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x48, 0x14, 0x1, 0x70bd24, 0x25dfdb7b, {0x2, 0x84}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "b9c11fa7f748e060b629777f9ea1ca3641f6485c49b07882924872078a07636bc29165c59310160e42b1aa2ecf"}]}, 0x48}}, 0x0) 31.062655699s ago: executing program 4 (id=109): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)='\t\x00', 0x2) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") 31.059912151s ago: executing program 3 (id=110): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)='\t\x00', 0x2) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") (fail_nth: 1) 31.059703967s ago: executing program 2 (id=111): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000"], 0x0) socket$inet(0x2, 0x5, 0xac23) fsopen(0x0, 0x0) syz_emit_vhci(0x0, 0xe) 30.999339077s ago: executing program 0 (id=112): mkdir(&(0x7f0000000000)='./file0\x00', 0xcd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 30.846788029s ago: executing program 1 (id=113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x100000000, 0xf) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0xfff) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r8, &(0x7f0000000000)=""/219, 0xdb) tkill(r7, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='1', 0x1) 30.616188438s ago: executing program 4 (id=114): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00007ce000/0x2000)=nil, 0x2000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000e900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xa, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x6}, {0xfff1, 0x10}, {0xe, 0xa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004815) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r3, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000070005ff00000000000000002358aeac", @ANYRES32=0x0, @ANYBLOB="0100000034010500f3fc12800000010069703667726500000000028000001500d8fd07000a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0xdcb, &(0x7f0000000140)=0x1) setfsuid(0x0) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000215000/0x2000)=nil, &(0x7f0000245000/0x11000)=nil], &(0x7f00000000c0)=[0x2, 0x4, 0x5, 0x0, 0x4, 0x8000, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2) 30.217286841s ago: executing program 3 (id=115): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x3}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x401, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0x800ff, 0x0, 0x2, 0x6, 0x7519de1, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x100, 0x200b39c, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0x0, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x5, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x489, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x5fb, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0xcf, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x7, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 30.061871923s ago: executing program 0 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) (fail_nth: 2) 29.689691932s ago: executing program 0 (id=117): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xfffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000340)="88", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) ioctl$FIONCLEX(r4, 0x5450) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01010000000000000000050000000900010073797a300000000014000000030a0103000000000000000005000000e4000000000a0102000000000000000001000000ce0006003260aa73e2ec3c0ded535effdff40cb296552beeeb926920b71d57dac94b83b899c7cc5968b4ce3a97f00e74d9f2298bd83010dcd38cdff263d95966dec689d251a59a5ad636b9121520b04f54e5e03ef0f0517991bcf37d2d773704c0a61770fecc8285c5fdb94486f8683c713b8ecc3a074eca23cf98046b4bd7aec6559c0219e58f72947f6ff848950e0036cff7d8abe9c9cf95008720dae0c41a41acb69a634f2bf3f1e060d229674e9e675e3f1ad9fde8623549a212679051849f400000140000001100010000000000000000000000000a"], 0x140}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 28.96848998s ago: executing program 1 (id=118): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x7, @any, 0x2ad}, 0xe) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f00000005c0)='\x00\xef\x14\x84\x00\xce\xd3\xdby\xc5\x00j-/\xec6 c\x9d\x19P\x13&\xbc\x89\\\x7fN\x84\xe1\xc3\xf0p\xe0\xab\x8a\x81R(\xbe\xf9\x8a\\\xee\xf7\x94\xbc\xecS\x05\xf7\xcf:\xa5\xe6%\xa9\xd2O\xd1\xa2\xbfW\xafq\xe4\xff\x7f\x038\x84pG{\xf0\xba\xfe@\xc5\x89\x8f\x80Z?ON.\xcdf\xa8\x0f8x\xb3\xd9\xc2#\xa9*wCu\x17\xc5`\xf6\b\rF\r\xb4BE\xc23\xfde\aA\xfb\xa8\xeck\x16\x13 1 [ 57.452998][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.459784][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.460215][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.462228][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.462587][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.463679][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.463904][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.465248][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.465448][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.467156][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.475546][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.484544][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.485770][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.499864][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.501112][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.501409][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.501910][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.517242][ T4925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.525372][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.621049][ T4925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.621772][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.622588][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.627983][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.628368][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.541453][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.541537][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.541631][ T5606] bridge_slave_0: entered allmulticast mode [ 58.558554][ T5606] bridge_slave_0: entered promiscuous mode [ 58.581441][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.581518][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.581764][ T5606] bridge_slave_1: entered allmulticast mode [ 58.584441][ T5606] bridge_slave_1: entered promiscuous mode [ 58.633761][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.656562][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.753405][ T5606] team0: Port device team_slave_0 added [ 58.783020][ T5606] team0: Port device team_slave_1 added [ 58.812951][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.813071][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.813166][ T5605] bridge_slave_0: entered allmulticast mode [ 58.814492][ T5605] bridge_slave_0: entered promiscuous mode [ 58.855221][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.855235][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.855256][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.856910][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.857383][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.857488][ T5605] bridge_slave_1: entered allmulticast mode [ 58.858883][ T5605] bridge_slave_1: entered promiscuous mode [ 58.882580][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.882592][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.882610][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.966935][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.969632][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.974748][ T5606] hsr_slave_0: entered promiscuous mode [ 58.975496][ T5606] hsr_slave_1: entered promiscuous mode [ 59.061339][ T5605] team0: Port device team_slave_0 added [ 59.084190][ T5605] team0: Port device team_slave_1 added [ 59.150108][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.150203][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.150263][ T5612] bridge_slave_0: entered allmulticast mode [ 59.150971][ T5612] bridge_slave_0: entered promiscuous mode [ 59.174828][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.174896][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.174989][ T5604] bridge_slave_0: entered allmulticast mode [ 59.177763][ T5604] bridge_slave_0: entered promiscuous mode [ 59.179729][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.179793][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.180356][ T5604] bridge_slave_1: entered allmulticast mode [ 59.181507][ T5604] bridge_slave_1: entered promiscuous mode [ 59.183412][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.183422][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.183445][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.184859][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.184870][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.184915][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.307226][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.307298][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.307412][ T5612] bridge_slave_1: entered allmulticast mode [ 59.308599][ T5612] bridge_slave_1: entered promiscuous mode [ 59.329954][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.330189][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.330462][ T5609] bridge_slave_0: entered allmulticast mode [ 59.331657][ T5609] bridge_slave_0: entered promiscuous mode [ 59.354412][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.356749][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.385337][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.385800][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.386048][ T5609] bridge_slave_1: entered allmulticast mode [ 59.387205][ T5609] bridge_slave_1: entered promiscuous mode [ 59.428292][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.430475][ T5604] team0: Port device team_slave_0 added [ 59.452572][ T5605] hsr_slave_0: entered promiscuous mode [ 59.453005][ T5605] hsr_slave_1: entered promiscuous mode [ 59.453299][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 59.453341][ T5605] Cannot create hsr debugfs directory [ 59.465396][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.475939][ T5604] team0: Port device team_slave_1 added [ 59.493915][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.522709][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.524430][ T5612] team0: Port device team_slave_0 added [ 59.525621][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.525632][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.525651][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.532562][ T5608] Bluetooth: hci2: command tx timeout [ 59.568053][ T5612] team0: Port device team_slave_1 added [ 59.568616][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.568625][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.568643][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.615707][ T5609] team0: Port device team_slave_0 added [ 59.635323][ T5608] Bluetooth: hci3: command tx timeout [ 59.635427][ T5608] Bluetooth: hci1: command tx timeout [ 59.635648][ T5608] Bluetooth: hci0: command tx timeout [ 59.644439][ T5609] team0: Port device team_slave_1 added [ 59.674696][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.674706][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.674722][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.705257][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.705268][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.705286][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.715330][ T4925] Bluetooth: hci4: command tx timeout [ 59.745965][ T5604] hsr_slave_0: entered promiscuous mode [ 59.746637][ T5604] hsr_slave_1: entered promiscuous mode [ 59.747092][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 59.747107][ T5604] Cannot create hsr debugfs directory [ 59.757828][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.757838][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.757856][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.796078][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.796090][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.796108][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.828569][ T5612] hsr_slave_0: entered promiscuous mode [ 59.829172][ T5612] hsr_slave_1: entered promiscuous mode [ 59.829654][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 59.829667][ T5612] Cannot create hsr debugfs directory [ 59.919773][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.926146][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.926728][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.930859][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.959832][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.961748][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.962085][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.973528][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.989556][ T5609] hsr_slave_0: entered promiscuous mode [ 59.990229][ T5609] hsr_slave_1: entered promiscuous mode [ 59.990668][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 59.990681][ T5609] Cannot create hsr debugfs directory [ 60.154222][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.156507][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.157055][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.160246][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.171824][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.178577][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.180768][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.188055][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.273430][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.275733][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.276192][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.279007][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.284402][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.291294][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.291811][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.298137][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.394419][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.396539][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.397322][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.399108][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.399819][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.401808][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.411700][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.419152][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.438645][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.489100][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.513076][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.518193][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.520273][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.520914][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.524485][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.539008][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.545088][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.545600][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.551688][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.570109][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.570266][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.609088][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.622025][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.622067][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.641450][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.641539][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.667252][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.668533][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.668611][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.739701][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.751108][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.765519][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.765565][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.795470][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.795564][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.811111][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.835838][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 60.835852][ T30] audit: type=1400 audit(1790489557.818:154): avc: denied { sys_module } for pid=5606 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.860342][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.860414][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.865832][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.865902][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.962011][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.025716][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.050843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.050925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.065720][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.065790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.513082][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.612273][ T4925] Bluetooth: hci2: command tx timeout [ 61.637021][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.656524][ T5606] veth0_vlan: entered promiscuous mode [ 61.678612][ T5606] veth1_vlan: entered promiscuous mode [ 61.692295][ T4925] Bluetooth: hci0: command tx timeout [ 61.692321][ T4925] Bluetooth: hci1: command tx timeout [ 61.692339][ T4925] Bluetooth: hci3: command tx timeout [ 61.772535][ T5608] Bluetooth: hci4: command tx timeout [ 61.798913][ T5605] veth0_vlan: entered promiscuous mode [ 61.816201][ T5606] veth0_macvtap: entered promiscuous mode [ 61.828201][ T5606] veth1_macvtap: entered promiscuous mode [ 61.830920][ T5605] veth1_vlan: entered promiscuous mode [ 61.879040][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.881410][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.908716][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.944798][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.994794][ T5605] veth0_macvtap: entered promiscuous mode [ 62.027611][ T5605] veth1_macvtap: entered promiscuous mode [ 62.059173][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.066218][ T3274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.068025][ T3348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.068055][ T3348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.068081][ T3348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.140872][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.149922][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.149939][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.169910][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.202738][ T3274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.202775][ T3274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.202804][ T3274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.219596][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.219611][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.258932][ T5604] veth0_vlan: entered promiscuous mode [ 62.283080][ T3365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.288397][ T30] audit: type=1400 audit(1790489559.268:155): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.FPu8rx/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.291654][ T30] audit: type=1400 audit(1790489559.268:156): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.294758][ T30] audit: type=1400 audit(1790489559.278:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.FPu8rx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.296131][ T30] audit: type=1400 audit(1790489559.278:158): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.298753][ T30] audit: type=1400 audit(1790489559.278:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.FPu8rx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.299997][ T30] audit: type=1400 audit(1790489559.278:160): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.FPu8rx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.306153][ T30] audit: type=1400 audit(1790489559.288:161): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.326608][ T30] audit: type=1400 audit(1790489559.308:162): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.339535][ T5604] veth1_vlan: entered promiscuous mode [ 62.348190][ T30] audit: type=1400 audit(1790489559.328:163): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.490232][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.490260][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.531708][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.537916][ T5609] veth0_vlan: entered promiscuous mode [ 62.573912][ T5612] veth0_vlan: entered promiscuous mode [ 62.576331][ T5609] veth1_vlan: entered promiscuous mode [ 62.589575][ T5604] veth0_macvtap: entered promiscuous mode [ 62.600363][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.600377][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.634984][ T5612] veth1_vlan: entered promiscuous mode [ 62.639699][ T5604] veth1_macvtap: entered promiscuous mode [ 62.682828][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.688800][ T5794] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.694847][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.756582][ T3365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.798012][ T5609] veth0_macvtap: entered promiscuous mode [ 62.842649][ T5796] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 62.856335][ T5609] veth1_macvtap: entered promiscuous mode [ 62.858325][ T5612] veth0_macvtap: entered promiscuous mode [ 62.871655][ T5612] veth1_macvtap: entered promiscuous mode [ 62.877777][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.877803][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.916252][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.949781][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.955267][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.968489][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.968506][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.992480][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.082607][ T5616] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.173037][ T5804] FAULT_INJECTION: forcing a failure. [ 63.173037][ T5804] name failslab, interval 1, probability 0, space 0, times 1 [ 63.173067][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 63.173089][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.173099][ T5804] Call Trace: [ 63.173106][ T5804] [ 63.173114][ T5804] dump_stack_lvl+0x100/0x190 [ 63.173146][ T5804] should_fail_ex.cold+0x5/0xa [ 63.173171][ T5804] should_failslab+0xc2/0x120 [ 63.173196][ T5804] __kmalloc_cache_node_noprof+0x94/0x720 [ 63.173219][ T5804] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 63.173241][ T5804] ? bdi_alloc+0x44/0x140 [ 63.173266][ T5804] bdi_alloc+0x44/0x140 [ 63.173285][ T5804] __alloc_disk_node+0xac/0x6b0 [ 63.173318][ T5804] __blk_alloc_disk+0xd2/0x170 [ 63.173346][ T5804] ? __pfx___blk_alloc_disk+0x10/0x10 [ 63.173374][ T5804] ? __pfx___debug_object_init+0x10/0x10 [ 63.173410][ T5804] ? lockdep_init_map_type+0x5c/0x250 [ 63.173431][ T5804] ? lockdep_init_map_type+0x5c/0x250 [ 63.173455][ T5804] dm_create+0x5e8/0x1530 [ 63.173486][ T5804] dev_create+0x121/0x2a0 [ 63.173506][ T5804] ? __pfx_dev_create+0x10/0x10 [ 63.173530][ T5804] ctl_ioctl+0x4d2/0xcc0 [ 63.173549][ T5804] ? __pfx_dev_create+0x10/0x10 [ 63.173569][ T5804] ? __pfx_ctl_ioctl+0x10/0x10 [ 63.173613][ T5804] ? selinux_file_ioctl+0x13b/0x290 [ 63.173635][ T5804] ? selinux_file_ioctl+0xb6/0x290 [ 63.173660][ T5804] dm_ctl_ioctl+0x22/0x30 [ 63.173677][ T5804] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 63.173695][ T5804] __x64_sys_ioctl+0x18e/0x210 [ 63.173718][ T5804] do_syscall_64+0x123/0x790 [ 63.173740][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.173760][ T5804] RIP: 0033:0x7f100e39e159 [ 63.173776][ T5804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.173794][ T5804] RSP: 002b:00007f100f2a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.173814][ T5804] RAX: ffffffffffffffda RBX: 00007f100e625fa0 RCX: 00007f100e39e159 [ 63.173827][ T5804] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 63.173838][ T5804] RBP: 00007f100e43506b R08: 0000000000000000 R09: 0000000000000000 [ 63.173849][ T5804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.173860][ T5804] R13: 00007f100e626038 R14: 00007f100e625fa0 R15: 00007ffd03b80fd8 [ 63.173885][ T5804] [ 63.209242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.209257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.213187][ T3274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213299][ T3274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213526][ T3274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213756][ T3274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213854][ T3274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.233573][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 63.244941][ T5616] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 63.261844][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.261879][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.283856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.283871][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.370149][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.370165][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.378321][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.379343][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.461832][ T5616] usb 3-1: config 0 descriptor?? [ 63.543744][ T3274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.544454][ T3274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.544867][ T3274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.546393][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.546407][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.702603][ T5608] Bluetooth: hci2: command tx timeout [ 63.722910][ T3365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.772329][ T5608] Bluetooth: hci3: command tx timeout [ 63.772357][ T5608] Bluetooth: hci1: command tx timeout [ 63.772375][ T5608] Bluetooth: hci0: command tx timeout [ 63.852558][ T4925] Bluetooth: hci4: command tx timeout [ 63.914725][ T5809] infiniband syz1: set active [ 63.914744][ T5809] infiniband syz1: added syz_tun [ 63.954076][ T5809] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 63.954130][ T5809] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 63.954166][ T5809] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 64.062030][ T5809] RDS/IB: syz1: added [ 64.062540][ T5809] smc: adding ib device syz1 with port count 1 [ 64.062629][ T5809] smc: ib device syz1 port 1 has no pnetid [ 64.082509][ T5341] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 64.138999][ T5818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.328263][ T5341] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 64.329694][ T5341] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1023 [ 64.333136][ T5341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.333155][ T5341] usb 2-1: Product: syz [ 64.333168][ T5341] usb 2-1: Manufacturer: syz [ 64.333198][ T5341] usb 2-1: SerialNumber: syz [ 64.879223][ T5812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 64.930546][ T5812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.969119][ T5341] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 65.152959][ T5341] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 65.206167][ T5341] usb 2-1: USB disconnect, device number 2 [ 65.282099][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.784426][ T4925] Bluetooth: hci2: command tx timeout [ 65.785998][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.786069][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.852444][ T5608] Bluetooth: hci1: command tx timeout [ 65.852472][ T5608] Bluetooth: hci3: command tx timeout [ 65.852547][ T4925] Bluetooth: hci0: command tx timeout [ 65.942344][ T4925] Bluetooth: hci4: command tx timeout [ 66.017068][ T5616] usbhid 3-1:0.0: can't add hid device: -71 [ 66.017635][ T5616] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 66.361149][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 66.361162][ T30] audit: type=1400 audit(1790489563.338:226): avc: denied { unlink } for pid=5612 comm="syz-executor" name="file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.369593][ T30] audit: type=1400 audit(1790489563.348:227): avc: denied { write } for pid=5836 comm="syz.3.13" name="rootcell" dev="proc" ino=4026533534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.421995][ T30] audit: type=1400 audit(1790489563.398:228): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.455271][ T30] audit: type=1400 audit(1790489563.438:229): avc: denied { create } for pid=5836 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.460813][ T5616] usb 3-1: USB disconnect, device number 2 [ 66.505456][ T30] audit: type=1400 audit(1790489563.488:230): avc: denied { bind } for pid=5836 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.710011][ T30] audit: type=1400 audit(1790489563.678:231): avc: denied { allowed } for pid=5844 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.710171][ T30] audit: type=1400 audit(1790489563.678:232): avc: denied { map } for pid=5844 comm="syz.2.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.710289][ T30] audit: type=1400 audit(1790489563.678:233): avc: denied { read write } for pid=5844 comm="syz.2.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.754157][ T30] audit: type=1400 audit(1790489563.708:234): avc: denied { connect } for pid=5844 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.755794][ T30] audit: type=1400 audit(1790489563.738:235): avc: denied { name_connect } for pid=5844 comm="syz.2.14" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 67.705774][ T5854] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 67.810417][ T5857] netlink: 388 bytes leftover after parsing attributes in process `syz.3.17'. [ 67.863603][ T5843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.897580][ T5843] block device autoloading is deprecated and will be removed. [ 68.622677][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.692716][ T5843] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 68.817469][ T25] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 68.819738][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.819779][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.850759][ T25] usb 4-1: config 0 descriptor?? [ 69.402491][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.822160][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 69.822641][ T25] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 69.823652][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 69.823678][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 130, setting to 64 [ 69.825619][ T25] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 69.825640][ T25] usb 5-1: Product: syz [ 69.825654][ T25] usb 5-1: Manufacturer: syz [ 69.825667][ T25] usb 5-1: SerialNumber: syz [ 69.953507][ T25] usb 5-1: config 0 descriptor?? [ 69.976269][ T25] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 69.985079][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 70.148037][ T5863] rdma_rxe: rxe_newlink: failed to add syz_tun [ 70.778996][ T3274] usb 5-1: Failed to submit usb control message: -71 [ 70.779028][ T3274] usb 5-1: unable to send the bmi data to the device: -71 [ 70.779043][ T3274] usb 5-1: unable to get target info from device [ 70.779055][ T3274] usb 5-1: could not get target info (-71) [ 70.779185][ T3274] usb 5-1: could not probe fw (-71) [ 70.818378][ T5341] usb 5-1: USB disconnect, device number 2 [ 70.875673][ T10] usb 4-1: USB disconnect, device number 2 [ 71.547764][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.569281][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 71.569297][ T30] audit: type=1400 audit(1790489568.548:255): avc: denied { mount } for pid=5886 comm="syz.3.25" name="/" dev="autofs" ino=9390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.689318][ T30] audit: type=1400 audit(1790489568.638:256): avc: denied { setopt } for pid=5884 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.697594][ T30] audit: type=1400 audit(1790489568.638:257): avc: denied { bind } for pid=5884 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.829387][ T30] audit: type=1400 audit(1790489568.638:258): avc: denied { name_bind } for pid=5884 comm="syz.2.26" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 71.829530][ T30] audit: type=1400 audit(1790489568.638:259): avc: denied { node_bind } for pid=5884 comm="syz.2.26" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 71.829620][ T30] audit: type=1400 audit(1790489568.648:260): avc: denied { write } for pid=5884 comm="syz.2.26" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.829720][ T30] audit: type=1400 audit(1790489568.658:261): avc: denied { shutdown } for pid=5884 comm="syz.2.26" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.164536][ T30] audit: type=1400 audit(1790489569.138:262): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.177995][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.211852][ T25] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.211882][ T25] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.211903][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.242075][ T25] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.242100][ T25] usb 1-1: Product: syz [ 72.242308][ T25] usb 1-1: Manufacturer: syz [ 72.242323][ T25] usb 1-1: SerialNumber: syz [ 72.268774][ T25] usb 1-1: config 0 descriptor?? [ 72.279275][ T25] usb 1-1: selecting invalid altsetting 0 [ 72.286830][ T30] audit: type=1400 audit(1790489569.268:263): avc: denied { create } for pid=5896 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.306083][ T30] audit: type=1400 audit(1790489569.288:264): avc: denied { bind } for pid=5896 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.861652][ T5898] Illegal XDP return value 4294967294 on prog (id 3) dev N/A, expect packet loss! [ 72.868575][ T5898] netlink: 260 bytes leftover after parsing attributes in process `syz.3.29'. [ 73.426427][ T191] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.573497][ T191] usb 2-1: Using ep0 maxpacket: 32 [ 73.577473][ T191] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 73.581741][ T191] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.581800][ T191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.581832][ T191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.581852][ T191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.581886][ T191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.586770][ T5901] FAULT_INJECTION: forcing a failure. [ 73.586770][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 73.586792][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT(full) [ 73.586809][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.586818][ T5901] Call Trace: [ 73.586828][ T5901] [ 73.586835][ T5901] dump_stack_lvl+0x100/0x190 [ 73.586861][ T5901] should_fail_ex.cold+0x5/0xa [ 73.586884][ T5901] should_failslab+0xc2/0x120 [ 73.586905][ T5901] __kmalloc_cache_noprof+0x91/0x6d0 [ 73.586931][ T5901] ? sel_netport_sid+0x589/0xba0 [ 73.586952][ T5901] sel_netport_sid+0x589/0xba0 [ 73.586977][ T5901] selinux_socket_connect_helper+0x354/0x520 [ 73.586997][ T5901] ? __pfx_selinux_socket_connect_helper+0x10/0x10 [ 73.587019][ T5901] ? tomoyo_socket_connect_permission+0x1b7/0x360 [ 73.587046][ T5901] ? __might_fault+0xc5/0x140 [ 73.587072][ T5901] selinux_socket_connect+0x45/0x80 [ 73.587089][ T5901] security_socket_connect+0xfb/0x230 [ 73.587106][ T5901] __sys_connect_file+0xdc/0x1a0 [ 73.587128][ T5901] __sys_connect+0x141/0x170 [ 73.587146][ T5901] ? __pfx___sys_connect+0x10/0x10 [ 73.587162][ T5901] ? __fget_files+0x21f/0x3d0 [ 73.587190][ T5901] ? __pfx_ksys_write+0x10/0x10 [ 73.587211][ T5901] __x64_sys_connect+0x72/0xb0 [ 73.587229][ T5901] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.587254][ T5901] do_syscall_64+0x123/0x790 [ 73.587271][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.587287][ T5901] RIP: 0033:0x7f324739e159 [ 73.587300][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.587314][ T5901] RSP: 002b:00007f32455f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 73.587330][ T5901] RAX: ffffffffffffffda RBX: 00007f3247625fa0 RCX: 00007f324739e159 [ 73.587338][ T5901] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 73.587348][ T5901] RBP: 00007f32455f6090 R08: 0000000000000000 R09: 0000000000000000 [ 73.587357][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.587367][ T5901] R13: 00007f3247626038 R14: 00007f3247625fa0 R15: 00007ffc64e18c38 [ 73.587388][ T5901] [ 73.964249][ T25] usb 1-1: USB disconnect, device number 2 [ 74.250255][ T191] usb 2-1: config 0 descriptor?? [ 76.773939][ T44] cfg80211: failed to load regulatory.db [ 76.883251][ T5920] FAULT_INJECTION: forcing a failure. [ 76.883251][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 76.883281][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 76.883307][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.883317][ T5920] Call Trace: [ 76.883323][ T5920] [ 76.883330][ T5920] dump_stack_lvl+0x100/0x190 [ 76.883361][ T5920] should_fail_ex.cold+0x5/0xa [ 76.883386][ T5920] should_failslab+0xc2/0x120 [ 76.883410][ T5920] __kmalloc_noprof+0xfc/0x840 [ 76.883431][ T5920] ? io_waitid_prep+0x1ac/0x4b0 [ 76.883462][ T5920] io_waitid_prep+0x1ac/0x4b0 [ 76.883489][ T5920] io_submit_sqes+0xa03/0x2480 [ 76.883526][ T5920] __do_sys_io_uring_enter+0xa88/0x1b10 [ 76.883551][ T5920] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.883571][ T5920] ? __fget_files+0x21f/0x3d0 [ 76.883594][ T5920] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 76.883620][ T5920] ? fput+0x7c/0x100 [ 76.883644][ T5920] ? ksys_write+0x1ac/0x250 [ 76.883662][ T5920] ? __pfx_ksys_write+0x10/0x10 [ 76.883688][ T5920] do_syscall_64+0x123/0x790 [ 76.883709][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.883728][ T5920] RIP: 0033:0x7f100e39e159 [ 76.883743][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.883760][ T5920] RSP: 002b:00007f100f2a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 76.883779][ T5920] RAX: ffffffffffffffda RBX: 00007f100e625fa0 RCX: 00007f100e39e159 [ 76.883791][ T5920] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 76.883800][ T5920] RBP: 00007f100f2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 76.883811][ T5920] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 76.883822][ T5920] R13: 00007f100e626038 R14: 00007f100e625fa0 R15: 00007ffd03b80fd8 [ 76.883847][ T5920] [ 77.305478][ T191] usbhid 2-1:0.0: can't add hid device: -71 [ 77.305561][ T191] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 77.328816][ T191] usb 2-1: USB disconnect, device number 3 [ 77.559649][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 77.559666][ T30] audit: type=1400 audit(1790489574.538:274): avc: denied { create } for pid=5922 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.866655][ T5926] No such timeout policy "syz1" [ 77.912570][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.36'. [ 78.232187][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.232408][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 78.369124][ T25] usb 4-1: device descriptor read/64, error -32 [ 78.424547][ T30] audit: type=1400 audit(1790489575.408:275): avc: denied { read } for pid=5930 comm="syz.2.38" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.425638][ T30] audit: type=1400 audit(1790489575.408:276): avc: denied { open } for pid=5930 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.426723][ T30] audit: type=1400 audit(1790489575.408:277): avc: denied { ioctl } for pid=5930 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.541140][ T30] audit: type=1400 audit(1790489575.518:278): avc: denied { write } for pid=5930 comm="syz.2.38" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.633413][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.633627][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 80.085836][ T5939] FAULT_INJECTION: forcing a failure. [ 80.085836][ T5939] name failslab, interval 1, probability 0, space 0, times 0 [ 80.085864][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.4.40 Not tainted syzkaller #0 PREEMPT(full) [ 80.085884][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.085894][ T5939] Call Trace: [ 80.085900][ T5939] [ 80.085908][ T5939] dump_stack_lvl+0x100/0x190 [ 80.085939][ T5939] should_fail_ex.cold+0x5/0xa [ 80.085966][ T5939] should_failslab+0xc2/0x120 [ 80.085991][ T5939] __kmalloc_noprof+0xfc/0x840 [ 80.086011][ T5939] ? is_bpf_text_address+0x25/0x1a0 [ 80.086036][ T5939] ? iovec_from_user+0x8d/0x140 [ 80.086062][ T5939] iovec_from_user+0x8d/0x140 [ 80.086085][ T5939] __import_iovec+0x81/0x640 [ 80.086104][ T5939] ? __might_fault+0x10/0x140 [ 80.086131][ T5939] ? __might_fault+0xc5/0x140 [ 80.086161][ T5939] import_iovec+0x101/0x130 [ 80.086185][ T5939] copy_msghdr_from_user+0x2c6/0x4c0 [ 80.086204][ T5939] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.086226][ T5939] ? _kstrtoull+0x144/0x200 [ 80.086250][ T5939] ? __pfx__kstrtoull+0x10/0x10 [ 80.086285][ T5939] ___sys_sendmsg+0x106/0x1e0 [ 80.086306][ T5939] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.086334][ T5939] ? __fget_files+0x34/0x3d0 [ 80.086375][ T5939] __sys_sendmmsg+0x20c/0x440 [ 80.086402][ T5939] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.086425][ T5939] ? ksys_write+0x190/0x250 [ 80.086461][ T5939] ? fput+0x7c/0x100 [ 80.086484][ T5939] ? ksys_write+0x1ac/0x250 [ 80.086502][ T5939] ? __pfx_ksys_write+0x10/0x10 [ 80.086525][ T5939] __x64_sys_sendmmsg+0x9c/0x100 [ 80.086548][ T5939] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.086577][ T5939] do_syscall_64+0x123/0x790 [ 80.086596][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.086615][ T5939] RIP: 0033:0x7f324739e159 [ 80.086630][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.086646][ T5939] RSP: 002b:00007f32455d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.086664][ T5939] RAX: ffffffffffffffda RBX: 00007f3247626090 RCX: 00007f324739e159 [ 80.086676][ T5939] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000009 [ 80.086688][ T5939] RBP: 00007f32455d5090 R08: 0000000000000000 R09: 0000000000000000 [ 80.086699][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.086709][ T5939] R13: 00007f3247626128 R14: 00007f3247626090 R15: 00007ffc64e18c38 [ 80.086734][ T5939] [ 80.086939][ T25] usb 4-1: device descriptor read/64, error -32 [ 80.222415][ T25] usb usb4-port1: attempt power cycle [ 80.572347][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.595533][ T25] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 80.597933][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.597975][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 80.598000][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 80.598033][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.714203][ T30] audit: type=1400 audit(1790489577.698:279): avc: denied { remount } for pid=5940 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.742124][ C0] sched: DL replenish lagged too much [ 80.781459][ T25] usb 4-1: can't set config #1, error -71 [ 80.798398][ T30] audit: type=1400 audit(1790489577.778:280): avc: denied { write } for pid=5940 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.798981][ T25] usb 4-1: USB disconnect, device number 5 [ 80.963603][ T30] audit: type=1400 audit(1790489577.948:281): avc: denied { link } for pid=5947 comm="syz.2.43" name="#5" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.967315][ T30] audit: type=1400 audit(1790489577.948:282): avc: denied { rename } for pid=5947 comm="syz.2.43" name="#6" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.056216][ T5952] rdma_rxe: rxe_newlink: failed to add syz_tun [ 81.462884][ T30] audit: type=1400 audit(1790489578.448:283): avc: denied { mount } for pid=5960 comm="syz.1.47" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 81.624635][ T5967] syz.4.48 uses obsolete (PF_INET,SOCK_PACKET) [ 81.632209][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.751798][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 81.804827][ T25] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 81.805779][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.805817][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.805839][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.805875][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.921806][ T25] cxacru 3-1:1.0: cxacru_bind: interface has incorrect endpoints [ 81.921911][ T25] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 81.940969][ T5971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=5971 comm=syz.4.48 [ 82.130306][ T5958] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.257289][ T5983] Zero length message leads to an empty skb [ 82.375976][ T5721] usb 3-1: USB disconnect, device number 3 [ 82.832203][ T5721] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.011228][ T5721] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 83.012092][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.014141][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.014163][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 83.014199][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.098578][ T5721] cxacru 4-1:1.0: cxacru_bind: interface has incorrect endpoints [ 83.100291][ T5721] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 83.210708][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 83.210725][ T30] audit: type=1400 audit(1790489580.188:298): avc: denied { create } for pid=5993 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.595188][ T6000] ======================================================= [ 83.595188][ T6000] WARNING: The mand mount option has been deprecated and [ 83.595188][ T6000] and is ignored by this kernel. Remove the mand [ 83.595188][ T6000] option from the mount to silence this warning. [ 83.595188][ T6000] ======================================================= [ 84.197782][ T30] audit: type=1400 audit(1790489581.178:299): avc: denied { mount } for pid=6006 comm="syz.1.58" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.235991][ T30] audit: type=1800 audit(1790489581.218:300): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.58" name="sysfs" dev="sda1" ino=2047 res=0 errno=0 [ 84.329500][ T30] audit: type=1400 audit(1790489581.308:301): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.384146][ T30] audit: type=1400 audit(1790489581.368:302): avc: denied { ioctl } for pid=6008 comm="syz.2.59" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.469036][ T30] audit: type=1400 audit(1790489581.448:303): avc: denied { map_create } for pid=6010 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.469079][ T30] audit: type=1400 audit(1790489581.448:304): avc: denied { map_read map_write } for pid=6010 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.491435][ T30] audit: type=1400 audit(1790489581.448:305): avc: denied { prog_load } for pid=6010 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.512221][ T5721] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.548340][ T30] audit: type=1400 audit(1790489581.528:306): avc: denied { prog_run } for pid=6010 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.574950][ T6011] rdma_rxe: rxe_newlink: failed to add syz_tun [ 84.692159][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 84.693136][ T5721] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.694050][ T5721] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 84.694094][ T5721] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.694115][ T5721] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.694137][ T5721] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.694158][ T5721] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.694193][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.775500][ T30] audit: type=1400 audit(1790489581.758:307): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.908804][ T5721] usb 3-1: usb_control_msg returned -32 [ 84.908843][ T5721] usbtmc 3-1:16.0: can't read capabilities [ 85.226981][ T6009] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 85.244952][ T5728] usb 3-1: USB disconnect, device number 4 [ 85.246115][ T6018] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 85.946077][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.092288][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 86.093465][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.094322][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 86.094362][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.094383][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.094405][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.094426][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.094459][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.305845][ T44] usb 2-1: usb_control_msg returned -32 [ 86.305885][ T44] usbtmc 2-1:16.0: can't read capabilities [ 86.618980][ T25] usb 2-1: USB disconnect, device number 4 [ 86.638375][ T6024] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 86.688733][ T6046] FAULT_INJECTION: forcing a failure. [ 86.688733][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.688759][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 86.688779][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.688790][ T6046] Call Trace: [ 86.688796][ T6046] [ 86.688803][ T6046] dump_stack_lvl+0x100/0x190 [ 86.688834][ T6046] should_fail_ex.cold+0x5/0xa [ 86.688860][ T6046] _copy_to_user+0x32/0xd0 [ 86.688883][ T6046] simple_read_from_buffer+0xcb/0x170 [ 86.688909][ T6046] proc_fail_nth_read+0x1af/0x230 [ 86.688934][ T6046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.688959][ T6046] ? rw_verify_area+0xce/0x6d0 [ 86.688986][ T6046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.689009][ T6046] vfs_read+0x1e4/0xb40 [ 86.689028][ T6046] ? lock_acquire+0x1d1/0x380 [ 86.689047][ T6046] ? __fget_files+0x34/0x3d0 [ 86.689069][ T6046] ? __pfx_vfs_read+0x10/0x10 [ 86.689085][ T6046] ? find_held_lock+0x2b/0x80 [ 86.689111][ T6046] ? __fget_files+0x215/0x3d0 [ 86.689137][ T6046] ? __fget_files+0x21f/0x3d0 [ 86.689167][ T6046] ksys_read+0x12a/0x250 [ 86.689185][ T6046] ? __pfx_ksys_read+0x10/0x10 [ 86.689211][ T6046] do_syscall_64+0x123/0x790 [ 86.689238][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.689257][ T6046] RIP: 0033:0x7f388bd5e98e [ 86.689272][ T6046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.689289][ T6046] RSP: 002b:00007f388cd14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.689307][ T6046] RAX: ffffffffffffffda RBX: 00007f388cd156c0 RCX: 00007f388bd5e98e [ 86.689319][ T6046] RDX: 000000000000000f RSI: 00007f388cd150a0 RDI: 0000000000000007 [ 86.689329][ T6046] RBP: 00007f388cd15090 R08: 0000000000000000 R09: 0000000000000000 [ 86.689340][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.689351][ T6046] R13: 00007f388c026128 R14: 00007f388c026090 R15: 00007ffe7e32b888 [ 86.689375][ T6046] [ 87.035742][ T6045] netlink: 392 bytes leftover after parsing attributes in process `syz.2.71'. [ 87.071706][ T44] usb 4-1: USB disconnect, device number 6 [ 87.119882][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 87.365995][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 87.387201][ T6055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6055 comm=syz.3.72 [ 87.404789][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.693698][ T25] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 87.696544][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.696671][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.769640][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.769696][ T25] usb 3-1: Product: syz [ 87.769736][ T25] usb 3-1: Manufacturer: syz [ 87.769777][ T25] usb 3-1: SerialNumber: syz [ 88.299573][ T25] usb 3-1: Cannot retrieve CPort count: -71 [ 88.299615][ T25] usb 3-1: Cannot retrieve CPort count: -71 [ 88.299636][ T25] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 88.330013][ T25] usb 3-1: USB disconnect, device number 5 [ 88.393168][ T6074] FAULT_INJECTION: forcing a failure. [ 88.393168][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.393194][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.4.76 Not tainted syzkaller #0 PREEMPT(full) [ 88.393215][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.393225][ T6074] Call Trace: [ 88.393232][ T6074] [ 88.393239][ T6074] dump_stack_lvl+0x100/0x190 [ 88.393270][ T6074] should_fail_ex.cold+0x5/0xa [ 88.393297][ T6074] _copy_from_user+0x2e/0xd0 [ 88.393320][ T6074] kstrtouint_from_user+0xd6/0x1d0 [ 88.393344][ T6074] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 88.393372][ T6074] ? lock_acquire+0x1d1/0x380 [ 88.393397][ T6074] proc_fail_nth_write+0x83/0x220 [ 88.393420][ T6074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.393449][ T6074] vfs_write+0x2aa/0x1050 [ 88.393469][ T6074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.393491][ T6074] ? lock_acquire+0x1d1/0x380 [ 88.393508][ T6074] ? __fget_files+0x34/0x3d0 [ 88.393529][ T6074] ? __pfx_vfs_write+0x10/0x10 [ 88.393547][ T6074] ? find_held_lock+0x2b/0x80 [ 88.393569][ T6074] ? __fget_files+0x215/0x3d0 [ 88.393596][ T6074] ? __fget_files+0x21f/0x3d0 [ 88.393626][ T6074] ksys_write+0x12a/0x250 [ 88.393646][ T6074] ? __pfx_ksys_write+0x10/0x10 [ 88.393673][ T6074] do_syscall_64+0x123/0x790 [ 88.393694][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.393713][ T6074] RIP: 0033:0x7f324735e98e [ 88.393729][ T6074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.393746][ T6074] RSP: 002b:00007f32455b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.393764][ T6074] RAX: ffffffffffffffda RBX: 00007f32455b46c0 RCX: 00007f324735e98e [ 88.393776][ T6074] RDX: 0000000000000001 RSI: 00007f32455b40a0 RDI: 0000000000000007 [ 88.393787][ T6074] RBP: 00007f32455b4090 R08: 0000000000000000 R09: 0000000000000000 [ 88.393797][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.393808][ T6074] R13: 00007f3247626218 R14: 00007f3247626180 R15: 00007ffc64e18c38 [ 88.393832][ T6074] [ 88.861751][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 88.861770][ T30] audit: type=1400 audit(1790489585.838:322): avc: denied { create } for pid=6084 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.884820][ T30] audit: type=1400 audit(1790489585.848:323): avc: denied { append } for pid=6084 comm="syz.0.81" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.977615][ T6089] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 89.177487][ T6092] FAULT_INJECTION: forcing a failure. [ 89.177487][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 89.177519][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.4.82 Not tainted syzkaller #0 PREEMPT(full) [ 89.177542][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.177553][ T6092] Call Trace: [ 89.177559][ T6092] [ 89.177566][ T6092] dump_stack_lvl+0x100/0x190 [ 89.177598][ T6092] should_fail_ex.cold+0x5/0xa [ 89.177624][ T6092] should_failslab+0xc2/0x120 [ 89.177650][ T6092] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 89.177672][ T6092] ? __alloc_skb+0x5b7/0x710 [ 89.177694][ T6092] ? __alloc_skb+0x140/0x710 [ 89.177720][ T6092] __alloc_skb+0x140/0x710 [ 89.177741][ T6092] ? __alloc_skb+0x5b7/0x710 [ 89.177763][ T6092] ? __pfx___alloc_skb+0x10/0x10 [ 89.177784][ T6092] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 89.177805][ T6092] ? sock_has_perm+0x25a/0x2f0 [ 89.177824][ T6092] ? __pfx_sock_has_perm+0x10/0x10 [ 89.177843][ T6092] netlink_alloc_large_skb+0x69/0x150 [ 89.177868][ T6092] netlink_sendmsg+0x680/0xda0 [ 89.177895][ T6092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.177920][ T6092] ? selinux_socket_sendmsg+0x198/0x2f0 [ 89.177944][ T6092] ____sys_sendmsg+0xa4d/0xbe0 [ 89.177961][ T6092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.177985][ T6092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.178001][ T6092] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.178030][ T6092] ? rcu_is_watching+0x13/0xc0 [ 89.178054][ T6092] ? trace_hrtimer_start+0x77/0x220 [ 89.178084][ T6092] ___sys_sendmsg+0x190/0x1e0 [ 89.178107][ T6092] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.178126][ T6092] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 89.178159][ T6092] ? find_held_lock+0x2b/0x80 [ 89.178200][ T6092] __sys_sendmsg+0x160/0x210 [ 89.178225][ T6092] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.178255][ T6092] ? trace_hardirqs_off+0x70/0x170 [ 89.178285][ T6092] do_syscall_64+0x123/0x790 [ 89.178306][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.178325][ T6092] RIP: 0033:0x7f324739e159 [ 89.178349][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.178366][ T6092] RSP: 002b:00007f3245593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.178385][ T6092] RAX: ffffffffffffffda RBX: 00007f3247626270 RCX: 00007f324739e159 [ 89.178397][ T6092] RDX: 0000000024044010 RSI: 00002000000001c0 RDI: 000000000000000c [ 89.178408][ T6092] RBP: 00007f3245593090 R08: 0000000000000000 R09: 0000000000000000 [ 89.178419][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.178429][ T6092] R13: 00007f3247626308 R14: 00007f3247626270 R15: 00007ffc64e18c38 [ 89.178454][ T6092] [ 89.809091][ T30] audit: type=1400 audit(1790489586.788:324): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 89.908956][ T30] audit: type=1400 audit(1790489586.888:325): avc: denied { relabelfrom } for pid=6093 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.909096][ T30] audit: type=1400 audit(1790489586.888:326): avc: denied { relabelto } for pid=6093 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.305238][ T50] smc: removing ib device syz1 [ 90.348012][ T5616] infiniband syz1: ib_query_port failed (-19) [ 90.414934][ T50] smbdirect: ib_dev[syz1] removed [ 90.712224][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.872229][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 90.872866][ T25] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 90.874500][ T25] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 90.874524][ T25] usb 2-1: config 0 has no interface number 0 [ 90.874548][ T25] usb 2-1: too many endpoints for config 0 interface 145 altsetting 129: 89, using maximum allowed: 30 [ 90.874580][ T25] usb 2-1: config 0 interface 145 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 90.874604][ T25] usb 2-1: config 0 interface 145 has no altsetting 0 [ 90.877542][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.877564][ T25] usb 2-1: Product: syz [ 90.877578][ T25] usb 2-1: Manufacturer: syz [ 90.877592][ T25] usb 2-1: SerialNumber: syz [ 90.883065][ T25] usb 2-1: config 0 descriptor?? [ 91.111920][ T6110] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 91.172789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 91.262133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.382127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.552124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.586055][ T6127] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 92.056667][ T5728] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.541029][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 92.579123][ T5728] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 92.602130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.628776][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.492126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.722123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.262128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.292124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.413478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.815357][ T25] ssu100 2-1:0.145: Quatech SSU-100 USB to Serial Driver converter detected [ 97.818511][ T25] ssu100 2-1:0.145: probe with driver ssu100 failed with error -32 [ 97.975189][ T5728] usb 4-1: config 0 descriptor?? [ 98.038063][ T25] usb 2-1: USB disconnect, device number 5 [ 98.251420][ T5728] usb 4-1: can't set config #0, error -71 [ 98.414053][ T5728] usb 4-1: USB disconnect, device number 7 [ 98.599435][ T30] audit: type=1400 audit(1790489595.578:327): avc: denied { append } for pid=6139 comm="syz.4.95" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.775947][ T30] audit: type=1400 audit(1790489595.748:328): avc: denied { mount } for pid=6139 comm="syz.4.95" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.775994][ T30] audit: type=1400 audit(1790489595.748:329): avc: denied { read write } for pid=6139 comm="syz.4.95" name="set_event" dev="tracefs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.110895][ T30] audit: type=1400 audit(1790489596.088:330): avc: denied { ioctl } for pid=6139 comm="syz.4.95" path="/20/trace/set_event" dev="tracefs" ino=333 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.810618][ T30] audit: type=1400 audit(1790489596.788:331): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.593869][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 100.683387][ T6164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6164 comm=syz.3.98 [ 100.712188][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.875149][ T44] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 100.879902][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.879923][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.881668][ T44] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 100.881690][ T44] usb 3-1: Product: syz [ 100.881703][ T44] usb 3-1: Manufacturer: syz [ 100.881718][ T44] usb 3-1: SerialNumber: syz [ 101.001840][ T44] usb 3-1: config 0 descriptor?? [ 102.009018][ T191] usb 3-1: USB disconnect, device number 6 [ 102.567761][ T30] audit: type=1400 audit(1790489599.548:332): avc: denied { ioctl } for pid=6173 comm="syz.1.103" path="socket:[10723]" dev="sockfs" ino=10723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.569733][ T30] audit: type=1400 audit(1790489599.548:333): avc: denied { ioctl } for pid=6173 comm="syz.1.103" path="socket:[10714]" dev="sockfs" ino=10714 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.652398][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 103.537422][ T6188] FAULT_INJECTION: forcing a failure. [ 103.537422][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 103.537449][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 103.537469][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.537480][ T6188] Call Trace: [ 103.537486][ T6188] [ 103.537493][ T6188] dump_stack_lvl+0x100/0x190 [ 103.537524][ T6188] should_fail_ex.cold+0x5/0xa [ 103.537551][ T6188] should_failslab+0xc2/0x120 [ 103.537576][ T6188] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 103.537596][ T6188] ? __alloc_skb+0x5b7/0x710 [ 103.537617][ T6188] ? __alloc_skb+0x140/0x710 [ 103.537643][ T6188] __alloc_skb+0x140/0x710 [ 103.537663][ T6188] ? __alloc_skb+0x5b7/0x710 [ 103.537685][ T6188] ? __pfx___alloc_skb+0x10/0x10 [ 103.537714][ T6188] netlink_alloc_large_skb+0x69/0x150 [ 103.537739][ T6188] netlink_sendmsg+0x680/0xda0 [ 103.537765][ T6188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.537790][ T6188] ? selinux_socket_sendmsg+0x198/0x2f0 [ 103.537815][ T6188] ____sys_sendmsg+0xa4d/0xbe0 [ 103.537832][ T6188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.537856][ T6188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.537878][ T6188] ? lock_acquire+0x1d1/0x380 [ 103.537898][ T6188] ? get_pid_task+0x2a/0x250 [ 103.537924][ T6188] ___sys_sendmsg+0x190/0x1e0 [ 103.537943][ T6188] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.537961][ T6188] ? get_pid_task+0x106/0x250 [ 103.537995][ T6188] ? find_held_lock+0x2b/0x80 [ 103.538038][ T6188] __sys_sendmsg+0x160/0x210 [ 103.538062][ T6188] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.538104][ T6188] do_syscall_64+0x123/0x790 [ 103.538124][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.538142][ T6188] RIP: 0033:0x7fc475f9e159 [ 103.538156][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.538173][ T6188] RSP: 002b:00007fc476e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.538191][ T6188] RAX: ffffffffffffffda RBX: 00007fc476225fa0 RCX: 00007fc475f9e159 [ 103.538202][ T6188] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 103.538212][ T6188] RBP: 00007fc476e29090 R08: 0000000000000000 R09: 0000000000000000 [ 103.538223][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.538233][ T6188] R13: 00007fc476226038 R14: 00007fc476225fa0 R15: 00007ffc9534e908 [ 103.538258][ T6188] [ 103.822746][ T30] audit: type=1400 audit(1790489600.808:334): avc: denied { ioctl } for pid=6189 comm="syz.0.108" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.000764][ T30] audit: type=1400 audit(1790489600.978:335): avc: denied { read write } for pid=6193 comm="syz.4.109" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.001918][ T30] audit: type=1400 audit(1790489600.978:336): avc: denied { open } for pid=6193 comm="syz.4.109" path="/23/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.071785][ T30] audit: type=1400 audit(1790489601.048:337): avc: denied { ioctl } for pid=6193 comm="syz.4.109" path="/23/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.119785][ T6197] device-mapper: ioctl: Unable to rename non-existent device, m to [ 104.205204][ T6202] FAULT_INJECTION: forcing a failure. [ 104.205204][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 104.205231][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 104.205251][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.205262][ T6202] Call Trace: [ 104.205268][ T6202] [ 104.205275][ T6202] dump_stack_lvl+0x100/0x190 [ 104.205307][ T6202] should_fail_ex.cold+0x5/0xa [ 104.205334][ T6202] should_failslab+0xc2/0x120 [ 104.205357][ T6202] __kmalloc_noprof+0xfc/0x840 [ 104.205376][ T6202] ? rcu_is_watching+0x13/0xc0 [ 104.205401][ T6202] ? tomoyo_realpath_from_path+0xb6/0x690 [ 104.205430][ T6202] tomoyo_realpath_from_path+0xb6/0x690 [ 104.205459][ T6202] tomoyo_path_number_perm+0x23c/0x580 [ 104.205478][ T6202] ? tomoyo_path_number_perm+0x22e/0x580 [ 104.205499][ T6202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.205529][ T6202] ? __lock_acquire+0x5c0/0x1f40 [ 104.205560][ T6202] ? __fget_files+0x34/0x3d0 [ 104.205583][ T6202] ? find_held_lock+0x2b/0x80 [ 104.205607][ T6202] ? hook_file_ioctl_common+0x140/0x440 [ 104.205639][ T6202] ? __fget_files+0x21f/0x3d0 [ 104.205666][ T6202] security_file_ioctl+0xd3/0x230 [ 104.205689][ T6202] __x64_sys_ioctl+0xb7/0x210 [ 104.205711][ T6202] do_syscall_64+0x123/0x790 [ 104.205731][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.205750][ T6202] RIP: 0033:0x7fc04c19e159 [ 104.205765][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.205782][ T6202] RSP: 002b:00007fc04d08f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.205800][ T6202] RAX: ffffffffffffffda RBX: 00007fc04c426090 RCX: 00007fc04c19e159 [ 104.205812][ T6202] RDX: 0000200000000000 RSI: 00000000c138fd05 RDI: 0000000000000003 [ 104.205822][ T6202] RBP: 00007fc04d08f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.205833][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.205843][ T6202] R13: 00007fc04c426128 R14: 00007fc04c426090 R15: 00007ffe88fe09c8 [ 104.205867][ T6202] [ 104.205875][ T6202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.535542][ T30] audit: type=1400 audit(1790489601.518:338): avc: denied { read write } for pid=6206 comm="syz.1.113" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.537365][ T30] audit: type=1400 audit(1790489601.518:339): avc: denied { open } for pid=6206 comm="syz.1.113" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.625184][ T30] audit: type=1400 audit(1790489601.598:340): avc: denied { ioctl } for pid=6206 comm="syz.1.113" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.672005][ T30] audit: type=1400 audit(1790489601.638:341): avc: denied { set_context_mgr } for pid=6206 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 104.766206][ T30] audit: type=1400 audit(1790489601.748:342): avc: denied { map } for pid=6206 comm="syz.1.113" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.862232][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.958882][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 104.960219][ T6214] FAULT_INJECTION: forcing a failure. [ 104.960219][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 104.960254][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 104.960278][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.960289][ T6214] Call Trace: [ 104.960295][ T6214] [ 104.960302][ T6214] dump_stack_lvl+0x100/0x190 [ 104.960332][ T6214] should_fail_ex.cold+0x5/0xa [ 104.960358][ T6214] should_failslab+0xc2/0x120 [ 104.960382][ T6214] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 104.960403][ T6214] ? __alloc_skb+0x5b7/0x710 [ 104.960424][ T6214] ? __alloc_skb+0x140/0x710 [ 104.960450][ T6214] __alloc_skb+0x140/0x710 [ 104.960470][ T6214] ? __alloc_skb+0x5b7/0x710 [ 104.960492][ T6214] ? __pfx___alloc_skb+0x10/0x10 [ 104.960520][ T6214] netlink_alloc_large_skb+0x69/0x150 [ 104.960543][ T6214] netlink_sendmsg+0x680/0xda0 [ 104.960569][ T6214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.960593][ T6214] ? selinux_socket_sendmsg+0x198/0x2f0 [ 104.960617][ T6214] ____sys_sendmsg+0xa4d/0xbe0 [ 104.960633][ T6214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.960657][ T6214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.960680][ T6214] ? lock_acquire+0x1d1/0x380 [ 104.960698][ T6214] ? get_pid_task+0x2a/0x250 [ 104.960724][ T6214] ___sys_sendmsg+0x190/0x1e0 [ 104.960744][ T6214] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.960762][ T6214] ? get_pid_task+0x106/0x250 [ 104.960794][ T6214] ? find_held_lock+0x2b/0x80 [ 104.960835][ T6214] __sys_sendmsg+0x160/0x210 [ 104.960862][ T6214] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.960899][ T6214] do_syscall_64+0x123/0x790 [ 104.960918][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.960937][ T6214] RIP: 0033:0x7f100e39e159 [ 104.960951][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.960968][ T6214] RSP: 002b:00007f100f2a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.960986][ T6214] RAX: ffffffffffffffda RBX: 00007f100e625fa0 RCX: 00007f100e39e159 [ 104.960997][ T6214] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 104.961008][ T6214] RBP: 00007f100f2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.961018][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.961029][ T6214] R13: 00007f100e626038 R14: 00007f100e625fa0 R15: 00007ffd03b80fd8 [ 104.961053][ T6214] [ 105.076838][ T44] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 105.315222][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.315253][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.320672][ T44] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 105.320694][ T44] usb 3-1: Product: syz [ 105.320708][ T44] usb 3-1: Manufacturer: syz [ 105.320722][ T44] usb 3-1: SerialNumber: syz [ 105.366773][ T30] audit: type=1400 audit(1790489602.348:343): avc: denied { call } for pid=6206 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 105.367867][ T44] usb 3-1: config 0 descriptor?? [ 105.422842][ T6218] lo: entered allmulticast mode [ 105.449064][ T6211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6211 comm=syz.4.114 [ 105.761677][ T5616] usb 3-1: USB disconnect, device number 7 [ 112.903402][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 112.903421][ T30] audit: type=1400 audit(1790489605.448:352): avc: denied { setopt } for pid=6231 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.422608][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.433870][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.797079][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.807634][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.482059][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 239.501446][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6230/1:b..l P6208/1:b..l [ 239.510500][ C1] rcu: (detected by 1, t=10504 jiffies, g=13513, q=543560 ncpus=2) [ 239.518470][ C1] task:syz.4.114 state:R running task stack:26616 pid:6208 tgid:6208 ppid:5612 task_flags:0x40044c flags:0x00080002 [ 239.531920][ C1] Call Trace: [ 239.535197][ C1] [ 239.538102][ C1] __schedule+0x1259/0x6920 [ 239.542586][ C1] ? lock_acquire+0x5e/0x380 [ 239.547148][ C1] ? __pfx___schedule+0x10/0x10 [ 239.551974][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 239.557323][ C1] preempt_schedule_common+0x3c/0xb0 [ 239.562586][ C1] preempt_schedule_thunk+0x16/0x40 [ 239.567755][ C1] _raw_spin_unlock+0x3e/0x50 [ 239.572403][ C1] __zap_vma_range+0x16b0/0x48e0 [ 239.577320][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 239.582577][ C1] ? mas_next_slot+0xc05/0x13a0 [ 239.587400][ C1] unmap_vmas+0x299/0x5f0 [ 239.591701][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 239.596521][ C1] ? mas_next_slot+0xc05/0x13a0 [ 239.601348][ C1] exit_mmap+0x1ef/0xa00 [ 239.605564][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 239.610304][ C1] ? rcu_is_watching+0x13/0xc0 [ 239.615049][ C1] ? find_held_lock+0x2b/0x80 [ 239.619697][ C1] ? uprobe_clear_state+0x5f/0x250 [ 239.624795][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 239.630402][ C1] __mmput+0x12a/0x410 [ 239.634440][ C1] mmput+0x67/0x80 [ 239.638128][ C1] do_exit+0x8b1/0x2ae0 [ 239.642254][ C1] ? __pfx_debug_object_free+0x10/0x10 [ 239.647684][ C1] ? __pfx_do_exit+0x10/0x10 [ 239.652243][ C1] ? do_raw_spin_lock+0x128/0x260 [ 239.657236][ C1] ? find_held_lock+0x2b/0x80 [ 239.661884][ C1] ? get_signal+0x7e0/0x21e0 [ 239.666443][ C1] do_group_exit+0xd5/0x2a0 [ 239.670924][ C1] get_signal+0x1ec7/0x21e0 [ 239.675403][ C1] ? __pfx_get_signal+0x10/0x10 [ 239.680227][ C1] ? do_futex+0x190/0x440 [ 239.684530][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 239.690046][ C1] ? ktime_get+0x22c/0x320 [ 239.694431][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 239.700562][ C1] exit_to_user_mode_loop+0x139/0x700 [ 239.705901][ C1] ? rcu_is_watching+0x13/0xc0 [ 239.710642][ C1] do_syscall_64+0x661/0x790 [ 239.715200][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.721062][ C1] RIP: 0033:0x7f324739e159 [ 239.725443][ C1] RSP: 002b:00007ffc64e18d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.733822][ C1] RAX: fffffffffffffdfc RBX: 0000000000019bd3 RCX: 00007f324739e159 [ 239.741762][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f324762609c [ 239.749700][ C1] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 239.757639][ C1] R10: 00007ffc64e18ea0 R11: 0000000000000246 R12: 00007ffc64e18ec0 [ 239.765575][ C1] R13: 00007f324762609c R14: 0000000000019c05 R15: 00007ffc64e18ea0 [ 239.773521][ C1] [ 239.776509][ C1] task:syz.1.118 state:R running task stack:27016 pid:6230 tgid:6226 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 239.789955][ C1] Call Trace: [ 239.793202][ C1] [ 239.796110][ C1] __schedule+0x1259/0x6920 [ 239.800591][ C1] ? __pfx___schedule+0x10/0x10 [ 239.805412][ C1] ? mark_held_locks+0x40/0x70 [ 239.810148][ C1] preempt_schedule_irq+0x4e/0x90 [ 239.815152][ C1] irqentry_exit+0x205/0xa10 [ 239.819710][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.825655][ C1] RIP: 0010:unwind_next_frame+0x167b/0x2090 [ 239.831521][ C1] Code: 00 0f 84 42 f9 ff ff 4c 89 e7 e8 40 d6 c5 00 e9 35 f9 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 29 06 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc [ 239.851093][ C1] RSP: 0018:ffffc90002efefc0 EFLAGS: 00000246 [ 239.857125][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91f783c8 [ 239.865063][ C1] RDX: 1ffff920005dfe0d RSI: ffffc90002eff388 RDI: ffffc90002eff070 [ 239.873008][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000007 [ 239.880947][ C1] R10: 0000000000000200 R11: 0000000000017fb4 R12: ffffc90002eff080 [ 239.888885][ C1] R13: ffffc90002eff030 R14: ffffc90002eff398 R15: ffffc90002eff064 [ 239.896832][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 239.902434][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.908553][ C1] arch_stack_walk+0x94/0xf0 [ 239.913114][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 239.918115][ C1] stack_trace_save+0x8e/0xc0 [ 239.922758][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 239.928103][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 239.933009][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 239.937914][ C1] save_stack+0x162/0x1e0 [ 239.942216][ C1] ? __pfx_save_stack+0x10/0x10 [ 239.947035][ C1] ? __free_frozen_pages+0x79f/0x10f0 [ 239.952376][ C1] ? qlist_free_all+0x47/0xf0 [ 239.957020][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 239.962622][ C1] ? page_ext_put+0x3e/0xd0 [ 239.967105][ C1] __reset_page_owner+0x84/0x190 [ 239.972015][ C1] __free_frozen_pages+0x79f/0x10f0 [ 239.977189][ C1] ? __free_slab+0x80/0x220 [ 239.981667][ C1] qlist_free_all+0x47/0xf0 [ 239.986138][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 239.991566][ C1] __kasan_slab_alloc+0x69/0x90 [ 239.996388][ C1] kmem_cache_alloc_noprof+0x269/0x6a0 [ 240.001815][ C1] ? ptlock_alloc+0x1f/0x70 [ 240.006293][ C1] ptlock_alloc+0x1f/0x70 [ 240.010594][ C1] pte_alloc_one+0x82/0x3d0 [ 240.015071][ C1] __pte_alloc+0x6d/0x380 [ 240.019369][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 240.024280][ C1] ? __pfx___might_resched+0x10/0x10 [ 240.029531][ C1] ? copy_page_range+0x1c91/0x57c0 [ 240.034615][ C1] copy_page_range+0x3b36/0x57c0 [ 240.039537][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 240.044797][ C1] ? mas_wr_store_entry+0xa4/0x1d50 [ 240.049968][ C1] ? lock_acquire+0x1d1/0x380 [ 240.054613][ C1] ? dup_mmap+0xd0a/0x2370 [ 240.059002][ C1] ? find_held_lock+0x2b/0x80 [ 240.063656][ C1] ? dup_mmap+0xe66/0x2370 [ 240.068050][ C1] ? dup_mmap+0xe66/0x2370 [ 240.072437][ C1] ? down_write+0x146/0x1f0 [ 240.076907][ C1] ? up_write+0x2dc/0x5b0 [ 240.081212][ C1] dup_mmap+0x1230/0x2370 [ 240.085520][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 240.090166][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.095952][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 240.101731][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 240.106639][ C1] ? lock_acquire+0x1d1/0x380 [ 240.111282][ C1] ? copy_process+0x4806/0x8370 [ 240.116107][ C1] copy_process+0x4811/0x8370 [ 240.120760][ C1] ? __pfx_copy_process+0x10/0x10 [ 240.125753][ C1] ? __pfx_do_anonymous_page+0x10/0x10 [ 240.131182][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 240.135923][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 240.140668][ C1] ? __pte_offset_map+0x179/0x310 [ 240.145662][ C1] kernel_clone+0x176/0x9d0 [ 240.150134][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 240.155135][ C1] ? lock_acquire+0x1d1/0x380 [ 240.159781][ C1] __do_sys_clone+0xd9/0x120 [ 240.164347][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 240.169520][ C1] ? rcu_is_watching+0x13/0xc0 [ 240.174272][ C1] do_syscall_64+0x123/0x790 [ 240.178836][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.184700][ C1] RIP: 0033:0x7f388bd9e159 [ 240.189088][ C1] RSP: 002b:00007f388cd14fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 240.197464][ C1] RAX: ffffffffffffffda RBX: 00007f388c026090 RCX: 00007f388bd9e159 [ 240.205402][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 240.213338][ C1] RBP: 00007f388be3506b R08: 0000000000000000 R09: 0000000000000000 [ 240.221281][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.229224][ C1] R13: 00007f388c026128 R14: 00007f388c026090 R15: 00007ffe7e32b888 [ 240.237169][ C1]