last executing test programs: 29m16.442316897s ago: executing program 0 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x42}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}}, 0x8040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 29m16.292577147s ago: executing program 0 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32], 0x30}}, 0x40000) 29m16.231881801s ago: executing program 0 (id=461): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x9, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) r6 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, &(0x7f0000000000)="93", 0xf5) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) mq_open(0x0, 0x42, 0x0, 0x0) r9 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r10 = fcntl$dupfd(r9, 0x0, r9) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) write(r8, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) 29m13.555627926s ago: executing program 0 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 29m12.535653427s ago: executing program 0 (id=479): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 29m12.070023031s ago: executing program 0 (id=482): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x4040000) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@dellinkprop={0x28, 0x6d, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x1020, 0x44000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xbfcf}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e4}, 0x8000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208"], 0x68}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x2004880a}, 0x20010850) socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 29m11.560197177s ago: executing program 32 (id=482): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x4040000) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@dellinkprop={0x28, 0x6d, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x1020, 0x44000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xbfcf}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e4}, 0x8000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208"], 0x68}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x2004880a}, 0x20010850) socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 24m58.036970749s ago: executing program 4 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x4, r1, 0x0, &(0x7f0000feb000/0x14000)=nil, 0x14000, 0x100019}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffe0, 0xffff}, {0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='100000', 0x6) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x8000, 0x4, 0x0, 0x100, 0x3, "6be4072d59894f3598e38dfb6471295dedd125"}) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) 24m56.509700014s ago: executing program 4 (id=1679): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 24m53.016191871s ago: executing program 4 (id=1690): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803011500000000000200010000000c24030402030103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x721401, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206059b868a100000000000070000001c0007800800114000000000080012400000ffff08000640000100000500010006000000050005000200000005000400000000000900020073797a300000000010000300686173683a69702c6d616300d16c"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4004084) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x8, 0x8000000000080, 0x25, 0x80000, 0x7f, 0x44236, 0x800, 0x81, 0x4, 0x8001, 0x1005, 0xd, 0xb2e, 0x0, 0xfffffdfffffffffd], 0xe000, 0xe8980}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 24m51.609552806s ago: executing program 4 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r3, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x20004056) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x141, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x2) readv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 24m50.603692124s ago: executing program 4 (id=1702): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x9, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) r7 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000000)="93", 0xf5) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r10 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r11 = fcntl$dupfd(r10, 0x0, r10) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r9, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000001d80)}, 0x20001) 24m46.260547861s ago: executing program 4 (id=1717): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 24m31.243340944s ago: executing program 33 (id=1717): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 6m5.221165122s ago: executing program 1 (id=4664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 5m59.348929799s ago: executing program 1 (id=4676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x880) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x428440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) set_mempolicy(0x3, 0x0, 0x8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000009600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000080)="542e1a259e33c2b261d7d887d7ed506dd4b09182cafb4dea0fb9ae664bf9ab86df31316e41a098363e532157748bb36226050daa143f208668223ddbd7f34a0d543d9bb66c36da5ad1", 0x49}, {&(0x7f0000000100)}, {&(0x7f0000000280)="63392b6b07ca573c2913a2b30c47ae7ab0448d963aa2851ba2ab0b6388accace", 0x20}, {&(0x7f00000003c0)="ad45d6b6fe8c10b5ef1445692087fa9af8727fb9df84efbf076d5a8833d4867ceb786ec2f3e7ebd0b82ae406717e12b66104c3b5170d1769bb2ca5ab92b3bd63508fc4baaa2c9017d5d693af00676eb55a7858ffca71c715b010eae0a801fcf2815945136ae0c489311fecef01e9485444b74a54fcadbdd6b6477db6", 0x7c}], 0x4) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x4, 0x4, 0x0, 0x2, 0x3, 0xaa, 0x2, 0x2004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="000128bd7000fcdbdf2505000000050005000c00000008000400800400000ced018008000300ac47ea5ed82c89397bd883e7a096146c73e8dc14aa080002000040a5ff3d279d14ca1d4f2bbfa446b600000008000200070000000800020007000000080003000500"/114], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = timerfd_create(0x8, 0x80800) timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0) 5m55.448729409s ago: executing program 1 (id=4680): syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2], 0x48) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000ac0)={r6}, &(0x7f0000000bc0)=0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000000c0)) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f00000001c0)=ANY=[], 0xa) epoll_create(0x12d6) write$vga_arbiter(r7, &(0x7f0000000040)=@unlock_all, 0xb) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x4, 0x401, 0x300}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x10, 0x80002, 0x0) 5m51.91908904s ago: executing program 1 (id=4684): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000080)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r1}) r3 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') r5 = getpid() ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/87, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000440)) syz_pidfd_open(r5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 5m50.708488658s ago: executing program 1 (id=4688): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffed9, &(0x7f0000000240)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x66, &(0x7f0000000000)=@generic={0x5, 0x0, 0x5e, '}bXI', "d8830d2a3a95376748c26e520d2d39e2ccf57114d74a669157757974b596e061a8a434def5e096ae807215c8edc2af120511780a6be970b53f3ec306f9b0c2a4d8db264d634e0efc4affb2ba15d753c904555da1df1be7fe6ccc19d17a9c"}) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x4, 0x1ffc, 0x3a}, 0x2c) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x9, 0xffff, 0x50, 0xf4, 0x3}}) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000004", 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xf700, {[@fastopen={0x1e, 0x5, "5af306"}]}}}}}}}}, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x48, {0x2, 0x4e23, @multicast2}, 'team_slave_0\x00'}) 5m46.633065621s ago: executing program 1 (id=4697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000340)={r3}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={r4, &(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x70100, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0x2}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r9, 0xb) 5m31.484343823s ago: executing program 34 (id=4697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000bb7590e4786f862436a0c559346dc3c2d9b3e09a59ed188caabb24f7839c6d02ecaa3bed6f8dbf95cda457aa267b5fdb0963a5620a8f8b10e5c6d86f792ac12799ee458f434d3e9becb01417b246079c4aeec87dc2cef1ce35d388808c762ad7dabf12dd63", @ANYRES32=0x0, @ANYBLOB="000000000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000340)={r3}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={r4, &(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x70100, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0x2}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r9, 0xb) 2m47.100506809s ago: executing program 5 (id=5229): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 2m45.46192201s ago: executing program 5 (id=5237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000340)={0x140, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x101, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x3, 0xce}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, @random=0x5, 0xa070, @val={0x0, 0x3, @random="de53ed"}, @val, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x5, 0xd, 0x1, 0xe}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x88, 0xe}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xc}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce, 0x61}}, @val={0x76, 0x6, {0xff, 0x2, 0x39, 0x200}}, [{0xdd, 0x7e, "2e9c6bd9782ac70c7c93693093c3d695a4a6ba6c3f8a2be3b5e2ab692798f12a72ee90730514bf17fa2c1e8533574f5b3f9c31c7a97ecc4f7cb55b7a3367767729dd6c75416260acd7ee19f05b44b61c3cfc95af9d134842359fbe74ace3452e329c5051df1eb5ad917ab08a6e42d52e41bb7f45f80a2980c5b0cb834461"}, {0xdd, 0x6, "53814f4302b7"}, {0xdd, 0x6, "064d1b901fec"}, {0xdd, 0x6, "25260b1c8227"}]}}, @NL80211_ATTR_PROBE_RESP={0x1d, 0x91, "097c6cb2ee460e115b056d5c391de88176e7acb873f7c38eb3"}]}, 0x140}}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m45.354045548s ago: executing program 5 (id=5239): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.452885942s ago: executing program 5 (id=5250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000340)={0x140, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x101, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x3, 0xce}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, @random=0x5, 0xa070, @val={0x0, 0x3, @random="de53ed"}, @val, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x5, 0xd, 0x1, 0xe}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x88, 0xe}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xc}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce, 0x61}}, @val={0x76, 0x6, {0xff, 0x2, 0x39, 0x200}}, [{0xdd, 0x7e, "2e9c6bd9782ac70c7c93693093c3d695a4a6ba6c3f8a2be3b5e2ab692798f12a72ee90730514bf17fa2c1e8533574f5b3f9c31c7a97ecc4f7cb55b7a3367767729dd6c75416260acd7ee19f05b44b61c3cfc95af9d134842359fbe74ace3452e329c5051df1eb5ad917ab08a6e42d52e41bb7f45f80a2980c5b0cb834461"}, {0xdd, 0x6, "53814f4302b7"}, {0xdd, 0x6, "064d1b901fec"}, {0xdd, 0x6, "25260b1c8227"}]}}, @NL80211_ATTR_PROBE_RESP={0x1d, 0x91, "097c6cb2ee460e115b056d5c391de88176e7acb873f7c38eb3"}]}, 0x140}}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m40.643803319s ago: executing program 5 (id=5253): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) 2m40.454854612s ago: executing program 5 (id=5255): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgrp/cgroup.subtree_control\x00', 0x1, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, &(0x7f00000000c0)='+cpuset', 0x7) write(r1, &(0x7f00000000c0)='+misc\n\x00', 0x6) close(r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) 2m24.524749721s ago: executing program 35 (id=5255): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgrp/cgroup.subtree_control\x00', 0x1, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) write(r1, &(0x7f00000000c0)='+cpuset', 0x7) write(r1, &(0x7f00000000c0)='+misc\n\x00', 0x6) close(r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) 1m5.891585207s ago: executing program 3 (id=5595): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x240002) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) 1m4.684046612s ago: executing program 3 (id=5598): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1m4.250424177s ago: executing program 3 (id=5601): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0xf36, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3f5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r2, 0xffffffffffffffff, 0x0) 1m3.585789916s ago: executing program 3 (id=5603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) shutdown(r0, 0x1) 1m3.018791719s ago: executing program 3 (id=5605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x5, 0x1, 0xa26}}}}]}, 0x4c}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 55.490786024s ago: executing program 3 (id=5625): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0xfea000, 0x2000402) socket$inet_icmp_raw(0x2, 0x3, 0x1) 50.380581335s ago: executing program 7 (id=5641): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 50.307697162s ago: executing program 7 (id=5643): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) socket$netlink(0x10, 0x3, 0x13) getsockname$packet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x14) mmap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x6, 0x13, 0xffffffffffffffff, 0x11b09000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 49.009159929s ago: executing program 7 (id=5645): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = io_uring_setup(0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 47.78075805s ago: executing program 7 (id=5648): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 45.886433274s ago: executing program 7 (id=5651): getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x9, 0xfff7, 0x9, 0x78ca, 0xfffffffc, 0xf61f, 0xf75, 0x1}, &(0x7f00000002c0)=0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x6, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x1, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) 44.769855916s ago: executing program 7 (id=5653): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x100, 0x1403, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) 40.338037939s ago: executing program 36 (id=5625): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0xfea000, 0x2000402) socket$inet_icmp_raw(0x2, 0x3, 0x1) 29.195434034s ago: executing program 37 (id=5653): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x100, 0x1403, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) 5.603458903s ago: executing program 8 (id=5769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.507773554s ago: executing program 6 (id=5770): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x40000000}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={r2, 0x2, 0x1}, &(0x7f0000000500)=0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5", 0x3e}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) socket(0x15, 0x5, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 5.476335151s ago: executing program 8 (id=5771): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.114928862s ago: executing program 6 (id=5773): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) close(0x3) write$char_usb(r0, &(0x7f0000000bc0)="be", 0x1) 4.577000852s ago: executing program 2 (id=5776): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000580)={0x0, 0xff8c, 0x80, 0x402, 0x158}, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00', @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 3.455766382s ago: executing program 2 (id=5777): getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x9, 0xfff7, 0x9, 0x78ca, 0xfffffffc, 0xf61f, 0xf75, 0x1}, &(0x7f00000002c0)=0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x6, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x1, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) 2.491594794s ago: executing program 2 (id=5778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24046850}, 0x0) 2.185984414s ago: executing program 8 (id=5779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) 1.927993338s ago: executing program 6 (id=5780): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 1.77237073s ago: executing program 2 (id=5781): mmap(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000800000)) 1.754952074s ago: executing program 8 (id=5782): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1.60730405s ago: executing program 2 (id=5783): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.492262395s ago: executing program 2 (id=5784): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x169802, 0x0) r1 = dup(r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x144, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@remote, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_dont_frag={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000440)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r1, 0xf2169000) 1.345078765s ago: executing program 6 (id=5785): syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x18, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}]}]}}}}}}}, 0x0) 1.211723716s ago: executing program 6 (id=5786): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.066207114s ago: executing program 6 (id=5787): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x240002) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x44080) r4 = socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000000c0)={0x0, 'wg0\x00', {}, 0xff}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) 753.706472ms ago: executing program 8 (id=5788): sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) 0s ago: executing program 8 (id=5789): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r1, &(0x7f0000000840)={0x27, 0x0, 0x1, 0x5, 0x6, 0x1, "9b2f5b39e541361eb2f53ffb0a1f472485fcf3862d897f8fd3a0e37a2680071d099c54458373becacc202a415709729019d6f7cefd01c03044cdd905cc6e96", 0x20}, 0x60) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect$lan78xx(0x7, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe46}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0x83c0550b, 0x0) r6 = dup3(r2, r0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)='%pS \x00'}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r5], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x20008011) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x18, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x1, 0x100, 0x0, 0x0, 0x1000, 0x5e, 0xffffffffffffffff, 0x0, 0x58}}}, &(0x7f0000000480)=0x0) r11 = io_uring_setup(0x776a, &(0x7f00000019c0)={0x0, 0xe2e3, 0x40000, 0x102, 0x3}) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f00000004c0)={0x0, 0x505b, 0x1, 0x6, 0x36c}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26f9, 0x400, 0x2, 0x19c, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21e3, 0x80, 0x2, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3f8, 0x2, 0x0, 0x18e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4df1, 0x200, 0xffffffff, 0xf5, 0x0, r11}}], 0x4, &(0x7f00000018c0)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, r9, '\x00', {0x3, 0x153, 0x0, &(0x7f00000008c0)=@buf_1k="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"}}, &(0x7f0000001940)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000001980)={0x8680, r11}, 0x1) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): ved_port_t tclass=tcp_socket permissive=1 [ 1702.620307][T24585] ALSA: mixer_oss: invalid OSS volume 'W' [ 1703.034183][ C1] net_ratelimit: 77 callbacks suppressed [ 1703.667760][T24580] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1704.786867][ T1216] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1704.967718][ T1216] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1705.210793][ T31] audit: type=1400 audit(1789983649.830:8262): avc: denied { create } for pid=24604 comm="syz.2.4974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1705.230214][ T1216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.240627][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.240646][ T1216] usb 4-1: Product: syz [ 1705.240661][ T1216] usb 4-1: Manufacturer: syz [ 1705.240676][ T1216] usb 4-1: SerialNumber: syz [ 1705.549430][ T1216] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 1705.549457][ T1216] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 1705.575954][ T1216] usb 4-1: USB disconnect, device number 73 [ 1705.685022][T23461] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1705.826543][ T31] audit: type=1400 audit(1789983650.810:8263): avc: denied { mount } for pid=24631 comm="syz.5.4982" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1705.860460][T23461] usb 3-1: Using ep0 maxpacket: 8 [ 1705.871525][T23461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1705.871564][T23461] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1705.872669][T23461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.872715][T23461] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1705.922175][T23461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.922201][T23461] usb 3-1: Product: syz [ 1705.922221][T23461] usb 3-1: Manufacturer: syz [ 1705.922242][T23461] usb 3-1: SerialNumber: syz [ 1706.172203][T23461] usb 3-1: can't set first interface for hiFace device. [ 1706.172235][T23461] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1706.194799][T23461] usb 3-1: USB disconnect, device number 59 [ 1706.416579][ T31] audit: type=1400 audit(1789983651.400:8264): avc: denied { open } for pid=24643 comm="syz.7.4987" path="/dev/ptyr3" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1706.417997][ T31] audit: type=1400 audit(1789983651.400:8265): avc: denied { ioctl } for pid=24643 comm="syz.7.4987" path="/dev/ptyr3" dev="devtmpfs" ino=138 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1707.584872][ T31] audit: type=1400 audit(1789983652.560:8266): avc: denied { unmount } for pid=17891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1707.642136][T24649] Bluetooth: MGMT ver 1.23 [ 1707.684524][T23461] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1707.792469][T24651] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1707.854165][T23461] usb 3-1: Using ep0 maxpacket: 8 [ 1707.863032][T23461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1707.863061][T23461] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1707.890531][T23461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.890654][T23461] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1707.922025][T23461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.922036][T23461] usb 3-1: Product: syz [ 1707.922045][T23461] usb 3-1: Manufacturer: syz [ 1707.922053][T23461] usb 3-1: SerialNumber: syz [ 1708.192992][ T31] audit: type=1400 audit(1789983653.170:8267): avc: denied { cmd } for pid=24656 comm="iou-wrk-24662" path="socket:[122428]" dev="sockfs" ino=122428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1708.234158][ C1] net_ratelimit: 27 callbacks suppressed [ 1708.329956][ T31] audit: type=1400 audit(1789983653.310:8268): avc: denied { create } for pid=24667 comm="syz.3.4995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1708.354203][ T31] audit: type=1400 audit(1789983653.320:8269): avc: denied { mmap_zero } for pid=24667 comm="syz.3.4995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1708.382849][T23461] usb 3-1: can't set first interface for hiFace device. [ 1708.382876][T23461] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1708.436418][T23461] usb 3-1: USB disconnect, device number 60 [ 1708.928760][ T31] audit: type=1400 audit(1789983653.910:8270): avc: denied { bind } for pid=24680 comm="syz.3.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1709.156446][T24683] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4999'. [ 1709.159520][T24683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4999'. [ 1709.246032][ T31] audit: type=1400 audit(1789983654.140:8271): avc: denied { write } for pid=24680 comm="syz.3.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1709.246203][ T31] audit: type=1400 audit(1789983654.140:8272): avc: denied { nlmsg_write } for pid=24680 comm="syz.3.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1710.821636][ T31] audit: type=1400 audit(1789983655.800:8273): avc: denied { map } for pid=24695 comm="syz.6.5005" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1712.673678][T24718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5010'. [ 1712.677149][ T31] audit: type=1400 audit(1789983657.650:8274): avc: denied { setopt } for pid=24713 comm="syz.2.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1713.275256][T23666] net_ratelimit: 34 callbacks suppressed [ 1713.382315][T24724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1714.379362][ T31] audit: type=1400 audit(1789983659.300:8275): avc: denied { write } for pid=24734 comm="syz.2.5018" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1714.379407][ T31] audit: type=1400 audit(1789983659.300:8276): avc: denied { open } for pid=24734 comm="syz.2.5018" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1714.379449][ T31] audit: type=1400 audit(1789983659.300:8277): avc: denied { ioctl } for pid=24734 comm="syz.2.5018" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1714.535490][ T1216] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1714.687414][ T1216] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1714.706252][ T1216] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1714.706281][ T1216] usb 6-1: config 0 has no interface number 0 [ 1714.706319][ T1216] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1714.712621][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.712641][ T1216] usb 6-1: Product: syz [ 1714.712656][ T1216] usb 6-1: Manufacturer: syz [ 1714.712671][ T1216] usb 6-1: SerialNumber: syz [ 1714.769668][ T1216] usb 6-1: config 0 descriptor?? [ 1714.833162][ T31] audit: type=1400 audit(1789983659.810:8278): avc: denied { setopt } for pid=24740 comm="syz.7.5021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1715.092927][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5021'. [ 1715.568408][ T1216] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1716.225654][T24749] slcan: can't register candev [ 1716.242422][ T1216] usb 6-1: USB disconnect, device number 86 [ 1716.410756][ T31] audit: type=1326 audit(1789983661.390:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24750 comm="syz.6.5024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1716.410802][ T31] audit: type=1326 audit(1789983661.390:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24750 comm="syz.6.5024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1716.411851][ T31] audit: type=1326 audit(1789983661.390:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24750 comm="syz.6.5024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1716.411896][ T31] audit: type=1326 audit(1789983661.390:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24750 comm="syz.6.5024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1716.411939][ T31] audit: type=1326 audit(1789983661.390:8283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24750 comm="syz.6.5024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1716.413177][T22383] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1717.895156][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1717.895201][ T31] audit: type=1400 audit(1789983662.880:8287): avc: denied { name_connect } for pid=24769 comm="syz.5.5032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1717.967583][ T31] audit: type=1400 audit(1789983662.940:8288): avc: denied { shutdown } for pid=24769 comm="syz.5.5032" lport=41946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1718.314344][ C1] net_ratelimit: 33 callbacks suppressed [ 1718.489822][ T31] audit: type=1400 audit(1789983663.470:8289): avc: denied { unlink } for pid=24780 comm="syz.6.5035" name="#3" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1718.854195][ T5743] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1719.936313][ T5743] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1719.938185][ T5743] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1719.938206][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.938226][ T5743] usb 3-1: config 0 has no interface number 0 [ 1719.938260][ T5743] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1719.938286][ T5743] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 1719.938311][ T5743] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1719.938339][ T5743] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1719.947602][ T5743] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1719.947624][ T5743] usb 3-1: Product: syz [ 1719.947640][ T5743] usb 3-1: Manufacturer: syz [ 1719.947655][ T5743] usb 3-1: SerialNumber: syz [ 1719.975786][ T5743] usb 3-1: config 0 descriptor?? [ 1720.310269][T24797] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1720.310269][T24797] [ 1720.310619][T24797] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1720.310958][T24797] CIFS: Attempting to mount //127.0.0.1/share [ 1720.471625][ T5743] usb 3-1: Can not set alternate setting to 1, error: -71 [ 1720.471720][ T5743] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1720.686744][ T5743] usb 3-1: USB disconnect, device number 61 [ 1720.700671][T24797] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1720.700700][T24797] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1720.812032][T22383] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1720.812048][T22383] CPU: 1 UID: 0 PID: 22383 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1720.812066][T22383] Tainted: [L]=SOFTLOCKUP [ 1720.812071][T22383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1720.812083][T22383] Workqueue: hci4 hci_rx_work [ 1720.812102][T22383] Call Trace: [ 1720.812107][T22383] [ 1720.812113][T22383] dump_stack_lvl+0x100/0x190 [ 1720.812133][T22383] sysfs_warn_dup.cold+0x1c/0x28 [ 1720.812160][T22383] sysfs_create_dir_ns+0x24b/0x2b0 [ 1720.812177][T22383] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1720.812192][T22383] ? find_held_lock+0x2b/0x80 [ 1720.812208][T22383] ? kobject_add_internal+0x25f/0x930 [ 1720.812221][T22383] ? kobject_add_internal+0x25f/0x930 [ 1720.812239][T22383] kobject_add_internal+0x2c8/0x930 [ 1720.812255][T22383] kobject_add+0x16a/0x1e0 [ 1720.812268][T22383] ? __pfx_kobject_add+0x10/0x10 [ 1720.812280][T22383] ? class_to_subsys+0x10f/0x150 [ 1720.812300][T22383] ? kobject_put+0xb9/0x640 [ 1720.812311][T22383] ? _raw_spin_unlock+0x28/0x50 [ 1720.812330][T22383] device_add+0x294/0x1970 [ 1720.812346][T22383] ? __pfx_dev_set_name+0x10/0x10 [ 1720.812358][T22383] ? __pfx_device_add+0x10/0x10 [ 1720.812374][T22383] ? mgmt_send_event_skb+0x2fb/0x460 [ 1720.812394][T22383] hci_conn_add_sysfs+0x1a3/0x260 [ 1720.812412][T22383] le_conn_complete_evt+0x122f/0x2130 [ 1720.812431][T22383] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1720.812450][T22383] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1720.812465][T22383] ? skb_pull_data+0x15f/0x1e0 [ 1720.812485][T22383] hci_le_meta_evt+0x34a/0x5f0 [ 1720.812501][T22383] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1720.812518][T22383] hci_event_packet+0x51c/0xcd0 [ 1720.812533][T22383] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1720.812550][T22383] ? __pfx_hci_event_packet+0x10/0x10 [ 1720.812569][T22383] ? lockdep_hardirqs_on+0x7d/0x110 [ 1720.812590][T22383] hci_rx_work+0x451/0xfc0 [ 1720.812607][T22383] process_one_work+0xac7/0x1b10 [ 1720.812632][T22383] ? __pfx_process_one_work+0x10/0x10 [ 1720.812654][T22383] ? lock_acquire+0x1d1/0x380 [ 1720.812671][T22383] ? __pfx_hci_rx_work+0x10/0x10 [ 1720.812686][T22383] worker_thread+0x5ef/0xe50 [ 1720.812709][T22383] ? __pfx_worker_thread+0x10/0x10 [ 1720.812727][T22383] ? kthread+0x13a/0x450 [ 1720.812742][T22383] ? __pfx_worker_thread+0x10/0x10 [ 1720.812759][T22383] kthread+0x373/0x450 [ 1720.812774][T22383] ? __pfx_kthread+0x10/0x10 [ 1720.812791][T22383] ret_from_fork+0x730/0xd60 [ 1720.812806][T22383] ? __pfx_ret_from_fork+0x10/0x10 [ 1720.812820][T22383] ? __switch_to+0x800/0x10f0 [ 1720.812837][T22383] ? __pfx_kthread+0x10/0x10 [ 1720.812854][T22383] ret_from_fork_asm+0x1a/0x30 [ 1720.812876][T22383] [ 1720.812909][T22383] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1720.812931][T22383] Bluetooth: hci4: failed to register connection device [ 1722.040804][T22383] Bluetooth: hci0: command 0x0406 tx timeout [ 1723.434161][ C0] net_ratelimit: 62 callbacks suppressed [ 1724.659319][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5049'. [ 1724.900262][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.900309][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1725.559059][T24857] syz_tun: entered allmulticast mode [ 1725.616207][T24857] pimreg: entered allmulticast mode [ 1725.641452][T24855] syz_tun: left allmulticast mode [ 1726.194927][ T31] audit: type=1400 audit(1789983671.170:8290): avc: denied { ioctl } for pid=24874 comm="syz.5.5062" path="socket:[123257]" dev="sockfs" ino=123257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1726.195086][ T31] audit: type=1400 audit(1789983671.170:8291): avc: denied { bind } for pid=24874 comm="syz.5.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1726.195163][ T31] audit: type=1400 audit(1789983671.170:8292): avc: denied { connect } for pid=24874 comm="syz.5.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1726.195242][ T31] audit: type=1400 audit(1789983671.170:8293): avc: denied { write } for pid=24874 comm="syz.5.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1728.474162][ C1] net_ratelimit: 30 callbacks suppressed [ 1729.775209][ T30] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1730.025294][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 1730.026073][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1730.027350][ T30] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1730.027374][ T30] usb 3-1: config 0 has no interface number 0 [ 1730.029869][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.029889][ T30] usb 3-1: Product: syz [ 1730.029905][ T30] usb 3-1: Manufacturer: syz [ 1730.029920][ T30] usb 3-1: SerialNumber: syz [ 1730.077981][ T30] usb 3-1: config 0 descriptor?? [ 1730.446365][T13601] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1730.957893][ T30] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1731.105679][ T31] audit: type=1400 audit(1789983676.090:8294): avc: denied { ioctl } for pid=24940 comm="syz.3.5086" path="socket:[124150]" dev="sockfs" ino=124150 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1731.159933][ T30] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1731.160136][ T30] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1731.180438][ T30] usb 3-1: USB disconnect, device number 62 [ 1731.833786][T24953] FAULT_INJECTION: forcing a failure. [ 1731.833786][T24953] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.833818][T24953] CPU: 0 UID: 0 PID: 24953 Comm: syz.2.5090 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.833847][T24953] Tainted: [L]=SOFTLOCKUP [ 1731.833856][T24953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1731.833869][T24953] Call Trace: [ 1731.833876][T24953] [ 1731.833885][T24953] dump_stack_lvl+0x100/0x190 [ 1731.833922][T24953] should_fail_ex.cold+0x5/0xa [ 1731.833952][T24953] should_failslab+0xc2/0x120 [ 1731.833982][T24953] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1731.834007][T24953] ? vm_area_dup+0x27/0x9d0 [ 1731.834040][T24953] vm_area_dup+0x27/0x9d0 [ 1731.834073][T24953] __split_vma+0x19c/0x1de0 [ 1731.834108][T24953] ? __pfx___split_vma+0x10/0x10 [ 1731.834136][T24953] ? can_vma_merge_after+0x2b5/0x6f0 [ 1731.834178][T24953] vma_modify+0x137b/0x29b0 [ 1731.834218][T24953] ? find_held_lock+0x2b/0x80 [ 1731.834248][T24953] ? __pfx_vma_modify+0x10/0x10 [ 1731.834280][T24953] ? rcu_is_watching+0x13/0xc0 [ 1731.834308][T24953] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1731.834334][T24953] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1731.834371][T24953] vma_modify_flags+0x2c3/0x460 [ 1731.834403][T24953] ? __pfx_vma_modify_flags+0x10/0x10 [ 1731.834447][T24953] ? avc_has_perm_noaudit+0x11e/0x470 [ 1731.834476][T24953] ? __pfx_ima_file_mprotect+0x10/0x10 [ 1731.834506][T24953] mprotect_fixup+0x27a/0xe00 [ 1731.834541][T24953] ? __pfx_mprotect_fixup+0x10/0x10 [ 1731.834589][T24953] ? selinux_file_mprotect+0x152/0x6c0 [ 1731.834626][T24953] do_mprotect_pkey+0xa51/0xdd0 [ 1731.834674][T24953] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1731.834702][T24953] ? ksys_write+0x190/0x250 [ 1731.834735][T24953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1731.834789][T24953] __x64_sys_mprotect+0x78/0xc0 [ 1731.834817][T24953] ? lockdep_hardirqs_on+0x7d/0x110 [ 1731.834846][T24953] do_syscall_64+0x123/0x790 [ 1731.834878][T24953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.834899][T24953] RIP: 0033:0x7f1947f9e159 [ 1731.834917][T24953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.834936][T24953] RSP: 002b:00007f1948d88028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1731.834957][T24953] RAX: ffffffffffffffda RBX: 00007f1948225fa0 RCX: 00007f1947f9e159 [ 1731.834972][T24953] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 1731.834986][T24953] RBP: 00007f194803506b R08: 0000000000000000 R09: 0000000000000000 [ 1731.834999][T24953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1731.835011][T24953] R13: 00007f1948226038 R14: 00007f1948225fa0 R15: 00007ffe2ebd3168 [ 1731.835042][T24953] [ 1732.247445][T24958] binder: BINDER_SET_CONTEXT_MGR already set [ 1732.247474][T24958] binder: 24957:24958 ioctl 4018620d 200000001000 returned -16 [ 1732.290663][ T31] audit: type=1326 audit(1789983677.270:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24961 comm="syz.3.5094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50bcf9e159 code=0x0 [ 1732.428609][ T31] audit: type=1400 audit(1789983677.410:8296): avc: denied { read write } for pid=24967 comm="syz.2.5097" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1732.428976][ T31] audit: type=1400 audit(1789983677.410:8297): avc: denied { open } for pid=24967 comm="syz.2.5097" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1732.480773][ T5601] Bluetooth: hci6: command 0x0406 tx timeout [ 1732.534968][ T31] audit: type=1400 audit(1789983677.520:8298): avc: denied { map } for pid=24967 comm="syz.2.5097" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1732.535015][ T31] audit: type=1400 audit(1789983677.520:8299): avc: denied { execute } for pid=24967 comm="syz.2.5097" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1732.729204][ T31] audit: type=1400 audit(1789983677.710:8300): avc: denied { create } for pid=24961 comm="syz.3.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1733.834499][ C1] net_ratelimit: 36 callbacks suppressed [ 1733.975305][ T30] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1734.128928][ T30] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1734.131108][ T30] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1734.131131][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.131150][ T30] usb 6-1: config 0 has no interface number 0 [ 1734.131189][ T30] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1734.131218][ T30] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 1734.131246][ T30] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1734.131272][ T30] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1734.133575][ T30] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1734.133596][ T30] usb 6-1: Product: syz [ 1734.133613][ T30] usb 6-1: Manufacturer: syz [ 1734.133629][ T30] usb 6-1: SerialNumber: syz [ 1734.162285][ T30] usb 6-1: config 0 descriptor?? [ 1734.554402][T13601] Bluetooth: hci6: command 0x0406 tx timeout [ 1734.560910][ T30] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input84 [ 1734.627535][ T31] audit: type=1400 audit(1789983679.610:8301): avc: denied { read } for pid=4953 comm="acpid" name="mouse1" dev="devtmpfs" ino=6136 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1734.627949][ T31] audit: type=1400 audit(1789983679.610:8302): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=6136 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1734.628723][ T31] audit: type=1400 audit(1789983679.610:8303): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=6136 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1734.858329][ T30] usb 6-1: USB disconnect, device number 87 [ 1734.858444][ C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1737.094936][T12675] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1737.274433][T12675] usb 3-1: Using ep0 maxpacket: 8 [ 1737.276956][T12675] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice= 1.00 [ 1737.282262][T12675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.471580][T12675] usb 3-1: config 0 descriptor?? [ 1737.635110][T12675] pwc: Philips PCA645VC USB webcam detected. [ 1737.868397][T12675] pwc: send_video_command error -71 [ 1737.868415][T12675] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1737.868497][T12675] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1737.915450][T12675] usb 3-1: USB disconnect, device number 63 [ 1738.384170][T12675] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1738.594196][T12675] usb 3-1: Using ep0 maxpacket: 32 [ 1738.618030][T12675] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1738.787701][T12675] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1738.857465][T12675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.857485][T12675] usb 3-1: Product: syz [ 1738.857499][T12675] usb 3-1: Manufacturer: syz [ 1738.857513][T12675] usb 3-1: SerialNumber: syz [ 1738.954194][ C0] net_ratelimit: 79 callbacks suppressed [ 1739.218235][T12675] usb 3-1: config 0 descriptor?? [ 1739.257563][T25033] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1739.262994][T12675] hub 3-1:0.0: bad descriptor, ignoring hub [ 1739.263012][T12675] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1739.286444][T12675] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input85 [ 1739.589663][ T5701] usb 3-1: USB disconnect, device number 64 [ 1739.589784][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1739.676155][ T31] audit: type=1400 audit(1789983684.660:8304): avc: denied { mount } for pid=25058 comm="syz.5.5134" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1739.693497][ T31] audit: type=1400 audit(1789983684.670:8305): avc: denied { search } for pid=25058 comm="syz.5.5134" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.693538][ T31] audit: type=1400 audit(1789983684.670:8306): avc: denied { search } for pid=25058 comm="syz.5.5134" name="usb_gadget" dev="configfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.699633][ T31] audit: type=1400 audit(1789983684.670:8307): avc: denied { search } for pid=25058 comm="syz.5.5134" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.699676][ T31] audit: type=1400 audit(1789983684.670:8308): avc: denied { search } for pid=25058 comm="syz.5.5134" name="usb_gadget" dev="configfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.699714][ T31] audit: type=1400 audit(1789983684.670:8309): avc: denied { search } for pid=25058 comm="syz.5.5134" name="g1" dev="configfs" ino=21063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.703362][ T31] audit: type=1400 audit(1789983684.670:8310): avc: denied { search } for pid=25058 comm="syz.5.5134" name="functions" dev="configfs" ino=21064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.703408][ T31] audit: type=1400 audit(1789983684.670:8311): avc: denied { write search } for pid=25058 comm="syz.5.5134" name="functions" dev="configfs" ino=21064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.703446][ T31] audit: type=1400 audit(1789983684.670:8312): avc: denied { add_name } for pid=25058 comm="syz.5.5134" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1739.703484][ T31] audit: type=1400 audit(1789983684.670:8313): avc: denied { create } for pid=25058 comm="syz.5.5134" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1739.950315][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5136'. [ 1741.023137][T13601] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1742.148810][T25103] 9p: Bad value for 'wfdno' [ 1742.276268][T25106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5151'. [ 1742.601823][T25111] binder: 25107:25111 ioctl 400c620e 200000000440 returned -22 [ 1742.905683][T25116] CacheFiles: Failed to register: -95 [ 1743.039998][T13601] Bluetooth: hci4: command 0x2016 tx timeout [ 1744.234152][ C1] net_ratelimit: 43 callbacks suppressed [ 1744.664172][T25119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1745.086825][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 1745.086838][ T31] audit: type=1400 audit(1789983690.070:8334): avc: denied { write } for pid=25133 comm="syz.5.5161" name="subsystems" dev="configfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1745.224485][T13601] Bluetooth: hci4: command 0x2016 tx timeout [ 1745.353572][T25138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.056934][T25187] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1749.269055][T25186] net_ratelimit: 27 callbacks suppressed [ 1749.528578][ T31] audit: type=1800 audit(1789983694.510:8335): pid=25157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5168" name="file0" dev="sda1" ino=2065 res=0 errno=0 [ 1750.193353][T25196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3587 sclass=netlink_route_socket pid=25196 comm=syz.3.5173 [ 1750.283769][T25193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1750.541982][T25193] bond1 (unregistering): Released all slaves [ 1753.300070][ T31] audit: type=1400 audit(1789983698.280:8336): avc: denied { name_bind } for pid=25222 comm="syz.7.5180" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1753.329735][ T31] audit: type=1400 audit(1789983698.310:8337): avc: denied { cmd } for pid=25220 comm="syz.6.5181" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1754.277796][ T5704] net_ratelimit: 53 callbacks suppressed [ 1755.113383][T25256] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5190'. [ 1755.326365][ T31] audit: type=1400 audit(1789983700.300:8338): avc: denied { read write } for pid=25259 comm="syz.3.5194" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1755.326408][ T31] audit: type=1400 audit(1789983700.300:8339): avc: denied { open } for pid=25259 comm="syz.3.5194" path="/452/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1756.898692][T25289] syz_tun: entered allmulticast mode [ 1758.144021][T25304] overlayfs: failed to resolve './bus': -2 [ 1758.298602][T25310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5210'. [ 1758.298698][ T31] audit: type=1400 audit(1789983703.280:8340): avc: denied { write } for pid=25309 comm="syz.2.5210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1758.344645][T12675] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1758.684598][T12675] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1758.722152][T12675] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1758.722176][T12675] usb 4-1: config 1 has no interface number 0 [ 1758.814745][T12675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.814765][T12675] usb 4-1: Product: syz [ 1758.814781][T12675] usb 4-1: Manufacturer: syz [ 1758.814796][T12675] usb 4-1: SerialNumber: syz [ 1758.911287][T25320] syz_tun: entered allmulticast mode [ 1759.229775][T12675] usb 4-1: 3:0 : does not exist [ 1759.229791][T12675] usb 4-1: 3:0 : does not exist [ 1759.594174][ C1] net_ratelimit: 40 callbacks suppressed [ 1759.735712][ T31] audit: type=1400 audit(1789983704.690:8341): avc: denied { create } for pid=25301 comm="syz.3.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1760.251610][T12675] usb 4-1: USB disconnect, device number 74 [ 1760.309300][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1760.388253][T25333] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5219'. [ 1760.473242][T25335] overlayfs: failed to resolve './bus': -2 [ 1762.301542][T25359] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5230'. [ 1764.284450][T12675] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1764.434363][T12675] usb 6-1: Using ep0 maxpacket: 8 [ 1764.436650][T12675] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1764.456873][T12675] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1764.456927][T12675] usb 6-1: config 0 has no interface number 0 [ 1764.457166][T12675] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1764.457220][T12675] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1764.457276][T12675] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1764.457334][T12675] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1764.457502][T12675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.604626][T12675] usb 6-1: config 0 descriptor?? [ 1764.759733][T12675] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1765.034174][ C0] net_ratelimit: 180 callbacks suppressed [ 1765.419471][T12675] usb 6-1: USB disconnect, device number 88 [ 1765.419621][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1765.514619][T12675] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1767.156357][T25395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1769.857672][T25435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1770.874148][ C1] net_ratelimit: 61 callbacks suppressed [ 1771.009324][ T31] audit: type=1400 audit(1789983715.990:8342): avc: denied { setopt } for pid=25458 comm="syz.3.5266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1771.233456][T25469] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5268'. [ 1771.543549][T25482] ip_tables: iptables: counters copy to user failed while replacing table [ 1771.555843][T25475] tipc: Started in network mode [ 1771.555872][T25475] tipc: Node identity 86e34c9dc0a5, cluster identity 4711 [ 1771.566018][T25475] tipc: Enabled bearer , priority 0 [ 1771.586826][T25475] tipc: Resetting bearer [ 1771.712851][T25474] tipc: Disabling bearer [ 1771.829041][ T31] audit: type=1326 audit(1789983716.810:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1771.829086][ T31] audit: type=1326 audit(1789983716.810:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1771.830444][ T31] audit: type=1326 audit(1789983716.810:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1771.830680][ T31] audit: type=1326 audit(1789983716.810:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1771.831968][ T31] audit: type=1326 audit(1789983716.810:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1771.833176][ T31] audit: type=1326 audit(1789983716.810:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1771.841947][ T31] audit: type=1326 audit(1789983716.820:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1771.846642][ T31] audit: type=1326 audit(1789983716.830:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1771.847851][ T31] audit: type=1326 audit(1789983716.830:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.5278" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1775.303925][T25508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1775.994143][ C0] net_ratelimit: 42 callbacks suppressed [ 1776.015509][ T31] kauditd_printk_skb: 389 callbacks suppressed [ 1776.015523][ T31] audit: type=1326 audit(1789983721.000:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.017097][ T31] audit: type=1326 audit(1789983721.000:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.020209][ T31] audit: type=1326 audit(1789983721.000:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.021588][ T31] audit: type=1326 audit(1789983721.000:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.022772][ T31] audit: type=1326 audit(1789983721.000:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.026389][ T31] audit: type=1326 audit(1789983721.000:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.060910][ T31] audit: type=1326 audit(1789983721.010:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.060956][ T31] audit: type=1326 audit(1789983721.010:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.060995][ T31] audit: type=1326 audit(1789983721.010:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.061040][ T31] audit: type=1326 audit(1789983721.010:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25547 comm="syz.2.5297" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1776.872530][T25601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5301'. [ 1778.379609][T25629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5313'. [ 1780.549811][T25659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5327'. [ 1780.924478][T25667] jffs2: notice: (25667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1781.075185][ T31] kauditd_printk_skb: 564 callbacks suppressed [ 1781.075198][ T31] audit: type=1400 audit(1789983726.060:9315): avc: denied { read write open } for pid=25665 comm="syz.6.5329" path="/112/mnt/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1781.204409][ C0] net_ratelimit: 47 callbacks suppressed [ 1782.424361][ T5701] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1782.577364][ T5701] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1782.601327][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1782.601356][ T5701] usb 3-1: Product: syz [ 1782.601426][ T5701] usb 3-1: SerialNumber: syz [ 1783.129986][ T5701] usb 3-1: config 0 descriptor?? [ 1783.257266][ T31] audit: type=1326 audit(1789983728.240:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1783.257536][ T31] audit: type=1326 audit(1789983728.240:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8319e159 code=0x7ffc0000 [ 1783.259429][ T31] audit: type=1326 audit(1789983728.240:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.349169][ T31] audit: type=1326 audit(1789983728.330:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.351850][ T31] audit: type=1326 audit(1789983728.330:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.353162][ T31] audit: type=1326 audit(1789983728.330:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.355085][ T31] audit: type=1326 audit(1789983728.340:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.356371][ T31] audit: type=1326 audit(1789983728.340:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.357649][ T31] audit: type=1326 audit(1789983728.340:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.5334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f8315e98e code=0x7ffc0000 [ 1783.526742][ T5701] usb 3-1: USB disconnect, device number 65 [ 1784.936134][T25692] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5338'. [ 1785.873428][T13601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1785.894621][T13601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1785.899323][T13601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1785.900754][T13601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1785.901667][T13601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1786.317009][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.317070][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.554175][ C0] net_ratelimit: 28 callbacks suppressed [ 1786.757696][ T31] kauditd_printk_skb: 160 callbacks suppressed [ 1786.757710][ T31] audit: type=1326 audit(1789983731.740:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.758234][ T31] audit: type=1326 audit(1789983731.740:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.760508][ T31] audit: type=1326 audit(1789983731.740:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1786.847557][ T31] audit: type=1326 audit(1789983731.830:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.847773][ T31] audit: type=1326 audit(1789983731.830:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.848166][ T31] audit: type=1326 audit(1789983731.830:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.848678][ T31] audit: type=1326 audit(1789983731.830:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.848886][ T31] audit: type=1326 audit(1789983731.830:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1786.849292][ T31] audit: type=1326 audit(1789983731.830:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1786.849548][ T5601] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1786.849748][ T31] audit: type=1326 audit(1789983731.830:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25729 comm="syz.2.5347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1787.700253][T25699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.700398][T25699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.700536][T25699] bridge_slave_0: entered allmulticast mode [ 1787.727668][T25699] bridge_slave_0: entered promiscuous mode [ 1787.739313][T25699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.739450][T25699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.739596][T25699] bridge_slave_1: entered allmulticast mode [ 1787.758640][T25699] bridge_slave_1: entered promiscuous mode [ 1787.851883][T25699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.865452][T25699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.926426][T25699] team0: Port device team_slave_0 added [ 1787.929486][T25699] team0: Port device team_slave_1 added [ 1787.989290][T25699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.989301][T25699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.989376][T25699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.991293][T25699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.991304][T25699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.991324][T25699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.001399][ T5601] Bluetooth: hci5: command tx timeout [ 1788.258844][T25699] hsr_slave_0: entered promiscuous mode [ 1788.259521][T25699] hsr_slave_1: entered promiscuous mode [ 1788.260145][T25699] debugfs: 'hsr0' already exists in 'hsr' [ 1788.260159][T25699] Cannot create hsr debugfs directory [ 1788.686977][T25701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1788.835233][ T5701] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1788.997942][ T5701] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1789.005326][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1789.005347][ T5701] usb 3-1: Product: syz [ 1789.005363][ T5701] usb 3-1: SerialNumber: syz [ 1789.037258][ T5701] usb 3-1: config 0 descriptor?? [ 1789.141991][T25699] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1789.158801][T25699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1789.159473][T25699] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1789.188623][T25699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1790.085434][ T5601] Bluetooth: hci5: command tx timeout [ 1790.139079][ T5701] usb 3-1: USB disconnect, device number 66 [ 1790.200966][T25699] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1790.239942][T25699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1790.252922][T25699] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1790.284724][T25699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1790.947329][T25699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.977764][T25699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.008365][T25578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.008456][T25578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.059939][T25557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.060045][T25557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.127806][T25699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1791.569437][ T5601] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1791.994344][ C0] net_ratelimit: 64 callbacks suppressed [ 1792.037615][T25699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.165044][ T5601] Bluetooth: hci5: command tx timeout [ 1792.599868][T25699] veth0_vlan: entered promiscuous mode [ 1792.620610][T25699] veth1_vlan: entered promiscuous mode [ 1792.682581][T25699] veth0_macvtap: entered promiscuous mode [ 1792.691877][T25699] veth1_macvtap: entered promiscuous mode [ 1792.716256][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1792.716269][ T31] audit: type=1400 audit(1789983737.700:9507): avc: denied { ioctl } for pid=25808 comm="syz.2.5362" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1792.731124][T25699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1792.748460][T25699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1792.784893][T15298] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.784940][T15298] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.784972][T15298] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.785003][T15298] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.864302][T12678] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1794.035031][T12678] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1794.036497][T12678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.036518][T12678] usb 3-1: config 0 has no interfaces? [ 1794.040567][T12678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.040586][T12678] usb 3-1: Product: syz [ 1794.040600][T12678] usb 3-1: Manufacturer: syz [ 1794.040613][T12678] usb 3-1: SerialNumber: syz [ 1794.045376][T12678] usb 3-1: config 0 descriptor?? [ 1794.244606][ T5601] Bluetooth: hci5: command tx timeout [ 1795.220157][T25800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1795.622579][ T31] audit: type=1326 audit(1789983740.600:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.623336][ T31] audit: type=1326 audit(1789983740.600:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.680451][ T31] audit: type=1326 audit(1789983740.660:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50bcf5e98e code=0x7ffc0000 [ 1795.680807][ T31] audit: type=1326 audit(1789983740.660:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.682976][ T31] audit: type=1326 audit(1789983740.660:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.765442][ T31] audit: type=1326 audit(1789983740.730:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.765490][ T31] audit: type=1326 audit(1789983740.730:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.765533][ T31] audit: type=1326 audit(1789983740.730:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.3.5369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bcf9e159 code=0x7ffc0000 [ 1795.891717][T25569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.891726][T25569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.291101][T15298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.291138][T15298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.034148][ C1] net_ratelimit: 242 callbacks suppressed [ 1797.374209][T12675] usb 3-1: USB disconnect, device number 67 [ 1797.480147][ T31] audit: type=1400 audit(1789983742.460:9516): avc: denied { connect } for pid=25842 comm="syz.2.5374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1799.611626][T25856] FAULT_INJECTION: forcing a failure. [ 1799.611626][T25856] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.611659][T25856] CPU: 0 UID: 0 PID: 25856 Comm: syz.6.5375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1799.611688][T25856] Tainted: [L]=SOFTLOCKUP [ 1799.611696][T25856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1799.611709][T25856] Call Trace: [ 1799.611716][T25856] [ 1799.611725][T25856] dump_stack_lvl+0x100/0x190 [ 1799.611763][T25856] should_fail_ex.cold+0x5/0xa [ 1799.611793][T25856] should_failslab+0xc2/0x120 [ 1799.611822][T25856] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1799.611847][T25856] ? vm_area_dup+0x27/0x9d0 [ 1799.611880][T25856] vm_area_dup+0x27/0x9d0 [ 1799.611921][T25856] __split_vma+0x19c/0x1de0 [ 1799.611957][T25856] ? __pfx___split_vma+0x10/0x10 [ 1799.611986][T25856] ? can_vma_merge_after+0x2b5/0x6f0 [ 1799.612028][T25856] vma_modify+0x137b/0x29b0 [ 1799.612068][T25856] ? find_held_lock+0x2b/0x80 [ 1799.612097][T25856] ? __pfx_vma_modify+0x10/0x10 [ 1799.612128][T25856] ? rcu_is_watching+0x13/0xc0 [ 1799.612155][T25856] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1799.612183][T25856] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1799.612220][T25856] vma_modify_flags+0x2c3/0x460 [ 1799.612252][T25856] ? __pfx_vma_modify_flags+0x10/0x10 [ 1799.612297][T25856] ? avc_has_perm_noaudit+0x11e/0x470 [ 1799.612327][T25856] ? __pfx_ima_file_mprotect+0x10/0x10 [ 1799.612358][T25856] mprotect_fixup+0x27a/0xe00 [ 1799.612391][T25856] ? __pfx_mprotect_fixup+0x10/0x10 [ 1799.612435][T25856] ? selinux_file_mprotect+0x152/0x6c0 [ 1799.612472][T25856] do_mprotect_pkey+0xa51/0xdd0 [ 1799.612512][T25856] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1799.612540][T25856] ? ksys_write+0x190/0x250 [ 1799.612574][T25856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1799.612629][T25856] __x64_sys_mprotect+0x78/0xc0 [ 1799.612657][T25856] ? lockdep_hardirqs_on+0x7d/0x110 [ 1799.612686][T25856] do_syscall_64+0x123/0x790 [ 1799.612721][T25856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.612743][T25856] RIP: 0033:0x7f2f8319e159 [ 1799.612762][T25856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.612782][T25856] RSP: 002b:00007f2f83fd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1799.612803][T25856] RAX: ffffffffffffffda RBX: 00007f2f83425fa0 RCX: 00007f2f8319e159 [ 1799.612818][T25856] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 1799.612830][T25856] RBP: 00007f2f8323506b R08: 0000000000000000 R09: 0000000000000000 [ 1799.612842][T25856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1799.612854][T25856] R13: 00007f2f83426038 R14: 00007f2f83425fa0 R15: 00007ffd0bcc6f48 [ 1799.612890][T25856] [ 1800.002871][ T31] audit: type=1400 audit(1789983744.970:9517): avc: denied { write } for pid=25862 comm="syz.2.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1800.423628][T25870] can0: slcan on ttyS3. [ 1800.799549][T25870] can0 (unregistered): slcan off ttyS3. [ 1802.245440][T25889] FAULT_INJECTION: forcing a failure. [ 1802.245440][T25889] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.245460][T25889] CPU: 0 UID: 0 PID: 25889 Comm: syz.7.5388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.245477][T25889] Tainted: [L]=SOFTLOCKUP [ 1802.245481][T25889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1802.245489][T25889] Call Trace: [ 1802.245493][T25889] [ 1802.245499][T25889] dump_stack_lvl+0x100/0x190 [ 1802.245524][T25889] should_fail_ex.cold+0x5/0xa [ 1802.245542][T25889] should_failslab+0xc2/0x120 [ 1802.245559][T25889] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1802.245573][T25889] ? vm_area_dup+0x27/0x9d0 [ 1802.245592][T25889] vm_area_dup+0x27/0x9d0 [ 1802.245609][T25889] __split_vma+0x19c/0x1de0 [ 1802.245626][T25889] ? down_write+0x146/0x1f0 [ 1802.245640][T25889] ? __pfx___split_vma+0x10/0x10 [ 1802.245664][T25889] ? can_vma_merge_after+0x2b5/0x6f0 [ 1802.245690][T25889] vma_modify+0x137b/0x29b0 [ 1802.245713][T25889] ? find_held_lock+0x2b/0x80 [ 1802.245731][T25889] ? __pfx_vma_modify+0x10/0x10 [ 1802.245749][T25889] ? rcu_is_watching+0x13/0xc0 [ 1802.245765][T25889] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1802.245781][T25889] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1802.245801][T25889] vma_modify_flags+0x2c3/0x460 [ 1802.245819][T25889] ? __pfx_vma_modify_flags+0x10/0x10 [ 1802.245844][T25889] ? avc_has_perm_noaudit+0x11e/0x470 [ 1802.245861][T25889] ? __pfx_ima_file_mprotect+0x10/0x10 [ 1802.245879][T25889] mprotect_fixup+0x27a/0xe00 [ 1802.245899][T25889] ? __pfx_mprotect_fixup+0x10/0x10 [ 1802.245927][T25889] ? selinux_file_mprotect+0x152/0x6c0 [ 1802.245948][T25889] do_mprotect_pkey+0xa51/0xdd0 [ 1802.245970][T25889] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1802.245986][T25889] ? ksys_write+0x190/0x250 [ 1802.246004][T25889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1802.246034][T25889] __x64_sys_mprotect+0x78/0xc0 [ 1802.246050][T25889] ? lockdep_hardirqs_on+0x7d/0x110 [ 1802.246067][T25889] do_syscall_64+0x123/0x790 [ 1802.246085][T25889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.246098][T25889] RIP: 0033:0x7fb62c59e159 [ 1802.246108][T25889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.246120][T25889] RSP: 002b:00007fb62d3b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1802.246132][T25889] RAX: ffffffffffffffda RBX: 00007fb62c825fa0 RCX: 00007fb62c59e159 [ 1802.246140][T25889] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 1802.246148][T25889] RBP: 00007fb62c63506b R08: 0000000000000000 R09: 0000000000000000 [ 1802.246157][T25889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1802.246163][T25889] R13: 00007fb62c826038 R14: 00007fb62c825fa0 R15: 00007ffdcd7f3a38 [ 1802.246180][T25889] [ 1802.317849][ C1] net_ratelimit: 112 callbacks suppressed [ 1802.388954][ T31] audit: type=1400 audit(1789983747.380:9518): avc: denied { search } for pid=25891 comm="syz.2.5389" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1802.390492][ T31] audit: type=1400 audit(1789983747.380:9519): avc: denied { search } for pid=25891 comm="syz.2.5389" name="instances" dev="tracefs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1802.404284][ T31] audit: type=1400 audit(1789983747.380:9520): avc: denied { write search } for pid=25891 comm="syz.2.5389" name="instances" dev="tracefs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1802.409881][ T31] audit: type=1400 audit(1789983747.390:9521): avc: denied { add_name } for pid=25891 comm="syz.2.5389" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1802.421172][ T31] audit: type=1400 audit(1789983747.400:9522): avc: denied { create } for pid=25891 comm="syz.2.5389" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 1803.334868][ T31] audit: type=1400 audit(1789983748.320:9523): avc: denied { unmount } for pid=16571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1803.965237][ T5701] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1804.416167][ T5701] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1804.417185][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.419539][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.419550][ T5701] usb 3-1: Product: syz [ 1804.419558][ T5701] usb 3-1: Manufacturer: syz [ 1804.419567][ T5701] usb 3-1: SerialNumber: syz [ 1805.672788][ T5701] usb 3-1: Cannot retrieve CPort count: -71 [ 1805.672836][ T5701] usb 3-1: Cannot retrieve CPort count: -71 [ 1805.672858][ T5701] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1806.144454][T25910] syz.6.5394 (25910): drop_caches: 2 [ 1806.629173][ T5701] usb 3-1: USB disconnect, device number 68 [ 1807.444167][ C0] net_ratelimit: 3561 callbacks suppressed [ 1807.510222][T25931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25931 comm=syz.6.5400 [ 1808.875264][T22383] Bluetooth: hci4: command 0x2016 tx timeout [ 1810.650874][T25956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1810.741012][ T31] audit: type=1400 audit(1789983755.620:9524): avc: denied { mounton } for pid=25951 comm="syz.8.5409" path="/5/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1811.828968][T25980] CIFS: Attempting to mount //127.0.0.1/share [ 1811.945295][T25946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1812.554170][ C1] net_ratelimit: 44 callbacks suppressed [ 1812.891900][T25980] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1812.907596][T25980] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1812.972311][T25987] syz_tun: entered allmulticast mode [ 1812.982167][T25983] syz_tun: left allmulticast mode [ 1813.324828][ T190] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1813.505215][ T190] usb 3-1: Using ep0 maxpacket: 32 [ 1813.511981][ T190] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1813.538140][ T190] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1813.538655][ T190] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1813.539295][ T190] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1813.539457][ T190] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1813.539722][ T190] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1813.639870][ T190] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1813.639900][ T190] usb 3-1: Product: syz [ 1813.640534][ T190] usb 3-1: Manufacturer: syz [ 1813.640562][ T190] usb 3-1: SerialNumber: syz [ 1813.833709][ T190] usb 3-1: config 0 descriptor?? [ 1813.960282][ T190] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1814.036034][ T190] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1814.554463][ T190] usb 3-1: USB disconnect, device number 69 [ 1814.562439][ T190] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1817.354195][T12675] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1817.523966][T12675] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1817.553635][T12675] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.594204][ C0] net_ratelimit: 38 callbacks suppressed [ 1817.634196][T12675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.634219][T12675] usb 4-1: Product: syz [ 1817.634235][T12675] usb 4-1: Manufacturer: syz [ 1817.635214][T12675] usb 4-1: SerialNumber: syz [ 1817.915857][T12675] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1817.915884][T12675] dvb-usb: bulk message failed: -22 (3/0) [ 1818.995279][T12675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1819.022041][T12675] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1819.022081][T12675] usb 4-1: media controller created [ 1819.163285][T12675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1819.276772][T12675] DVB: Unable to find symbol mt352_attach() [ 1819.276782][T12675] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1819.277731][T12675] dvb-usb: bulk message failed: -22 (3/0) [ 1819.307654][T12675] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1819.328657][T12675] usb 4-1: USB disconnect, device number 75 [ 1819.425009][T12675] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1820.054244][T23461] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1820.185568][T23461] usb 3-1: device descriptor read/64, error -71 [ 1820.523826][T26081] can0: slcan on ttyS3. [ 1820.914233][T23461] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1821.058343][T23461] usb 3-1: device descriptor read/64, error -71 [ 1821.074214][T26081] can0 (unregistered): slcan off ttyS3. [ 1821.192066][T23461] usb usb3-port1: attempt power cycle [ 1821.653310][T23461] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1821.697005][T23461] usb 3-1: device descriptor read/8, error -71 [ 1821.934234][T23461] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1821.965046][T23461] usb 3-1: device descriptor read/8, error -71 [ 1822.074924][T23461] usb usb3-port1: unable to enumerate USB device [ 1823.194158][ C1] net_ratelimit: 1097 callbacks suppressed [ 1823.630863][ T31] audit: type=1400 audit(1789983768.610:9525): avc: denied { write } for pid=26098 comm="syz.8.5460" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1823.630909][ T31] audit: type=1400 audit(1789983768.610:9526): avc: denied { open } for pid=26098 comm="syz.8.5460" path="/19/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1824.136437][ T31] audit: type=1400 audit(1789983769.120:9527): avc: denied { read } for pid=26101 comm="syz.2.5459" path="socket:[127618]" dev="sockfs" ino=127618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1827.773001][ T31] audit: type=1800 audit(1789983772.540:9528): pid=26117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5461" name="file0" dev="sda1" ino=2065 res=0 errno=0 [ 1828.462912][T26143] can0: slcan on ttyS3. [ 1828.554170][ C1] net_ratelimit: 48 callbacks suppressed [ 1828.928836][T26143] can0 (unregistered): slcan off ttyS3. [ 1829.317880][T26128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1830.123897][ T31] audit: type=1400 audit(1789983775.100:9529): avc: denied { connect } for pid=26165 comm="syz.3.5478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1832.891190][T26171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1833.674150][ C0] net_ratelimit: 44 callbacks suppressed [ 1834.541825][T26199] syz_tun: entered allmulticast mode [ 1834.658069][T26199] pimreg: entered allmulticast mode [ 1834.707848][T26197] syz_tun: left allmulticast mode [ 1834.826594][ T31] audit: type=1326 audit(1789983779.800:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.826735][ T31] audit: type=1326 audit(1789983779.810:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.863485][ T31] audit: type=1326 audit(1789983779.820:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1834.863534][ T31] audit: type=1326 audit(1789983779.820:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.863574][ T31] audit: type=1326 audit(1789983779.820:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.863615][ T31] audit: type=1326 audit(1789983779.820:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.863664][ T31] audit: type=1326 audit(1789983779.820:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.863704][ T31] audit: type=1326 audit(1789983779.820:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1947f9e159 code=0x7ffc0000 [ 1834.863751][ T31] audit: type=1326 audit(1789983779.850:9538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26206 comm="syz.2.5493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1947f5e98e code=0x7ffc0000 [ 1835.678386][T26209] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.795585][T26221] 0x000000000000-0x000000010000 : "" [ 1835.956521][T26221] ftl_cs: FTL header not found. [ 1836.076869][ T190] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1836.239616][ T190] usb 3-1: Using ep0 maxpacket: 8 [ 1836.240941][ T190] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1836.260709][ T190] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1836.279863][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.279884][ T190] usb 3-1: Product: syz [ 1836.279899][ T190] usb 3-1: Manufacturer: syz [ 1836.279914][ T190] usb 3-1: SerialNumber: syz [ 1836.312148][ T190] usb 3-1: config 0 descriptor?? [ 1836.656826][T26209] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.891688][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 1836.993375][T26209] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.318975][T26209] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.035287][T25190] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.163616][T15298] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.315154][T25578] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.434404][T15298] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.746621][T12687] usb 3-1: USB disconnect, device number 74 [ 1838.954156][ C1] net_ratelimit: 50 callbacks suppressed [ 1839.018002][T22383] Bluetooth: hci1: command 0x0406 tx timeout [ 1839.103793][T26252] binder: 26250:26252 ioctl 4018620d 0 returned -22 [ 1840.552991][T26270] syz_tun: entered allmulticast mode [ 1840.643146][T26270] pimreg: entered allmulticast mode [ 1840.693420][T26269] syz_tun: left allmulticast mode [ 1841.438003][T26288] 8021q: VLANs not supported on wg0 [ 1842.003118][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1842.003130][ T31] audit: type=1326 audit(1789983786.980:9542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.003363][ T31] audit: type=1326 audit(1789983786.980:9543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.007414][ T31] audit: type=1326 audit(1789983786.990:9544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f692855e98e code=0x7ffc0000 [ 1842.007643][ T31] audit: type=1326 audit(1789983786.990:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.007817][ T31] audit: type=1326 audit(1789983786.990:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.008326][ T31] audit: type=1326 audit(1789983786.990:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.008750][ T31] audit: type=1326 audit(1789983786.990:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.008938][ T31] audit: type=1326 audit(1789983786.990:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.009350][ T31] audit: type=1326 audit(1789983786.990:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f692855e98e code=0x7ffc0000 [ 1842.009612][ T31] audit: type=1326 audit(1789983786.990:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26290 comm="syz.8.5523" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692859e159 code=0x7ffc0000 [ 1842.327594][T26293] binder: 26292:26293 ioctl 4018620d 0 returned -22 [ 1842.724771][ T30] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1843.233652][ T30] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1843.261139][ T30] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1843.261162][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.261181][ T30] usb 3-1: config 0 has no interface number 0 [ 1843.261216][ T30] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1843.261245][ T30] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1843.303904][ T30] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1843.303923][ T30] usb 3-1: Product: syz [ 1843.303937][ T30] usb 3-1: Manufacturer: syz [ 1843.303961][ T30] usb 3-1: SerialNumber: syz [ 1843.830591][ T30] usb 3-1: config 0 descriptor?? [ 1844.074916][ T5601] Bluetooth: hci5: command 0x2016 tx timeout [ 1844.095853][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1844.100879][ T30] usb 3-1: Can not set alternate setting to 1, error: -71 [ 1844.100896][ T30] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1844.108408][ T30] usb 3-1: USB disconnect, device number 75 [ 1844.164196][ C0] net_ratelimit: 45 callbacks suppressed [ 1845.690608][T26320] FAULT_INJECTION: forcing a failure. [ 1845.690608][T26320] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.690650][T26320] CPU: 1 UID: 0 PID: 26320 Comm: syz.2.5533 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.690679][T26320] Tainted: [L]=SOFTLOCKUP [ 1845.690687][T26320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1845.690700][T26320] Call Trace: [ 1845.690708][T26320] [ 1845.690717][T26320] dump_stack_lvl+0x100/0x190 [ 1845.690752][T26320] should_fail_ex.cold+0x5/0xa [ 1845.690783][T26320] should_failslab+0xc2/0x120 [ 1845.690810][T26320] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1845.690835][T26320] ? sock_alloc_inode+0x26/0x2c0 [ 1845.690868][T26320] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1845.690901][T26320] sock_alloc_inode+0x26/0x2c0 [ 1845.690931][T26320] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1845.690962][T26320] alloc_inode+0x68/0x250 [ 1845.690985][T26320] sock_alloc+0x44/0x280 [ 1845.691018][T26320] ? security_socket_create+0x7f/0x250 [ 1845.691042][T26320] __sock_create+0xc2/0x860 [ 1845.691069][T26320] __sys_socket+0x14d/0x260 [ 1845.691091][T26320] ? __pfx___sys_socket+0x10/0x10 [ 1845.691122][T26320] __x64_sys_socket+0x72/0xb0 [ 1845.691142][T26320] ? lockdep_hardirqs_on+0x7d/0x110 [ 1845.691172][T26320] do_syscall_64+0x123/0x790 [ 1845.691205][T26320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.691225][T26320] RIP: 0033:0x7f1947f9e159 [ 1845.691243][T26320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.691263][T26320] RSP: 002b:00007f1948d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1845.691283][T26320] RAX: ffffffffffffffda RBX: 00007f1948225fa0 RCX: 00007f1947f9e159 [ 1845.691297][T26320] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1845.691309][T26320] RBP: 00007f194803506b R08: 0000000000000000 R09: 0000000000000000 [ 1845.691330][T26320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.691343][T26320] R13: 00007f1948226038 R14: 00007f1948225fa0 R15: 00007ffe2ebd3168 [ 1845.691375][T26320] [ 1846.156067][ T5601] Bluetooth: hci5: command 0x2016 tx timeout [ 1846.232813][T26327] binder: 26326:26327 ioctl 4018620d 0 returned -22 [ 1847.760749][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.760802][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.297886][T26312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1848.854004][T26357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1848.854019][T26357] IPv6: NLM_F_CREATE should be set when creating new route [ 1848.947475][T26360] binder: 26354:26360 ioctl c0306201 0 returned -14 [ 1849.212230][T26364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5550'. [ 1849.274155][ C1] net_ratelimit: 48 callbacks suppressed [ 1850.468155][T26382] Device name cannot be null; rc = [-22] [ 1851.330333][T25190] IPVS: starting estimator thread 0... [ 1851.425234][T26389] IPVS: using max 58 ests per chain, 139200 per kthread [ 1851.954774][T12678] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1852.297913][T12678] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1852.535631][T12678] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1852.535657][T12678] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.535678][T12678] usb 9-1: config 0 has no interface number 0 [ 1852.535715][T12678] usb 9-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1852.535759][T12678] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1852.639303][T12678] usb 9-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1852.639324][T12678] usb 9-1: Product: syz [ 1852.639339][T12678] usb 9-1: Manufacturer: syz [ 1852.639354][T12678] usb 9-1: SerialNumber: syz [ 1852.654018][T12678] usb 9-1: config 0 descriptor?? [ 1852.768478][T26397] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1852.768478][T26397] [ 1852.768498][T26397] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1852.768674][T26397] CIFS: Attempting to mount //127.0.0.1/share [ 1853.541471][T12678] usb 9-1: Can not set alternate setting to 1, error: -71 [ 1853.541503][T12678] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1854.277650][T26397] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1854.277676][T26397] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1854.280107][T12678] usb 9-1: USB disconnect, device number 2 [ 1854.313025][T25557] net_ratelimit: 40 callbacks suppressed [ 1854.574556][T12675] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1854.724176][T12675] usb 3-1: Using ep0 maxpacket: 32 [ 1854.725640][T12675] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1854.728301][T12675] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1854.728353][T12675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.732500][T12675] usb 3-1: config 0 descriptor?? [ 1854.782708][T12675] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1854.797487][T12675] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1854.801253][T12675] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1854.801317][T12675] usb 3-1: media controller created [ 1854.900123][T12675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1854.929189][T26407] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1854.929209][T26407] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1854.961471][T12675] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1854.961490][T12675] error writing reg: 0xff, val: 0x00 [ 1854.971270][T26407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1854.971288][T26407] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1855.029073][T26407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1855.029087][T26407] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1855.053359][T26407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1855.053374][T26407] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1855.133842][T12675] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1855.270171][T12687] usb 3-1: USB disconnect, device number 76 [ 1855.423247][T26407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1855.423266][T26407] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1855.477102][T26407] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1855.477117][T26407] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1856.480946][T26423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1856.480959][T26423] IPv6: NLM_F_CREATE should be set when creating new route [ 1856.995882][T12675] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1857.017754][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1857.017769][ T31] audit: type=1400 audit(1789983802.000:9554): avc: denied { read } for pid=26431 comm="syz.3.5571" name="uprobe_events" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1857.276839][T12675] usb 3-1: device descriptor read/64, error -71 [ 1857.514983][T12675] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1857.644235][T12675] usb 3-1: device descriptor read/64, error -71 [ 1857.766740][T12675] usb usb3-port1: attempt power cycle [ 1858.124850][T12675] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1858.146201][T12675] usb 3-1: device descriptor read/8, error -71 [ 1858.325287][ T31] audit: type=1400 audit(1789983803.310:9555): avc: denied { listen } for pid=26454 comm="syz.3.5575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1858.384249][T12675] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1858.406262][T12675] usb 3-1: device descriptor read/8, error -71 [ 1858.514923][T12675] usb usb3-port1: unable to enumerate USB device [ 1859.594149][ C1] net_ratelimit: 92 callbacks suppressed [ 1860.082158][T26464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1860.305175][ T5701] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1860.455282][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 1860.456325][ T5701] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1860.457769][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1860.457820][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.462467][ T5701] usb 3-1: config 0 descriptor?? [ 1860.489564][ T5701] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1860.518577][ T5701] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1860.519199][ T5701] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1860.519249][ T5701] usb 3-1: media controller created [ 1860.812597][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1860.901939][T26443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1861.042052][ T5701] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1861.042067][ T5701] error writing reg: 0xff, val: 0x00 [ 1861.496402][ T5701] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1861.512937][ T5701] usb 3-1: USB disconnect, device number 81 [ 1861.644212][T12678] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1861.774912][T12678] usb 9-1: device descriptor read/64, error -71 [ 1862.037988][T12678] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1862.185404][T12678] usb 9-1: device descriptor read/64, error -71 [ 1862.296292][T12678] usb usb9-port1: attempt power cycle [ 1862.682637][T26500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1862.705296][T12678] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1862.725782][T12678] usb 9-1: device descriptor read/8, error -71 [ 1862.887548][T25578] IPVS: starting estimator thread 0... [ 1862.976725][T26503] IPVS: using max 38 ests per chain, 91200 per kthread [ 1862.976829][T12678] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1863.574521][T12678] usb 9-1: device descriptor read/8, error -71 [ 1863.677848][T26516] overlayfs: missing 'workdir' [ 1863.703810][T12678] usb usb9-port1: unable to enumerate USB device [ 1864.874152][ C1] net_ratelimit: 56 callbacks suppressed [ 1865.164932][ T190] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1865.334344][ T190] usb 3-1: Using ep0 maxpacket: 32 [ 1865.335183][ T190] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1865.336553][ T190] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1865.336583][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.343680][ T190] usb 3-1: config 0 descriptor?? [ 1865.399038][ T190] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1865.452238][ T190] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1865.452615][ T190] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1865.452643][ T190] usb 3-1: media controller created [ 1865.571197][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1865.706913][ T190] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1865.706927][ T190] error writing reg: 0xff, val: 0x00 [ 1865.877284][ T190] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1866.133732][ T190] usb 3-1: USB disconnect, device number 82 [ 1870.088522][T26570] overlayfs: missing 'workdir' [ 1870.154143][ C0] net_ratelimit: 46 callbacks suppressed [ 1870.262825][ T31] audit: type=1800 audit(1789983815.240:9556): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5609" name="file1" dev="sda1" ino=2072 res=0 errno=0 [ 1870.287551][ T31] audit: type=1400 audit(1789983815.270:9557): avc: denied { mounton } for pid=26571 comm="syz.8.5609" path="/50/mnt/file0" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1870.297921][T26572] overlay: ./file0 is not a directory [ 1871.398915][ T31] audit: type=1400 audit(1789983816.380:9558): avc: denied { connect } for pid=26583 comm="syz.6.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1873.832889][T26610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5624'. [ 1874.498610][T26624] Device name cannot be null; rc = [-22] [ 1875.274160][ C0] net_ratelimit: 58 callbacks suppressed [ 1876.209891][ T31] audit: type=1400 audit(1789983821.190:9559): avc: denied { write } for pid=26638 comm="syz.6.5635" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1876.211277][ T31] audit: type=1400 audit(1789983821.190:9560): avc: denied { open } for pid=26638 comm="syz.6.5635" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1876.282747][T26641] ALSA: mixer_oss: invalid OSS volume 'W' [ 1879.357680][T26671] Device name cannot be null; rc = [-22] [ 1879.711766][T26672] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1879.721845][T26672] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1879.821768][T12678] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1879.987060][ T31] audit: type=1400 audit(1789983824.690:9561): avc: denied { firmware_load } for pid=26665 comm="syz.6.5644" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1880.394144][ C0] net_ratelimit: 54 callbacks suppressed [ 1880.501058][T25562] IPVS: starting estimator thread 0... [ 1880.797896][T12678] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1880.823742][T12678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.845246][T26676] IPVS: using max 34 ests per chain, 81600 per kthread [ 1880.894848][T12678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.894868][T12678] usb 3-1: Product: syz [ 1880.894883][T12678] usb 3-1: Manufacturer: syz [ 1880.894899][T12678] usb 3-1: SerialNumber: syz [ 1881.265589][T12678] snd-usb-6fire 3-1:1.0: unable to receive device firmware state. [ 1881.265608][T12678] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 1881.663375][T12683] usb 3-1: USB disconnect, device number 83 [ 1883.412702][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5650'. [ 1883.432027][ T31] audit: type=1400 audit(1789983828.410:9562): avc: denied { read } for pid=26692 comm="syz.2.5650" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1885.754150][ C1] net_ratelimit: 56 callbacks suppressed [ 1888.353593][T26729] FAULT_INJECTION: forcing a failure. [ 1888.353593][T26729] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.353626][T26729] CPU: 0 UID: 0 PID: 26729 Comm: syz.2.5665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.353657][T26729] Tainted: [L]=SOFTLOCKUP [ 1888.353666][T26729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1888.353679][T26729] Call Trace: [ 1888.353687][T26729] [ 1888.353697][T26729] dump_stack_lvl+0x100/0x190 [ 1888.353732][T26729] should_fail_ex.cold+0x5/0xa [ 1888.353764][T26729] should_failslab+0xc2/0x120 [ 1888.353794][T26729] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1888.353820][T26729] ? security_file_alloc+0x34/0x2c0 [ 1888.353853][T26729] security_file_alloc+0x34/0x2c0 [ 1888.353880][T26729] init_file+0x95/0x480 [ 1888.353909][T26729] alloc_empty_file+0x79/0x1c0 [ 1888.353939][T26729] alloc_file_pseudo+0x183/0x290 [ 1888.353970][T26729] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1888.354001][T26729] ? _raw_spin_unlock+0x28/0x50 [ 1888.354028][T26729] ? alloc_fd+0x471/0x7a0 [ 1888.354057][T26729] __anon_inode_getfile+0xe8/0x280 [ 1888.354086][T26729] __anon_inode_getfd+0x5c/0xe0 [ 1888.354113][T26729] kvm_vm_ioctl+0x24ec/0x42d0 [ 1888.354152][T26729] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1888.354198][T26729] ? kasan_quarantine_put+0x104/0x240 [ 1888.354221][T26729] ? lockdep_hardirqs_on+0x7d/0x110 [ 1888.354251][T26729] ? find_held_lock+0x2b/0x80 [ 1888.354286][T26729] ? tomoyo_path_number_perm+0x28f/0x580 [ 1888.354309][T26729] ? tomoyo_path_number_perm+0x28f/0x580 [ 1888.354338][T26729] ? tomoyo_path_number_perm+0x188/0x580 [ 1888.354363][T26729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1888.354388][T26729] ? __pfx_futex_wait+0x10/0x10 [ 1888.354416][T26729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1888.354443][T26729] ? do_vfs_ioctl+0x226/0x13e0 [ 1888.354466][T26729] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1888.354486][T26729] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1888.354514][T26729] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1888.354544][T26729] ? __fget_files+0x34/0x3d0 [ 1888.354583][T26729] ? selinux_file_ioctl+0x13b/0x290 [ 1888.354606][T26729] ? selinux_file_ioctl+0xb6/0x290 [ 1888.354632][T26729] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1888.354657][T26729] __x64_sys_ioctl+0x18e/0x210 [ 1888.354682][T26729] do_syscall_64+0x123/0x790 [ 1888.354715][T26729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.354737][T26729] RIP: 0033:0x7f1947f9e159 [ 1888.354755][T26729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.354775][T26729] RSP: 002b:00007f1948d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1888.354797][T26729] RAX: ffffffffffffffda RBX: 00007f1948225fa0 RCX: 00007f1947f9e159 [ 1888.354812][T26729] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1888.354826][T26729] RBP: 00007f194803506b R08: 0000000000000000 R09: 0000000000000000 [ 1888.354841][T26729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.354854][T26729] R13: 00007f1948226038 R14: 00007f1948225fa0 R15: 00007ffe2ebd3168 [ 1888.354887][T26729] [ 1888.399730][T26701] infiniband syz1: set active [ 1888.399807][T26701] infiniband syz1: added team_slave_0 [ 1888.410945][T26701] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1888.448255][T26701] infiniband syz1: Couldn't open port 1 [ 1888.448469][T26701] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1888.448500][T26701] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1888.448541][T26701] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1888.732015][T26701] RDS/IB: syz1: added [ 1888.732061][T26701] smc: adding ib device syz1 with port count 1 [ 1888.732087][T26701] smc: ib device syz1 port 1 has no pnetid [ 1888.783001][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5667'. [ 1889.200261][ T5601] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1889.203214][ T5601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1889.205504][ T5601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1889.230780][ T5601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1889.233979][ T5601] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1889.281079][T22383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1889.283066][T22383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1889.285280][T22383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1889.295658][T22383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1889.296606][T22383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1891.130833][T26766] net_ratelimit: 46 callbacks suppressed [ 1891.130849][T26766] ip_tables: iptables: counters copy to user failed while replacing table [ 1891.405266][T22383] Bluetooth: hci7: command tx timeout [ 1892.726302][T26780] evm: overlay not supported [ 1893.435354][T22383] Bluetooth: hci7: command tx timeout [ 1895.514295][T22383] Bluetooth: hci7: command tx timeout [ 1896.234146][ C0] net_ratelimit: 77 callbacks suppressed [ 1896.812048][ T31] audit: type=1400 audit(1789983841.790:9563): avc: denied { read } for pid=26813 comm="syz.6.5687" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1896.812328][ T31] audit: type=1400 audit(1789983841.790:9564): avc: denied { open } for pid=26813 comm="syz.6.5687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1896.850656][T26822] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 1896.850680][T26822] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 1896.901080][ T31] audit: type=1400 audit(1789983841.880:9565): avc: denied { write } for pid=26783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1896.985541][ T31] audit: type=1400 audit(1789983841.970:9566): avc: denied { ioctl } for pid=26813 comm="syz.6.5687" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1897.183250][ T31] audit: type=1400 audit(1789983842.160:9567): avc: denied { write } for pid=26829 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1897.461469][T25190] bridge_slave_1: left allmulticast mode [ 1897.461486][T25190] bridge_slave_1: left promiscuous mode [ 1897.461670][T25190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.496142][T25190] bridge_slave_0: left allmulticast mode [ 1897.496160][T25190] bridge_slave_0: left promiscuous mode [ 1897.496332][T25190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.595265][T22383] Bluetooth: hci7: command tx timeout [ 1897.656590][T25190] pimreg: left allmulticast mode [ 1900.153558][ T31] audit: type=1400 audit(1789983845.130:9568): avc: denied { write } for pid=26834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1900.457706][ T31] audit: type=1400 audit(1789983845.440:9569): avc: denied { write } for pid=26869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1900.548279][T25190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1900.566210][T25190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1900.589299][T25190] bond0 (unregistering): Released all slaves [ 1900.637246][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1900.643033][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1900.652131][ T5601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1900.669982][ T5601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1900.670981][ T5601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1900.899956][T26880] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5701'. [ 1900.923281][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1901.594151][ C1] net_ratelimit: 100 callbacks suppressed [ 1902.794352][T22383] Bluetooth: hci6: command tx timeout [ 1903.858735][T26915] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 1903.858754][T26915] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1903.889915][T26915] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1903.889929][T26915] One or more global auth toks could not properly register; rc = [-22] [ 1903.890063][T26915] Error validating options; rc = [-22] [ 1905.008345][T22383] Bluetooth: hci6: command tx timeout [ 1905.684308][ T31] audit: type=1400 audit(1789983850.670:9570): avc: denied { write } for pid=26922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1905.782897][ T31] audit: type=1400 audit(1789983850.760:9571): avc: denied { write } for pid=26937 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1906.004625][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1906.874166][ C1] net_ratelimit: 70 callbacks suppressed [ 1907.034194][T22383] Bluetooth: hci6: command tx timeout [ 1907.071745][T26739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.071827][T26739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.071974][T26739] bridge_slave_0: entered allmulticast mode [ 1907.110695][T26739] bridge_slave_0: entered promiscuous mode [ 1907.123785][T26739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.123868][T26739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.124007][T26739] bridge_slave_1: entered allmulticast mode [ 1907.146384][T26739] bridge_slave_1: entered promiscuous mode [ 1908.665367][T26739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.679459][T26739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1908.764158][ T31] audit: type=1400 audit(1789983853.740:9572): avc: denied { write } for pid=26957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.901763][ T31] audit: type=1400 audit(1789983853.880:9573): avc: denied { write } for pid=26983 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.918186][T26739] team0: Port device team_slave_0 added [ 1909.004987][T26739] team0: Port device team_slave_1 added [ 1909.075693][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1909.077439][T26739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.077449][T26739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.077471][T26739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.079848][T26739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.079859][T26739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.079880][T26739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.124284][T22383] Bluetooth: hci6: command tx timeout [ 1909.305053][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.305116][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.703798][ T31] audit: type=1400 audit(1789983854.680:9574): avc: denied { bind } for pid=26992 comm="syz.8.5723" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1909.705678][ T31] audit: type=1400 audit(1789983854.690:9575): avc: denied { node_bind } for pid=26992 comm="syz.8.5723" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1910.276152][T26739] hsr_slave_0: entered promiscuous mode [ 1910.345994][T26739] hsr_slave_1: entered promiscuous mode [ 1910.394733][T26739] debugfs: 'hsr0' already exists in 'hsr' [ 1910.395291][T26739] Cannot create hsr debugfs directory [ 1910.907593][T27002] 8021q: VLANs not supported on wg0 [ 1911.420558][T26701] syz_tun (unregistering): left allmulticast mode [ 1911.914164][ C0] net_ratelimit: 336 callbacks suppressed [ 1911.945581][T25190] hsr_slave_0: left promiscuous mode [ 1911.946464][T25190] hsr_slave_1: left promiscuous mode [ 1911.947334][T25190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1911.963550][T25190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1912.096141][ T31] audit: type=1400 audit(1789983857.080:9576): avc: denied { write } for pid=27010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1912.286048][ T31] audit: type=1400 audit(1789983857.260:9577): avc: denied { write } for pid=27029 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1912.377850][T27035] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1912.588417][T25190] team0 (unregistering): Port device team_slave_1 removed [ 1912.617794][T25190] team0 (unregistering): Port device team_slave_0 removed [ 1913.113046][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1916.214944][T25190] IPVS: stop unused estimator thread 0... [ 1916.356802][T27076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5740'. [ 1917.062204][T26739] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1917.082093][T26739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1917.130866][T26739] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1917.150387][T26739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1917.242625][T25572] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.434148][ C0] net_ratelimit: 143 callbacks suppressed [ 1917.485988][T26874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.486946][T26874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.487087][T26874] bridge_slave_0: entered allmulticast mode [ 1917.493198][T26874] bridge_slave_0: entered promiscuous mode [ 1917.510480][T26739] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1917.538405][T26739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1917.540272][T26739] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1917.563258][T26739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1917.564495][T26874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.564771][T26874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.564911][T26874] bridge_slave_1: entered allmulticast mode [ 1917.567258][T26874] bridge_slave_1: entered promiscuous mode [ 1918.373237][T27104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1918.373248][T27104] IPv6: NLM_F_CREATE should be set when creating new route [ 1918.427776][T26874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.452069][T26874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.072772][T25572] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.974595][T26874] team0: Port device team_slave_0 added [ 1919.991456][T26874] team0: Port device team_slave_1 added [ 1920.241030][T26874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.241041][T26874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.241063][T26874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.351999][T25572] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.400424][T26874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.400434][T26874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.400456][T26874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.583879][T25572] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.636310][T26874] hsr_slave_0: entered promiscuous mode [ 1920.639694][T26874] hsr_slave_1: entered promiscuous mode [ 1920.642874][T26874] debugfs: 'hsr0' already exists in 'hsr' [ 1920.642888][T26874] Cannot create hsr debugfs directory [ 1921.224475][T12675] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1921.382125][T12675] usb 9-1: Using ep0 maxpacket: 32 [ 1921.383655][T12675] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1921.388839][T12675] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1921.388860][T12675] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.388888][T12675] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1921.388924][T12675] usb 9-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1921.388950][T12675] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1921.399068][T12675] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1921.399089][T12675] usb 9-1: Product: syz [ 1921.399104][T12675] usb 9-1: Manufacturer: syz [ 1921.399119][T12675] usb 9-1: SerialNumber: syz [ 1921.406290][T12675] usb 9-1: config 0 descriptor?? [ 1921.415331][T12675] ldusb 9-1:0.0: Interrupt in endpoint not found [ 1921.483725][T26739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.502111][T27145] can0: slcan on ttyS3. [ 1921.567934][T27148] can0 (unregistered): slcan off ttyS3. [ 1921.592651][T25572] bridge_slave_1: left allmulticast mode [ 1921.592669][T25572] bridge_slave_1: left promiscuous mode [ 1921.592870][T25572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.636664][T12687] usb 9-1: USB disconnect, device number 7 [ 1921.637926][T25572] bridge_slave_0: left allmulticast mode [ 1921.637942][T25572] bridge_slave_0: left promiscuous mode [ 1921.638118][T25572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.785249][T27154] ALSA: mixer_oss: invalid OSS volume 'W' [ 1922.445782][T24023] net_ratelimit: 100 callbacks suppressed [ 1922.695022][T27159] ip_tables: iptables: counters copy to user failed while replacing table [ 1923.064056][T25572] pimreg: left allmulticast mode [ 1923.419745][T25572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1923.423140][T25572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1923.427037][T25572] bond0 (unregistering): Released all slaves [ 1923.476228][T26739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.510494][T25557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.510577][T25557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.541670][T25557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.541760][T25557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.650369][T27173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1924.194737][T12678] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1924.347648][T12678] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1924.351408][T12678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1924.351435][T12678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1924.351489][T12678] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.353948][T12678] usb 9-1: config 0 descriptor?? [ 1924.434954][ T31] audit: type=1400 audit(1789983869.420:9578): avc: denied { write } for pid=27174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1924.531452][ T31] audit: type=1400 audit(1789983869.510:9579): avc: denied { write } for pid=27198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1924.666872][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1925.652212][T12678] usb 9-1: string descriptor 0 read error: -22 [ 1925.796867][T12678] uclogic 0003:256C:006D.0047: interface is invalid, ignoring [ 1925.803806][T12678] usb 9-1: USB disconnect, device number 8 [ 1927.594305][ C0] net_ratelimit: 69 callbacks suppressed [ 1927.861144][ T31] audit: type=1400 audit(1789983872.840:9580): avc: denied { write } for pid=27215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1927.911090][T25572] hsr_slave_0: left promiscuous mode [ 1927.925542][T25572] hsr_slave_1: left promiscuous mode [ 1927.926446][T25572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1927.926463][T25572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.931741][T25572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1927.931757][T25572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.008607][T25572] veth1_macvtap: left promiscuous mode [ 1928.008629][T25572] veth0_macvtap: left promiscuous mode [ 1928.009336][T25572] veth1_vlan: left promiscuous mode [ 1928.009388][T25572] veth0_vlan: left promiscuous mode [ 1928.138680][ T31] audit: type=1400 audit(1789983873.120:9581): avc: denied { write } for pid=27248 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1929.534214][T12687] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1929.554055][T25572] team0 (unregistering): Port device team_slave_1 removed [ 1929.589754][T25572] team0 (unregistering): Port device team_slave_0 removed [ 1929.590283][T25558] smc: removing ib device syz1 [ 1929.666144][T25572] kernfs rx_crc_errors: removing [ 1929.666175][T25572] kernfs rx_frame_errors: removing [ 1929.666209][T25572] kernfs rx_fifo_errors: removing [ 1929.666235][T25572] kernfs rx_missed_errors: removing [ 1929.666260][T25572] kernfs tx_aborted_errors: removing [ 1929.666285][T25572] kernfs tx_carrier_errors: removing [ 1929.666311][T25572] kernfs tx_fifo_errors: removing [ 1929.666339][T25572] kernfs tx_heartbeat_errors: removing [ 1929.666365][T25572] kernfs tx_window_errors: removing [ 1929.666390][T25572] kernfs rx_compressed: removing [ 1929.666415][T25572] kernfs tx_compressed: removing [ 1929.666441][T25572] kernfs rx_nohandler: removing [ 1929.666491][T25572] kernfs statistics: removing [ 1929.666525][T25572] kernfs netdev_group: removing [ 1929.666552][T25572] kernfs type: removing [ 1929.666577][T25572] kernfs dev_id: removing [ 1929.666602][T25572] kernfs dev_port: removing [ 1929.666627][T25572] kernfs iflink: removing [ 1929.666652][T25572] kernfs ifindex: removing [ 1929.666677][T25572] kernfs name_assign_type: removing [ 1929.666703][T25572] kernfs addr_assign_type: removing [ 1929.666732][T25572] kernfs addr_len: removing [ 1929.666765][T25572] kernfs link_mode: removing [ 1929.670769][T25572] kernfs address: removing [ 1929.670824][T25572] kernfs broadcast: removing [ 1929.670871][T25572] kernfs speed: removing [ 1929.670918][T25572] kernfs duplex: removing [ 1929.670964][T25572] kernfs dormant: removing [ 1929.671009][T25572] kernfs testing: removing [ 1929.671042][T25572] kernfs operstate: removing [ 1929.671067][T25572] kernfs carrier_changes: removing [ 1929.671093][T25572] kernfs ifalias: removing [ 1929.671118][T25572] kernfs carrier: removing [ 1929.671143][T25572] kernfs mtu: removing [ 1929.671168][T25572] kernfs flags: removing [ 1929.671193][T25572] kernfs tx_queue_len: removing [ 1929.671218][T25572] kernfs gro_flush_timeout: removing [ 1929.671244][T25572] kernfs napi_defer_hard_irqs: removing [ 1929.671270][T25572] kernfs proto_down: removing [ 1929.671295][T25572] kernfs carrier_up_count: removing [ 1929.671321][T25572] kernfs carrier_down_count: removing [ 1929.671348][T25572] kernfs threaded: removing [ 1929.671371][T25572] PM: Removing info for No Bus:veth0_to_bond [ 1929.671384][T25572] kobject: 'veth0_to_bond' (ffff88807d52c7c0): kobject_uevent_env [ 1929.671393][T25572] kobject: 'veth0_to_bond' (ffff88807d52c7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1929.671406][T25572] kernfs veth0_to_bond: removing [ 1929.671635][T25572] bridge_slave_1 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 1929.671650][T25572] net bridge_slave_1: siw: event 6 [ 1929.672019][T25572] bridge_slave_1 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 1929.672032][T25572] net bridge_slave_1: siw: event 18 [ 1929.672068][T25572] kernfs rps_cpus: removing [ 1929.672097][T25572] kernfs rps_flow_cnt: removing [ 1929.672120][T25572] kobject: 'rx-1' (ffff88805940dd50): kobject_cleanup, parent ffff88804a58b250 [ 1929.672131][T25572] kobject: 'rx-1' (ffff88805940dd50): auto cleanup kobject_del [ 1929.672139][T25572] kobject: 'rx-1' (ffff88805940dd50): auto cleanup 'remove' event [ 1929.672147][T25572] kobject: 'rx-1' (ffff88805940dd50): kobject_uevent_env [ 1929.672156][T25572] kobject: 'rx-1' (ffff88805940dd50): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1929.672168][T25572] kernfs rx-1: removing [ 1929.672191][T25572] kobject: 'rx-1' (ffff88805940dd50): calling ktype release [ 1929.676202][T21918] Added buffer head 0 to ffff888025d09200 [ 1929.676264][ C1] virtqueue callback for ffff888025d09200 (ffffffff85b70760) [ 1929.677082][ T32] INFO: task syz.5.5255:25427 blocked for more than 143 seconds. [ 1929.677102][ T32] Tainted: G L syzkaller #0 [ 1929.677114][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1929.677122][ T32] task:syz.5.5255 state:D stack:26760 pid:25427 tgid:25426 ppid:17891 task_flags:0x400140 flags:0x00080002 [ 1929.677186][ T32] Call Trace: [ 1929.677193][ T32] [ 1929.677206][ T32] __schedule+0x1259/0x6920 [ 1929.677235][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1929.677275][ T32] ? __pfx___schedule+0x10/0x10 [ 1929.677298][ T32] ? find_held_lock+0x2b/0x80 [ 1929.677325][ T32] ? schedule+0x225/0x2c0 [ 1929.677355][ T32] schedule+0xdd/0x2c0 [ 1929.677381][ T32] cgroup_lock_and_drain_offline+0x383/0x800 [ 1929.677408][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1929.677429][ T32] ? kernfs_root+0xee/0x2a0 [ 1929.677456][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1929.677484][ T32] ? cgroup_kn_lock_live+0xf4/0x520 [ 1929.677503][ T32] ? kernfs_root+0xf8/0x2a0 [ 1929.677532][ T32] cgroup_kn_lock_live+0x188/0x520 [ 1929.677555][ T32] cgroup_subtree_control_write+0x3dd/0xe90 [ 1929.677583][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1929.677607][ T32] ? kernfs_root+0xf8/0x2a0 [ 1929.677639][ T32] cgroup_file_write+0x1e6/0x8a0 [ 1929.677855][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1929.677880][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 1929.677903][ T32] ? __kmalloc_noprof+0x350/0x840 [ 1929.677933][ T32] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1929.677954][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 1929.677983][ T32] vfs_write+0x6af/0x1050 [ 1929.678005][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1929.678030][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1929.678048][ T32] ? find_held_lock+0x2b/0x80 [ 1929.678094][ T32] ksys_write+0x12a/0x250 [ 1929.678115][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1929.678145][ T32] do_syscall_64+0x123/0x790 [ 1929.678175][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.678196][ T32] RIP: 0033:0x7f6b7d19e159 [ 1929.678213][ T32] RSP: 002b:00007f6b7b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1929.678233][ T32] RAX: ffffffffffffffda RBX: 00007f6b7d425fa0 RCX: 00007f6b7d19e159 [ 1929.678247][ T32] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1929.678258][ T32] RBP: 00007f6b7d23506b R08: 0000000000000000 R09: 0000000000000000 [ 1929.678269][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1929.678282][ T32] R13: 00007f6b7d426038 R14: 00007f6b7d425fa0 R15: 00007ffd59c8eab8 [ 1929.678311][ T32] [ 1929.678320][ T32] INFO: task syz.5.5255:25430 blocked for more than 143 seconds. [ 1929.678336][ T32] Tainted: G L syzkaller #0 [ 1929.678347][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1929.678355][ T32] task:syz.5.5255 state:D stack:28728 pid:25430 tgid:25426 ppid:17891 task_flags:0x400040 flags:0x00080002 [ 1929.678419][ T32] Call Trace: [ 1929.678426][ T32] [ 1929.678458][ T32] __schedule+0x1259/0x6920 [ 1929.678483][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1929.678511][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1929.678543][ T32] ? __pfx___schedule+0x10/0x10 [ 1929.678567][ T32] ? find_held_lock+0x2b/0x80 [ 1929.678595][ T32] ? schedule+0x225/0x2c0 [ 1929.678624][ T32] schedule+0xdd/0x2c0 [ 1929.678649][ T32] schedule_preempt_disabled+0x13/0x30 [ 1929.678675][ T32] __mutex_lock+0xccb/0x1bd0 [ 1929.678704][ T32] ? fdget_pos+0x2aa/0x380 [ 1929.678735][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1929.678762][ T32] ? lock_acquire+0x1d1/0x380 [ 1929.678782][ T32] ? __fget_files+0x34/0x3d0 [ 1929.678807][ T32] ? find_held_lock+0x2b/0x80 [ 1929.678838][ T32] ? __fget_files+0x215/0x3d0 [ 1929.678867][ T32] ? __fget_files+0x21f/0x3d0 [ 1929.678896][ T32] ? fdget_pos+0x2aa/0x380 [ 1929.678919][ T32] fdget_pos+0x2aa/0x380 [ 1929.678946][ T32] ksys_write+0x71/0x250 [ 1929.678966][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1929.678985][ T32] ? kcov_ioctl+0x17a/0x760 [ 1929.679015][ T32] do_syscall_64+0x123/0x790 [ 1929.679046][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.679066][ T32] RIP: 0033:0x7f6b7d19e159 [ 1929.679082][ T32] RSP: 002b:00007f6b7b3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1929.679100][ T32] RAX: ffffffffffffffda RBX: 00007f6b7d426090 RCX: 00007f6b7d19e159 [ 1929.679114][ T32] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1929.679126][ T32] RBP: 00007f6b7d23506b R08: 0000000000000000 R09: 0000000000000000 [ 1929.679138][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1929.679151][ T32] R13: 00007f6b7d426128 R14: 00007f6b7d426090 R15: 00007ffd59c8eab8 [ 1929.679180][ T32] [ 1929.679235][ T32] [ 1929.679235][ T32] Showing all locks held in the system: [ 1929.679244][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1929.679258][ T32] #0: ffffffff8edd87f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1929.679308][ T32] #1: ffffffff9bc70e78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1929.679366][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1929.679380][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1929.679438][ T32] locks held by kworker/u8:5/153: 3, on CPU#1: [ 1929.679452][ T32] #0: ffff88803391f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.679507][ T32] #1: ffffc90002597d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.679561][ T32] #2: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 1929.679626][ T32] locks held by dhcpcd/5263: 1, on CPU#0: [ 1929.679640][ T32] #0: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10 [ 1929.679691][ T32] locks held by getty/5355: 2, on CPU#1: [ 1929.679705][ T32] #0: ffff888037e140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1929.679750][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1929.679808][ T32] locks held by kworker/0:8/12675: 3, on CPU#0: [ 1929.679826][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.679879][ T32] #1: ffffc90003b47d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.679932][ T32] #2: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1929.679985][ T32] locks held by kworker/0:11/12678: 4, on CPU#0: [ 1929.679999][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.680051][ T32] #1: ffffc9000316fd08 ((work_completion)(&smcibdev->port_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.680106][ T32] #2: ffff888041df5310 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x115/0x330 [ 1929.680150][ T32] #3: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x128/0xb80 [ 1929.680198][ T32] locks held by kworker/1:15/12687: 6, last CPU#1: [ 1929.680212][ T32] #0: ffff888023ebf940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.680266][ T32] #1: ffffc90003777d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.680319][ T32] #2: ffff88802a85c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1929.680370][ T32] #3: ffff88802a8e8568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 1929.680420][ T32] #4: ffff88802a77e660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 1929.680470][ T32] #5: ffffffff90282768 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 1929.680528][ T32] locks held by kworker/u8:16/24476: 3, on CPU#0: [ 1929.680541][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.680595][ T32] #1: ffffc90003c77d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.680648][ T32] #2: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1929.680692][ T32] locks held by syz.5.5255/25427: 3, on CPU#0: [ 1929.680706][ T32] #0: ffff888079156470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1929.680755][ T32] #1: ffff88802e930460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1929.680805][ T32] #2: ffff888059fed880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1929.680856][ T32] locks held by syz.5.5255/25430: 1, on CPU#0: [ 1929.680869][ T32] #0: ffff888079156470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1929.680919][ T32] locks held by kworker/u8:24/25558: 3, on CPU#0: [ 1929.680933][ T32] #0: ffff88801c757140 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.680987][ T32] #1: ffffc9000544fd08 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.681041][ T32] #2: ffff888041df4730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 1929.681091][ T32] locks held by kworker/u8:38/25572: 4, last CPU#1: [ 1929.681105][ T32] #0: ffff88801d2d8940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1929.681158][ T32] #1: ffffc9000490fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1929.681211][ T32] #2: ffffffff90cbb3a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1929.681262][ T32] #3: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x92/0x890 [ 1929.681318][ T32] locks held by syz-executor/26739: 1, on CPU#0: [ 1929.681332][ T32] #0: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1929.681380][ T32] locks held by syz-executor/26874: 7, on CPU#0: [ 1929.681395][ T32] #0: ffff8880369ec460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1929.681443][ T32] #1: ffff888039513880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1929.681488][ T32] #2: ffff888029bd6c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1929.681538][ T32] #3: ffffffff9023a3c0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x6d0 [ 1929.681585][ T32] #4: ffff88803fe87128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1929.681633][ T32] #5: ffff888039412258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_probe+0xcd/0x1350 [ 1929.681689][ T32] #6: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 1929.681737][ T32] locks held by syz.6.5787/27254: 2, on CPU#0: [ 1929.681751][ T32] #0: ffffffff90ca3da0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ca/0x6b0 [ 1929.681794][ T32] #1: ffffffff90cd3e80 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xcf/0xa70 [ 1929.681844][ T32] [ 1929.681849][ T32] ============================================= [ 1929.681849][ T32] [ 1929.681868][ T32] NMI backtrace for cpu 1 [ 1929.681882][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.681908][ T32] Tainted: [L]=SOFTLOCKUP [ 1929.681916][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1929.681926][ T32] Call Trace: [ 1929.681934][ T32] [ 1929.681941][ T32] dump_stack_lvl+0x100/0x190 [ 1929.681970][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1929.682001][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1929.682024][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1929.682051][ T32] sys_info+0x141/0x190 [ 1929.682071][ T32] watchdog+0xcb1/0x1030 [ 1929.682102][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1929.682128][ T32] ? __pfx_watchdog+0x10/0x10 [ 1929.682151][ T32] ? __kthread_parkme+0x18f/0x230 [ 1929.682178][ T32] ? kthread+0x13a/0x450 [ 1929.682202][ T32] ? __pfx_watchdog+0x10/0x10 [ 1929.682222][ T32] kthread+0x373/0x450 [ 1929.682246][ T32] ? __pfx_kthread+0x10/0x10 [ 1929.682274][ T32] ret_from_fork+0x730/0xd60 [ 1929.682298][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1929.682320][ T32] ? __switch_to+0x800/0x10f0 [ 1929.682347][ T32] ? __pfx_kthread+0x10/0x10 [ 1929.682374][ T32] ret_from_fork_asm+0x1a/0x30 [ 1929.682408][ T32] [ 1929.682416][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1929.682444][ C0] NMI backtrace for cpu 0 [ 1929.682457][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.682482][ C0] Tainted: [L]=SOFTLOCKUP [ 1929.682489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1929.682500][ C0] RIP: 0010:delay_tsc+0x49/0xc0 [ 1929.682521][ C0] Code: 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 bf 01 00 00 00 e8 04 19 07 f6 e8 8f 7e 01 00 44 39 e0 75 36 0f 01 f9 <66> 90 48 c1 e2 20 48 89 d3 48 09 c3 48 89 d8 48 29 e8 4c 39 e8 73 [ 1929.682538][ C0] RSP: 0018:ffffc90000157998 EFLAGS: 00000002 [ 1929.682552][ C0] RAX: 00000000abb5e932 RBX: 0000000000000020 RCX: 0000000000000000 [ 1929.682564][ C0] RDX: 00000000000004ef RSI: ffffffff8c623500 RDI: ffffffff8c623540 [ 1929.682576][ C0] RBP: 000004efabb5e90e R08: 0000000000000005 R09: 0000000000000000 [ 1929.682587][ C0] R10: 0000000000000815 R11: 205d323735353254 R12: 0000000000000000 [ 1929.682599][ C0] R13: 0000000000000af1 R14: fffffbfff378e229 R15: dffffc0000000000 [ 1929.682611][ C0] FS: 0000000000000000(0000) GS:ffff888123b54000(0000) knlGS:0000000000000000 [ 1929.682628][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1929.682640][ C0] CR2: 00007febceafd4f0 CR3: 000000007d391000 CR4: 00000000003526f0 [ 1929.682652][ C0] Call Trace: [ 1929.682658][ C0] [ 1929.682666][ C0] wait_for_lsr+0xf3/0x210 [ 1929.682691][ C0] wait_for_xmitr+0x28/0x360 [ 1929.682715][ C0] serial8250_console_write+0x43b/0x1330 [ 1929.682743][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1929.682769][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1929.682789][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1929.682812][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1929.682832][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1929.682850][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1929.682876][ C0] ? do_raw_spin_lock+0xf0/0x260 [ 1929.682902][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1929.682926][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1929.682950][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1929.682967][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1929.682988][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1929.683008][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1929.683030][ C0] ? __kthread_parkme+0x18f/0x230 [ 1929.683052][ C0] ? kthread+0x13a/0x450 [ 1929.683075][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1929.683092][ C0] kthread+0x373/0x450 [ 1929.683115][ C0] ? __pfx_kthread+0x10/0x10 [ 1929.683139][ C0] ret_from_fork+0x730/0xd60 [ 1929.683159][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1929.683180][ C0] ? __switch_to+0x800/0x10f0 [ 1929.683203][ C0] ? __pfx_kthread+0x10/0x10 [ 1929.683227][ C0] ret_from_fork_asm+0x1a/0x30 [ 1929.683253][ C0] [ 1929.683446][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1931.442282][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.452935][ T32] Tainted: [L]=SOFTLOCKUP [ 1931.457235][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1931.467268][ T32] Call Trace: [ 1931.470524][ T32] [ 1931.473435][ T32] dump_stack_lvl+0x100/0x190 [ 1931.478104][ T32] vpanic+0x553/0x970 [ 1931.482062][ T32] ? __pfx_vpanic+0x10/0x10 [ 1931.486548][ T32] panic+0xd1/0xe0 [ 1931.490249][ T32] ? __pfx_panic+0x10/0x10 [ 1931.494650][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 1931.499660][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1931.505796][ T32] ? watchdog.cold+0x1ec/0x234 [ 1931.510543][ T32] watchdog.cold+0x1fd/0x234 [ 1931.515116][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1931.520908][ T32] ? __pfx_watchdog+0x10/0x10 [ 1931.525565][ T32] ? __kthread_parkme+0x18f/0x230 [ 1931.530573][ T32] ? kthread+0x13a/0x450 [ 1931.534798][ T32] ? __pfx_watchdog+0x10/0x10 [ 1931.539453][ T32] kthread+0x373/0x450 [ 1931.543504][ T32] ? __pfx_kthread+0x10/0x10 [ 1931.548095][ T32] ret_from_fork+0x730/0xd60 [ 1931.552668][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1931.557759][ T32] ? __switch_to+0x800/0x10f0 [ 1931.562422][ T32] ? __pfx_kthread+0x10/0x10 [ 1931.566996][ T32] ret_from_fork_asm+0x1a/0x30 [ 1931.571749][ T32] [ 1931.574959][ T32] Kernel Offset: disabled [ 1931.579259][ T32] Rebooting in 86400 seconds..