last executing test programs: 1m14.388004408s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.070952906s ago: executing program 0 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 1m13.812637869s ago: executing program 0 (id=7): syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r0 = memfd_create(&(0x7f00000005c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 1m7.266017566s ago: executing program 1 (id=47): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m6.784000802s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m6.418119317s ago: executing program 1 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 54.097827938s ago: executing program 4 (id=120): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.667674498s ago: executing program 4 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4000000) 52.564465667s ago: executing program 4 (id=127): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 51.302758424s ago: executing program 33 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.283327992s ago: executing program 4 (id=138): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 49.95880731s ago: executing program 4 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 49.770991132s ago: executing program 4 (id=144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 38.43414244s ago: executing program 2 (id=206): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x7, 0x2, 0x5, 0x800, 0x3, "059199dfc8338cbe5265bbf4d24084c90d4ce6", 0x0, 0x59}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.171316182s ago: executing program 2 (id=214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x5c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004500)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 36.671128693s ago: executing program 2 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 34.961667471s ago: executing program 2 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 34.584179892s ago: executing program 34 (id=144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 34.424950826s ago: executing program 2 (id=230): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x148, 0x168, 0x9, 0x148, 0xb, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'nr0\x00', 'pim6reg1\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x49, 0xffffffffffffffff, 0x0) 32.965292172s ago: executing program 2 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f0000000240)='127.0.0.1:/\x00', &(0x7f0000000280)='./nfs4\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{'addr=127.0.0.1'}, {'vers=4.2'}, {'sec=sys'}]}) 17.92136546s ago: executing program 35 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f0000000240)='127.0.0.1:/\x00', &(0x7f0000000280)='./nfs4\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{'addr=127.0.0.1'}, {'vers=4.2'}, {'sec=sys'}]}) 3.723502822s ago: executing program 8 (id=426): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x45833af92e4b39fe, 0x0) 3.312870753s ago: executing program 8 (id=430): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xfffffffffffffd47, 0x0, 0x0, {{0x4, 0x2, 0x4000000000000005, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 3.098309475s ago: executing program 8 (id=433): timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.950382637s ago: executing program 3 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 2.896417919s ago: executing program 8 (id=435): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) iopl(0x3) read(r1, &(0x7f00000002c0)=""/153, 0x99) 2.793035761s ago: executing program 6 (id=436): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f0000006800)="10", 0x20) 2.635189291s ago: executing program 3 (id=437): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.368790844s ago: executing program 3 (id=438): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_usb_connect(0x2, 0x24, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 1.952936514s ago: executing program 5 (id=442): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x4000, 0x5, 0x0, 0x8, 0xef6, 0x0, 0x0, 0x10, 0x2}}, 0x50) 1.939313886s ago: executing program 8 (id=443): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x1}}, 0x14) write$P9_RGETATTR(r1, &(0x7f00000002c0)={0xa0, 0x19, 0x0, {0x263e, {0x1}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x1000, 0x8, 0x0, 0xf, 0x0, 0x0, 0x8000000000000000, 0x0, 0x6, 0x0, 0x3, 0x10}}, 0xa0) 1.815488214s ago: executing program 3 (id=444): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.747216727s ago: executing program 5 (id=445): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x11}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 1.667563652s ago: executing program 5 (id=446): r0 = socket$inet6(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) sendto$inet6(r0, 0x0, 0x0, 0x4050, &(0x7f0000001100)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) 1.532267572s ago: executing program 5 (id=447): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.145703935s ago: executing program 7 (id=452): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x1) capset(&(0x7f00000025c0)={0x20080522}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.05087815s ago: executing program 8 (id=453): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_freeze_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='mem', 0x3) 1.001371154s ago: executing program 7 (id=454): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x148, 0x168, 0x9, 0x148, 0xb, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'nr0\x00', 'pim6reg1\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x49, 0xffffffffffffffff, 0x0) 933.411729ms ago: executing program 3 (id=455): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x204031, 0xffffffffffffffff, 0xfc778000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) timerfd_create(0x0, 0x0) 761.915998ms ago: executing program 6 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r2, r3, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f000000a280)={0x50, 0x0, r4, {0x7, 0x2d, 0xb, 0x20011, 0x2, 0x4, 0x4, 0x4, 0x0, 0x0, 0x10, 0x7}}, 0x50) 756.427196ms ago: executing program 3 (id=457): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) close(r1) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 616.030285ms ago: executing program 5 (id=458): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0x9362, 0x0) 563.783364ms ago: executing program 7 (id=459): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x6a) semget$private(0x0, 0x6, 0x1a8) r2 = fcntl$dupfd(r1, 0x406, r1) write$tun(r2, &(0x7f0000000080)=ANY=[], 0xa2) 553.918878ms ago: executing program 6 (id=460): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x2b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) 428.785814ms ago: executing program 7 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 419.043813ms ago: executing program 6 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 417.889431ms ago: executing program 5 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x0) 350.109106ms ago: executing program 7 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x0, 0x100}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) write(r0, &(0x7f0000000400)="00008847", 0x4) 268.838666ms ago: executing program 6 (id=465): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000006f000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003ed000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000178000/0x2000)=nil, &(0x7f00002b6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0xa403, 0xc, 0x6, 0xfd, 0x6, 0x8c, 0x8001}, 0xc) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000640)="68a55d6df108bed91373cc794c16187a680c0c711ae161400d400e28f7117e17fd75340a58f8d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1000000fc4d76dadbb0", 0x48}], 0x1}}], 0x1, 0x0) 141.380669ms ago: executing program 7 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 0s ago: executing program 6 (id=467): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7f, 0xd}}}}}}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, &(0x7f0000000780)={0x40, 0xd, 0x2, {0x2, 0x4}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f00000008c0)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x9, "a292ab39"}, @local=@item_012={0x0, 0x2, 0x9}, @local=@item_012={0x1, 0x2, 0x0, "1b"}, @local=@item_4={0x3, 0x2, 0x0, "d07c79a7"}]}}, 0x0}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x0, 0x7, 0x1b, "617d04380cfe0641e5b22b6f705ce00f9fa8df977099eb60517f74"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x97}, 0x0, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'k'}, @global=@item_4={0x3, 0x1, 0x0, "1708fef6"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): led with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 77.621457][ T5823] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.647364][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.648597][ T5823] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.658158][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.660687][ T5823] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.667534][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.670600][ T5823] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.681198][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.758909][ T6024] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 77.931280][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.965069][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.974263][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.974377][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.987172][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.987244][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.137407][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.829021][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.873129][ T5604] Bluetooth: hci2: command tx timeout [ 79.106177][ T5823] veth0_vlan: entered promiscuous mode [ 79.119168][ T5823] veth1_vlan: entered promiscuous mode [ 79.149178][ T5823] veth0_macvtap: entered promiscuous mode [ 79.162756][ T5823] veth1_macvtap: entered promiscuous mode [ 79.179135][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.202507][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.254144][ T1296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.254781][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.254809][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.254835][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.331392][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.331435][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.370017][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.370049][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.408801][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 79.409004][ T30] audit: type=1400 audit(1788485818.356:257): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 79.888145][ T30] audit: type=1400 audit(1788485818.836:258): avc: denied { shutdown } for pid=6074 comm="syz.3.63" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.950312][ T6081] FAULT_INJECTION: forcing a failure. [ 79.950312][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 79.964128][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.4.65 Not tainted syzkaller #0 PREEMPT(full) [ 79.964156][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 79.964168][ T6081] Call Trace: [ 79.964175][ T6081] [ 79.964183][ T6081] dump_stack_lvl+0x100/0x190 [ 79.964217][ T6081] should_fail_ex.cold+0x5/0xa [ 79.964243][ T6081] should_failslab+0xc2/0x120 [ 79.964265][ T6081] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.964284][ T6081] ? __asan_memcpy+0x3c/0x60 [ 79.964311][ T6081] ? __kernfs_new_node+0xd2/0xa10 [ 79.964339][ T6081] __kernfs_new_node+0xd2/0xa10 [ 79.964370][ T6081] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.964399][ T6081] ? lock_acquire+0x1d1/0x380 [ 79.964417][ T6081] ? kernfs_root+0x23/0x2a0 [ 79.964439][ T6081] ? find_held_lock+0x2b/0x80 [ 79.964461][ T6081] ? kernfs_root+0xee/0x2a0 [ 79.964482][ T6081] ? kernfs_root+0xee/0x2a0 [ 79.964508][ T6081] kernfs_new_node+0x117/0x150 [ 79.964537][ T6081] kernfs_create_link+0xcc/0x240 [ 79.964556][ T6081] sysfs_do_create_link_sd+0x90/0x140 [ 79.964582][ T6081] sysfs_create_link+0x61/0xc0 [ 79.964606][ T6081] software_node_notify+0x1d5/0x270 [ 79.964636][ T6081] device_add+0x2bc/0x1970 [ 79.964659][ T6081] ? __pfx_device_add+0x10/0x10 [ 79.964680][ T6081] ? kobject_get+0xbb/0x150 [ 79.964705][ T6081] ? __pfx_software_node_get+0x10/0x10 [ 79.964730][ T6081] ? software_node_get+0x68/0x90 [ 79.964756][ T6081] ? fwnode_handle_get+0x97/0xd0 [ 79.964780][ T6081] iommu_mock_device_add+0x7c/0xb0 [ 79.964801][ T6081] iommufd_test+0x3038/0x6600 [ 79.964841][ T6081] ? __lock_acquire+0x4c5/0x1ec0 [ 79.964860][ T6081] ? __lock_acquire+0x4c5/0x1ec0 [ 79.964878][ T6081] ? __pfx_iommufd_test+0x10/0x10 [ 79.964905][ T6081] ? tomoyo_path_number_perm+0x188/0x580 [ 79.964936][ T6081] ? lock_acquire+0x1d1/0x380 [ 79.964953][ T6081] ? __might_fault+0xc5/0x140 [ 79.964976][ T6081] ? find_held_lock+0x2b/0x80 [ 79.964999][ T6081] ? __might_fault+0xc5/0x140 [ 79.965034][ T6081] iommufd_fops_ioctl+0x358/0x520 [ 79.965051][ T6081] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 79.965065][ T6081] ? __fget_files+0x34/0x3d0 [ 79.965093][ T6081] ? selinux_file_ioctl+0x13b/0x290 [ 79.965117][ T6081] ? selinux_file_ioctl+0xb6/0x290 [ 79.965143][ T6081] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 79.965161][ T6081] __x64_sys_ioctl+0x18e/0x210 [ 79.965187][ T6081] do_syscall_64+0x123/0x790 [ 79.965210][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.965228][ T6081] RIP: 0033:0x7fc2d799e159 [ 79.965245][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.965262][ T6081] RSP: 002b:00007fc2d8822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.965280][ T6081] RAX: ffffffffffffffda RBX: 00007fc2d7c25fa0 RCX: 00007fc2d799e159 [ 79.965292][ T6081] RDX: 0000200000000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 79.965303][ T6081] RBP: 00007fc2d7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 79.965314][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.965323][ T6081] R13: 00007fc2d7c26038 R14: 00007fc2d7c25fa0 R15: 00007ffe6af28ca8 [ 79.965345][ T6081] [ 80.090646][ T6081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.327693][ T30] audit: type=1400 audit(1788485819.276:259): avc: denied { read write } for pid=6084 comm="syz.2.66" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.337954][ T30] audit: type=1400 audit(1788485819.276:260): avc: denied { open } for pid=6084 comm="syz.2.66" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.342760][ T30] audit: type=1400 audit(1788485819.276:261): avc: denied { ioctl } for pid=6084 comm="syz.2.66" path="/dev/video0" dev="devtmpfs" ino=929 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.393320][ T6087] netlink: zone id is out of range [ 81.964756][ T30] audit: type=1400 audit(1788485820.916:262): avc: denied { create } for pid=6098 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.985892][ T30] audit: type=1400 audit(1788485820.936:263): avc: denied { getopt } for pid=6103 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.009010][ T30] audit: type=1400 audit(1788485820.956:264): avc: denied { name_connect } for pid=6103 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 82.177960][ T30] audit: type=1400 audit(1788485821.126:265): avc: denied { name_bind } for pid=6111 comm="syz.3.77" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.250648][ T6114] syzkaller1: entered promiscuous mode [ 82.250681][ T6114] syzkaller1: entered allmulticast mode [ 82.532308][ T30] audit: type=1400 audit(1788485821.476:266): avc: denied { create } for pid=6115 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.568151][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.568614][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.654190][ T6122] input: syz0 as /devices/virtual/input/input5 [ 82.660960][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.679789][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.830584][ T6118] batman_adv: batadv0: Adding interface: veth0 [ 82.837729][ T6118] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.863326][ T6118] batman_adv: batadv0: Interface activated: veth0 [ 82.870373][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.870411][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.888577][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.888610][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.905465][ T6120] batman_adv: batadv0: Interface deactivated: veth0 [ 82.912132][ T6120] batman_adv: batadv0: Removing interface: veth0 [ 82.954507][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.956547][ T1109] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.956579][ T1109] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.956604][ T1109] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.093869][ T6129] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 83.162661][ T6129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.204644][ T6134] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 83.221767][ T6137] warning: `syz.3.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.254161][ T1109] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 83.303799][ T6129] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 83.304276][ T6129] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 83.325337][ T6129] bond1 (unregistering): Released all slaves [ 84.233041][ T5613] Bluetooth: hci3: command 0x2016 tx timeout [ 84.247216][ T6141] comedi comedi1: reset error (fatal) [ 84.463036][ T5704] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.613127][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 84.613851][ T5704] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.614689][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.614706][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.614737][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 84.614757][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 84.614794][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.645913][ T5704] hub 5-1:1.0: bad descriptor, ignoring hub [ 84.645936][ T5704] hub 5-1:1.0: probe with driver hub failed with error -5 [ 84.658266][ T5704] cdc_wdm 5-1:1.0: skipping garbage [ 84.658284][ T5704] cdc_wdm 5-1:1.0: skipping garbage [ 84.673153][ T5704] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 84.673172][ T5704] cdc_wdm 5-1:1.0: Unknown control protocol [ 84.850131][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 84.850168][ T30] audit: type=1400 audit(1788485823.796:284): avc: denied { read write } for pid=6158 comm="syz.4.92" name="cdc-wdm0" dev="devtmpfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 84.880068][ T30] audit: type=1400 audit(1788485823.796:285): avc: denied { open } for pid=6158 comm="syz.4.92" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 85.262523][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.262566][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.263105][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.263122][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.263582][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.263596][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.264150][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.264166][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.264360][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.264373][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.264554][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.264567][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.264748][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.264761][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.264942][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.264955][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.265197][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.265211][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.265383][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 85.265398][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 85.268013][ T5705] usb 5-1: USB disconnect, device number 2 [ 85.268123][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 85.374689][ T30] audit: type=1400 audit(1788485824.316:286): avc: denied { create } for pid=6173 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.380825][ T30] audit: type=1400 audit(1788485824.326:287): avc: denied { bind } for pid=6173 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.383053][ T30] audit: type=1400 audit(1788485824.326:288): avc: denied { connect } for pid=6173 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.383087][ T30] audit: type=1400 audit(1788485824.326:289): avc: denied { write } for pid=6173 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.436699][ T1109] wlan1: Trigger new scan to find an IBSS to join [ 85.590508][ T6179] FAULT_INJECTION: forcing a failure. [ 85.590508][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 85.590556][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.5.98 Not tainted syzkaller #0 PREEMPT(full) [ 85.590577][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 85.590586][ T6179] Call Trace: [ 85.590592][ T6179] [ 85.590598][ T6179] dump_stack_lvl+0x100/0x190 [ 85.590627][ T6179] should_fail_ex.cold+0x5/0xa [ 85.590653][ T6179] should_failslab+0xc2/0x120 [ 85.590674][ T6179] __kmalloc_cache_noprof+0x91/0x6d0 [ 85.590696][ T6179] ? lockdep_init_map_type+0x5c/0x250 [ 85.590714][ T6179] ? snd_seq_prioq_new+0x3f/0x110 [ 85.590739][ T6179] snd_seq_prioq_new+0x3f/0x110 [ 85.590763][ T6179] snd_seq_queue_alloc+0x153/0x540 [ 85.590787][ T6179] snd_seq_ioctl_create_queue+0xa9/0x370 [ 85.590813][ T6179] call_seq_client_ctl+0xa3/0x130 [ 85.590840][ T6179] snd_seq_kernel_client_ctl+0x35/0x50 [ 85.590857][ T6179] alloc_seq_queue+0xdb/0x180 [ 85.590873][ T6179] ? __pfx_alloc_seq_queue+0x10/0x10 [ 85.590899][ T6179] ? find_held_lock+0x2b/0x80 [ 85.590922][ T6179] ? mark_held_locks+0x40/0x70 [ 85.590941][ T6179] snd_seq_oss_open+0x2b2/0xa10 [ 85.590963][ T6179] odev_open+0x6f/0x90 [ 85.590976][ T6179] ? __pfx_odev_open+0x10/0x10 [ 85.590991][ T6179] soundcore_open+0x2e3/0x5a0 [ 85.591009][ T6179] ? __pfx_soundcore_open+0x10/0x10 [ 85.591025][ T6179] chrdev_open+0x234/0x6a0 [ 85.591044][ T6179] ? __pfx_chrdev_open+0x10/0x10 [ 85.591063][ T6179] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 85.591090][ T6179] do_dentry_open+0x6ab/0x14d0 [ 85.591105][ T6179] ? __pfx_chrdev_open+0x10/0x10 [ 85.591128][ T6179] vfs_open+0x82/0x3f0 [ 85.591150][ T6179] path_openat+0x19fa/0x2440 [ 85.591172][ T6179] ? __pfx_path_openat+0x10/0x10 [ 85.591196][ T6179] do_file_open+0x20e/0x430 [ 85.591216][ T6179] ? __pfx_do_file_open+0x10/0x10 [ 85.591250][ T6179] ? _raw_spin_unlock+0x28/0x50 [ 85.591274][ T6179] ? alloc_fd+0x471/0x7a0 [ 85.591300][ T6179] do_sys_openat2+0x10f/0x1e0 [ 85.591326][ T6179] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.591355][ T6179] __x64_sys_openat+0x12d/0x210 [ 85.591376][ T6179] ? __pfx___x64_sys_openat+0x10/0x10 [ 85.591405][ T6179] do_syscall_64+0x123/0x790 [ 85.591425][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.591443][ T6179] RIP: 0033:0x7fab7a79e159 [ 85.591458][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.591474][ T6179] RSP: 002b:00007fab7b6e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.591492][ T6179] RAX: ffffffffffffffda RBX: 00007fab7aa25fa0 RCX: 00007fab7a79e159 [ 85.591502][ T6179] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 85.591512][ T6179] RBP: 00007fab7a835024 R08: 0000000000000000 R09: 0000000000000000 [ 85.591522][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.591531][ T6179] R13: 00007fab7aa26038 R14: 00007fab7aa25fa0 R15: 00007ffe98bffb48 [ 85.591553][ T6179] [ 86.003101][ T5705] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.080030][ T6176] cgroup: fork rejected by pids controller in /syz2 [ 86.153703][ T5705] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 86.166638][ T5705] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.177197][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.189193][ T6186] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 86.198286][ T5705] opticon 6-1:1.0: opticon converter detected [ 86.212253][ T5705] usb 6-1: opticon converter now attached to ttyUSB0 [ 86.323589][ T5604] Bluetooth: hci3: command 0x2016 tx timeout [ 86.343175][ T2164] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.459742][ T30] audit: type=1400 audit(1788485825.406:290): avc: denied { mount } for pid=6227 comm="syz.2.101" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.497641][ T30] audit: type=1400 audit(1788485825.406:291): avc: denied { search } for pid=6227 comm="syz.2.101" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.499360][ T30] audit: type=1400 audit(1788485825.406:292): avc: denied { search } for pid=6227 comm="syz.2.101" name="cluster" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.500532][ T30] audit: type=1400 audit(1788485825.446:293): avc: denied { write search } for pid=6227 comm="syz.2.101" name="cluster" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.526001][ T2164] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 86.529845][ T2164] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.529871][ T2164] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.529890][ T2164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.529914][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.539196][ T2164] usb 5-1: config 0 descriptor?? [ 86.940997][ T25] usb 6-1: USB disconnect, device number 2 [ 86.951072][ T25] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 86.952256][ T25] opticon 6-1:1.0: device disconnected [ 86.968944][ T5704] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.125402][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.133669][ T5704] usb 3-1: not running at top speed; connect to a high speed hub [ 87.141475][ T5704] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 87.156056][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.156088][ T5704] usb 3-1: Product: syz [ 87.156114][ T5704] usb 3-1: Manufacturer: syz [ 87.156131][ T5704] usb 3-1: SerialNumber: syz [ 87.278276][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.278333][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279229][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279249][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279266][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279283][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279306][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279323][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279340][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.279357][ T2164] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 87.291522][ T2164] waterforce 0003:1044:7A4D.0001: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.4-1/input0 [ 87.344531][ T2164] waterforce 0003:1044:7A4D.0001: fw version request failed with -38 [ 87.500842][ T2164] usb 5-1: USB disconnect, device number 3 [ 87.665095][ T5704] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.754356][ T5704] usb 3-1: USB disconnect, device number 3 [ 88.475550][ T13] wlan1: Trigger new scan to find an IBSS to join [ 88.811694][ T6275] Bluetooth: MGMT ver 1.23 [ 88.818197][ T6275] IPv6: sit1: Disabled Multicast RS [ 88.818975][ T6275] sit1: entered allmulticast mode [ 88.948726][ T6277] usb usb8: usbfs: process 6277 (syz.3.117) did not claim interface 0 before use [ 89.070679][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 89.271113][ T6286] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 89.358866][ T6287] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 89.378616][ T6287] bond1 (unregistering): Released all slaves [ 89.892302][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 89.892338][ T30] audit: type=1400 audit(1788485828.836:320): avc: denied { write } for pid=6294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.976201][ T5714] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.032806][ T30] audit: type=1400 audit(1788485828.976:321): avc: denied { write } for pid=6313 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.071526][ T30] audit: type=1400 audit(1788485829.016:322): avc: denied { create } for pid=6314 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.092723][ T30] audit: type=1400 audit(1788485829.026:323): avc: denied { connect } for pid=6314 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.127497][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 90.130847][ T5714] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 90.135337][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.135357][ T5714] usb 4-1: Product: syz [ 90.135369][ T5714] usb 4-1: Manufacturer: syz [ 90.135381][ T5714] usb 4-1: SerialNumber: syz [ 90.146138][ T5714] usb 4-1: config 0 descriptor?? [ 90.153380][ T5714] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 90.418637][ T30] audit: type=1400 audit(1788485829.366:324): avc: denied { write } for pid=6319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.524078][ T30] audit: type=1400 audit(1788485829.476:325): avc: denied { write } for pid=6330 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.739606][ T6253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.866028][ T30] audit: type=1400 audit(1788485829.816:326): avc: denied { write } for pid=6333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.038710][ T6349] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 91.066541][ T30] audit: type=1400 audit(1788485830.016:327): avc: denied { write } for pid=6346 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.090653][ T30] audit: type=1400 audit(1788485830.036:328): avc: denied { ioctl } for pid=6344 comm="syz.4.127" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.214884][ T5705] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.265049][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.386985][ T5705] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 91.403345][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.413828][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.414737][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 1.00 [ 91.415720][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.435378][ T13] wlan1: Creating new IBSS network, BSSID 8a:70:18:aa:d9:42 [ 91.476099][ T5705] as10x_usb: device has been detected [ 91.485697][ T5705] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 91.520271][ T30] audit: type=1400 audit(1788485830.466:329): avc: denied { read write } for pid=6365 comm="syz.2.131" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 91.552409][ T5705] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 91.680197][ T5705] as10x_usb: error during firmware upload part1 [ 91.689566][ T5705] Registered device Abilis Systems DVB-Titan [ 91.845449][ T5714] gspca_ov534_9: reg_r err -71 [ 92.103022][ T5714] gspca_ov534_9: Unknown sensor 0000 [ 92.103104][ T5714] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 92.110851][ T5714] usb 4-1: USB disconnect, device number 2 [ 92.324914][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.332101][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.340209][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.341175][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.341554][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.378148][ T5714] usb 5-1: USB disconnect, device number 4 [ 92.487160][ T5714] Unregistered device Abilis Systems DVB-Titan [ 92.505553][ T5714] as10x_usb: device has been disconnected [ 92.631065][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 92.852620][ T5714] usb 6-1: USB disconnect, device number 3 [ 92.875862][ T1158] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.022366][ T1158] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.166495][ T1158] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.207017][ T6403] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 93.248693][ T1158] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.546480][ T6416] process 'syz.5.143' launched './file0' with NULL argv: empty string added [ 93.643066][ T5705] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.740230][ T1158] bridge_slave_1: left allmulticast mode [ 93.740264][ T1158] bridge_slave_1: left promiscuous mode [ 93.740432][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.759693][ T5727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.778752][ T1158] bridge_slave_0: left allmulticast mode [ 93.778790][ T1158] bridge_slave_0: left promiscuous mode [ 93.778958][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.799378][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 93.799946][ T5705] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 93.822270][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.822304][ T5705] usb 4-1: Product: syz [ 93.822332][ T5705] usb 4-1: Manufacturer: syz [ 93.822348][ T5705] usb 4-1: SerialNumber: syz [ 93.870050][ T5705] usb 4-1: config 0 descriptor?? [ 93.893237][ T5705] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 93.917855][ T5727] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 1.00 [ 93.929777][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.938966][ T5727] usb 3-1: Product: syz [ 93.943261][ T5727] usb 3-1: Manufacturer: syz [ 93.947927][ T5727] usb 3-1: SerialNumber: syz [ 94.165506][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.178640][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.193876][ T1158] bond0 (unregistering): Released all slaves [ 94.393531][ T5613] Bluetooth: hci5: command tx timeout [ 94.476134][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 94.509552][ T5727] peak_usb 3-1:1.0: PEAK-System PCAN-USB adapter hwrev 1 serial 00000000 (1 channel) [ 94.509612][ T5727] peak_usb 3-1:1.0: Firmware update available. Please contact support.peak@hms-networks.com [ 94.925857][ T1158] hsr_slave_0: left promiscuous mode [ 94.938356][ T1158] hsr_slave_1: left promiscuous mode [ 94.938968][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.938983][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.945486][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.945503][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.976053][ T1158] veth1_macvtap: left promiscuous mode [ 94.976084][ T1158] veth0_macvtap: left promiscuous mode [ 94.976153][ T1158] veth1_vlan: left promiscuous mode [ 94.976200][ T1158] veth0_vlan: left promiscuous mode [ 95.299037][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 95.299076][ T30] audit: type=1400 audit(1788485834.246:347): avc: denied { write } for pid=6445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.347508][ T5705] gspca_topro: Sensor cx0342 [ 95.478814][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 95.509825][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 95.592922][ T2164] usb 4-1: USB disconnect, device number 3 [ 95.614540][ T30] audit: type=1400 audit(1788485834.566:348): avc: denied { write } for pid=6461 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.757114][ T5727] peak_usb 3-1:1.0 can0: sending cmd f=0x9 n=0x2 failure: -110 [ 95.835750][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 95.899921][ T5727] peak_usb 3-1:1.0: probe with driver peak_usb failed with error -110 [ 95.940228][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.940316][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.940432][ T6388] bridge_slave_0: entered allmulticast mode [ 95.945254][ T6388] bridge_slave_0: entered promiscuous mode [ 95.962715][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.962794][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.962891][ T6388] bridge_slave_1: entered allmulticast mode [ 95.978268][ T6388] bridge_slave_1: entered promiscuous mode [ 96.063488][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.085273][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.177942][ T6388] team0: Port device team_slave_0 added [ 96.194861][ T6388] team0: Port device team_slave_1 added [ 96.232671][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.240251][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.268607][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.280703][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.289986][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.290611][ T30] audit: type=1400 audit(1788485835.236:349): avc: denied { write } for pid=6475 comm="syz.3.149" lport=49787 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 96.292494][ T30] audit: type=1400 audit(1788485835.236:350): avc: denied { setopt } for pid=6475 comm="syz.3.149" lport=49787 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 96.303182][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.411664][ T6388] hsr_slave_0: entered promiscuous mode [ 96.412385][ T6388] hsr_slave_1: entered promiscuous mode [ 96.412891][ T6388] debugfs: 'hsr0' already exists in 'hsr' [ 96.412910][ T6388] Cannot create hsr debugfs directory [ 96.473347][ T5613] Bluetooth: hci5: command tx timeout [ 96.662024][ T30] audit: type=1400 audit(1788485835.606:351): avc: denied { write } for pid=6472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.734501][ T6388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 96.754406][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.756018][ T6388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 96.769737][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.771190][ T6388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 96.790801][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.792588][ T6388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 96.810435][ T30] audit: type=1400 audit(1788485835.756:352): avc: denied { write } for pid=6489 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.818726][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.908205][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 96.998941][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.055257][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.079002][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.079101][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.105891][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.105999][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.124652][ T30] audit: type=1400 audit(1788485836.076:353): avc: denied { node_bind } for pid=6504 comm="syz.5.152" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 97.353790][ T30] audit: type=1400 audit(1788485836.306:354): avc: denied { accept } for pid=6511 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.354619][ T30] audit: type=1400 audit(1788485836.306:355): avc: denied { read } for pid=6511 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.490578][ T30] audit: type=1400 audit(1788485836.436:356): avc: denied { write } for pid=6498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.625436][ T25] usb 3-1: USB disconnect, device number 4 [ 97.689106][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 97.888660][ T6539] tmpfs: Bad value for 'nr_blocks' [ 98.082152][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.504982][ T6388] veth0_vlan: entered promiscuous mode [ 98.512870][ T6388] veth1_vlan: entered promiscuous mode [ 98.546381][ T6388] veth0_macvtap: entered promiscuous mode [ 98.553395][ T5613] Bluetooth: hci5: command tx timeout [ 98.568727][ T6388] veth1_macvtap: entered promiscuous mode [ 98.588086][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.601259][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.609376][ T1158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609507][ T1158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609630][ T1158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609675][ T1158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709293][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.709329][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.745352][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.745384][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.008052][ T6567] kvm: MONITOR instruction emulated as NOP! [ 99.825540][ T6623] FAULT_INJECTION: forcing a failure. [ 99.825540][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 99.825585][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.5.172 Not tainted syzkaller #0 PREEMPT(full) [ 99.825609][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 99.825620][ T6623] Call Trace: [ 99.825627][ T6623] [ 99.825638][ T6623] dump_stack_lvl+0x100/0x190 [ 99.825670][ T6623] should_fail_ex.cold+0x5/0xa [ 99.825697][ T6623] should_failslab+0xc2/0x120 [ 99.825723][ T6623] __kmalloc_noprof+0xfc/0x840 [ 99.825743][ T6623] ? bpf_test_init.isra.0+0x88/0x100 [ 99.825774][ T6623] bpf_test_init.isra.0+0x88/0x100 [ 99.825801][ T6623] bpf_prog_test_run_xdp+0x587/0x1670 [ 99.825836][ T6623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.825868][ T6623] ? fput+0x7c/0x100 [ 99.825888][ T6623] ? __bpf_prog_get+0x97/0x290 [ 99.825909][ T6623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.825930][ T6623] __sys_bpf+0x2265/0x4a30 [ 99.825948][ T6623] ? __pfx___sys_bpf+0x10/0x10 [ 99.825961][ T6623] ? find_held_lock+0x2b/0x80 [ 99.825982][ T6623] ? futex_wake+0x4ea/0x5e0 [ 99.826021][ T6623] ? find_held_lock+0x2b/0x80 [ 99.826041][ T6623] ? clockevents_program_event+0x23e/0x820 [ 99.826062][ T6623] ? clockevents_program_event+0x23e/0x820 [ 99.826099][ T6623] ? __x64_sys_futex+0x34f/0x4d0 [ 99.826118][ T6623] ? __x64_sys_futex+0x358/0x4d0 [ 99.826139][ T6623] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 99.826163][ T6623] ? xfd_validate_state+0x129/0x190 [ 99.826183][ T6623] ? __x64_sys_bpf+0xce/0x140 [ 99.826197][ T6623] __x64_sys_bpf+0xce/0x140 [ 99.826213][ T6623] ? do_syscall_64+0xae/0x790 [ 99.826233][ T6623] do_syscall_64+0x123/0x790 [ 99.826252][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.826269][ T6623] RIP: 0033:0x7fab7a79e159 [ 99.826284][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.826299][ T6623] RSP: 002b:00007fab7b6e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.826316][ T6623] RAX: ffffffffffffffda RBX: 00007fab7aa25fa0 RCX: 00007fab7a79e159 [ 99.826327][ T6623] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 99.826337][ T6623] RBP: 00007fab7a835024 R08: 0000000000000000 R09: 0000000000000000 [ 99.826347][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.826357][ T6623] R13: 00007fab7aa26038 R14: 00007fab7aa25fa0 R15: 00007ffe98bffb48 [ 99.826379][ T6623] [ 99.982705][ T6628] netlink: 220 bytes leftover after parsing attributes in process `syz.2.173'. [ 100.325578][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 100.325613][ T30] audit: type=1400 audit(1788485839.276:372): avc: denied { name_connect } for pid=6644 comm="syz.6.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 100.633871][ T5613] Bluetooth: hci5: command tx timeout [ 100.682720][ T6653] FAULT_INJECTION: forcing a failure. [ 100.682720][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 100.687729][ T30] audit: type=1400 audit(1788485839.636:373): avc: denied { read } for pid=6609 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.691052][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.6.179 Not tainted syzkaller #0 PREEMPT(full) [ 100.691079][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 100.691089][ T6653] Call Trace: [ 100.691096][ T6653] [ 100.691103][ T6653] dump_stack_lvl+0x100/0x190 [ 100.691133][ T6653] should_fail_ex.cold+0x5/0xa [ 100.691158][ T6653] should_failslab+0xc2/0x120 [ 100.691181][ T6653] __kmalloc_cache_noprof+0x91/0x6d0 [ 100.691207][ T6653] ? __request_module+0x2b7/0x6a0 [ 100.691232][ T6653] __request_module+0x2b7/0x6a0 [ 100.691252][ T6653] ? __pfx___request_module+0x10/0x10 [ 100.691273][ T6653] ? __pfx___mutex_lock+0x10/0x10 [ 100.691294][ T6653] ? lock_acquire+0x1d1/0x380 [ 100.691325][ T6653] bpf_fill_super+0x742/0x960 [ 100.691347][ T6653] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 100.691375][ T6653] ? __pfx_bpf_fill_super+0x10/0x10 [ 100.691404][ T6653] ? rcu_is_watching+0x13/0xc0 [ 100.691424][ T6653] ? cap_capable+0x107/0x430 [ 100.691448][ T6653] ? __pfx_bpf_fill_super+0x10/0x10 [ 100.691470][ T6653] get_tree_nodev+0xdd/0x190 [ 100.691487][ T6653] vfs_get_tree+0x92/0x320 [ 100.691512][ T6653] vfs_cmd_create+0xd7/0x2a0 [ 100.691538][ T6653] __do_sys_fsconfig+0x55a/0xcb0 [ 100.691563][ T6653] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 100.691599][ T6653] do_syscall_64+0x123/0x790 [ 100.691619][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.691636][ T6653] RIP: 0033:0x7f70ff99e159 [ 100.691651][ T6653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.691666][ T6653] RSP: 002b:00007f7100797028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 100.691683][ T6653] RAX: ffffffffffffffda RBX: 00007f70ffc25fa0 RCX: 00007f70ff99e159 [ 100.691694][ T6653] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 100.691703][ T6653] RBP: 00007f70ffa35024 R08: 0000000000000000 R09: 0000000000000000 [ 100.691713][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.691722][ T6653] R13: 00007f70ffc26038 R14: 00007f70ffc25fa0 R15: 00007ffeead53888 [ 100.691745][ T6653] [ 100.708096][ T30] audit: type=1400 audit(1788485839.656:374): avc: denied { mount } for pid=6650 comm="syz.6.179" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 101.286393][ T6676] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 101.318396][ T6676] bond1: entered promiscuous mode [ 101.318723][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.344344][ T30] audit: type=1400 audit(1788485840.296:375): avc: denied { write } for pid=6678 comm="syz.5.184" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.366970][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.368207][ T6676] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 101.368471][ T6676] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 101.374908][ T6676] bond1: (slave ipip0): making interface the new active one [ 101.374926][ T6676] ipip0: entered promiscuous mode [ 101.375068][ T5727] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.396599][ T6676] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 101.543001][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 101.548678][ T5727] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 101.558700][ T5727] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.558737][ T5727] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.558778][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.563631][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 101.567597][ T30] audit: type=1400 audit(1788485840.516:376): avc: denied { setopt } for pid=6685 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.616477][ T5727] usb 4-1: config 0 descriptor?? [ 101.670720][ T30] audit: type=1400 audit(1788485840.616:377): avc: denied { mount } for pid=6690 comm="syz.2.189" name="/" dev="ramfs" ino=13495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.713024][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 101.713506][ T31] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 101.714372][ T31] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 101.714390][ T31] usb 7-1: config 0 has no interface number 0 [ 101.714418][ T31] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.714434][ T31] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 101.714456][ T31] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 101.714474][ T31] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 101.714494][ T31] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.716098][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.716115][ T31] usb 7-1: Product: syz [ 101.716126][ T31] usb 7-1: Manufacturer: syz [ 101.716687][ T31] usb 7-1: SerialNumber: syz [ 101.721823][ T31] usb 7-1: config 0 descriptor?? [ 101.837300][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.837678][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.855308][ T5727] usbhid 4-1:0.0: can't add hid device: -71 [ 101.855401][ T5727] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 101.873800][ T5727] usb 4-1: USB disconnect, device number 4 [ 101.942323][ T31] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 102.007364][ T6701] FAULT_INJECTION: forcing a failure. [ 102.007364][ T6701] name failslab, interval 1, probability 0, space 0, times 0 [ 102.009897][ T30] audit: type=1400 audit(1788485840.956:378): avc: denied { ioctl } for pid=6698 comm="syz.2.192" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13050 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.048361][ T6701] CPU: 0 UID: 0 PID: 6701 Comm: syz.5.193 Not tainted syzkaller #0 PREEMPT(full) [ 102.048390][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 102.048400][ T6701] Call Trace: [ 102.048406][ T6701] [ 102.048413][ T6701] dump_stack_lvl+0x100/0x190 [ 102.048445][ T6701] should_fail_ex.cold+0x5/0xa [ 102.048471][ T6701] should_failslab+0xc2/0x120 [ 102.048494][ T6701] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 102.048513][ T6701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.048534][ T6701] ? alloc_pwq+0x3ff/0xdd0 [ 102.048557][ T6701] alloc_pwq+0x3ff/0xdd0 [ 102.048582][ T6701] apply_wqattrs_prepare+0x3aa/0xbb0 [ 102.048611][ T6701] apply_workqueue_attrs_locked+0x64/0xe0 [ 102.048631][ T6701] __alloc_workqueue+0x9a7/0x1950 [ 102.048660][ T6701] alloc_workqueue_noprof+0xc7/0x130 [ 102.048684][ T6701] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 102.048711][ T6701] ? __pfx___debug_object_init+0x10/0x10 [ 102.048737][ T6701] nci_register_device+0x21e/0xb80 [ 102.048767][ T6701] ? __pfx_nci_register_device+0x10/0x10 [ 102.048797][ T6701] ? lockdep_init_map_type+0x5c/0x250 [ 102.048819][ T6701] virtual_ncidev_open+0x141/0x220 [ 102.048841][ T6701] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 102.048863][ T6701] misc_open+0x26d/0x450 [ 102.048891][ T6701] ? __pfx_misc_open+0x10/0x10 [ 102.048914][ T6701] chrdev_open+0x234/0x6a0 [ 102.048936][ T6701] ? __pfx_chrdev_open+0x10/0x10 [ 102.048959][ T6701] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 102.048990][ T6701] do_dentry_open+0x6ab/0x14d0 [ 102.049007][ T6701] ? __pfx_chrdev_open+0x10/0x10 [ 102.049033][ T6701] vfs_open+0x82/0x3f0 [ 102.049059][ T6701] path_openat+0x19fa/0x2440 [ 102.049085][ T6701] ? __pfx_path_openat+0x10/0x10 [ 102.049113][ T6701] do_file_open+0x20e/0x430 [ 102.049137][ T6701] ? __pfx_do_file_open+0x10/0x10 [ 102.049177][ T6701] ? _raw_spin_unlock+0x28/0x50 [ 102.049205][ T6701] ? alloc_fd+0x471/0x7a0 [ 102.049234][ T6701] do_sys_openat2+0x10f/0x1e0 [ 102.049277][ T6701] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.049302][ T6701] ? find_held_lock+0x2b/0x80 [ 102.049330][ T6701] __x64_sys_openat+0x12d/0x210 [ 102.049354][ T6701] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.049387][ T6701] do_syscall_64+0x123/0x790 [ 102.049411][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.049431][ T6701] RIP: 0033:0x7fab7a79e159 [ 102.049447][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.049466][ T6701] RSP: 002b:00007fab7b6e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.049485][ T6701] RAX: ffffffffffffffda RBX: 00007fab7aa25fa0 RCX: 00007fab7a79e159 [ 102.049497][ T6701] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 102.049508][ T6701] RBP: 00007fab7a835024 R08: 0000000000000000 R09: 0000000000000000 [ 102.049520][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.049531][ T6701] R13: 00007fab7aa26038 R14: 00007fab7aa25fa0 R15: 00007ffe98bffb48 [ 102.049556][ T6701] [ 102.186421][ T5727] usb 7-1: USB disconnect, device number 2 [ 102.186535][ C0] iowarrior 7-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 102.325606][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.413030][ T5705] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.484661][ T31] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 102.494775][ T31] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.494814][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.494856][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.521937][ T31] usb 4-1: config 0 descriptor?? [ 102.574606][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 102.575933][ T5705] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.577483][ T5705] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.577502][ T5705] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.577519][ T5705] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.577555][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.577572][ T5705] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.577591][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.577621][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.585424][ T5705] usb 3-1: config 0 descriptor?? [ 102.817837][ T5705] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 102.829459][ T5705] usb 3-1: USB disconnect, device number 5 [ 102.856281][ T5705] usblp0: removed [ 102.974840][ T31] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input6 [ 103.024802][ T31] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 103.323747][ T5705] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.454547][ T25] usb 4-1: USB disconnect, device number 5 [ 103.484034][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 103.487153][ T5705] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 103.487986][ T5705] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.488004][ T5705] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.488021][ T5705] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.488053][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.488070][ T5705] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.488089][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.488119][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.495914][ T5705] usb 3-1: config 0 descriptor?? [ 103.739904][ T5705] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.023771][ C0] usblp0: nonzero read bulk status received: -71 [ 104.026385][ T5727] usb 3-1: USB disconnect, device number 6 [ 104.034127][ T6703] usblp0: error -71 reading from printer [ 104.135354][ T30] audit: type=1400 audit(1788485843.086:379): avc: denied { read write } for pid=6726 comm="syz.5.199" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.138480][ T30] audit: type=1400 audit(1788485843.086:380): avc: denied { open } for pid=6726 comm="syz.5.199" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.326680][ T6702] usblp0: removed [ 104.905778][ T30] audit: type=1400 audit(1788485844.853:381): avc: denied { ioctl } for pid=6746 comm="syz.6.205" path="socket:[13249]" dev="sockfs" ino=13249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.228391][ T6755] syz_tun: entered allmulticast mode [ 105.379196][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 105.379227][ T30] audit: type=1400 audit(1788485845.323:383): avc: denied { ioctl } for pid=6756 comm="syz.5.209" path="socket:[14370]" dev="sockfs" ino=14370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.429666][ T6757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 105.443775][ T6757] batman_adv: batadv0: Adding interface: gretap1 [ 105.450256][ T6757] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.476424][ T6757] batman_adv: batadv0: Interface activated: gretap1 [ 105.506618][ T30] audit: type=1400 audit(1788485845.453:384): avc: denied { mount } for pid=6758 comm="syz.6.210" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.065005][ T30] audit: type=1400 audit(1788485846.013:385): avc: denied { unmount } for pid=6388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.257783][ T30] audit: type=1400 audit(1788485846.203:386): avc: denied { create } for pid=6769 comm="syz.6.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.336357][ T30] audit: type=1400 audit(1788485846.283:387): avc: denied { connect } for pid=6769 comm="syz.6.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.357689][ T30] audit: type=1400 audit(1788485846.283:388): avc: denied { write } for pid=6769 comm="syz.6.213" path="socket:[14462]" dev="sockfs" ino=14462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.878370][ T30] audit: type=1400 audit(1788485846.823:389): avc: denied { create } for pid=6783 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 106.951003][ T30] audit: type=1400 audit(1788485846.893:390): avc: denied { sys_admin } for pid=6783 comm="syz.3.219" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 107.295184][ T30] audit: type=1400 audit(1788485847.243:391): avc: denied { map } for pid=6789 comm="syz.5.221" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.609701][ T6796] syz.6.223 uses obsolete (PF_INET,SOCK_PACKET) [ 107.873018][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 108.023541][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 108.030448][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.034100][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.036905][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.036925][ T9] usb 6-1: Product: syz [ 108.036937][ T9] usb 6-1: Manufacturer: syz [ 108.036949][ T9] usb 6-1: SerialNumber: syz [ 108.051433][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 108.082865][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 108.116334][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 108.393115][ T6793] mmap: syz.3.222 (6793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.580989][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.6.227'. [ 108.682708][ T30] audit: type=1400 audit(1788485848.623:392): avc: denied { write } for pid=6800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.120498][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.131161][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.141167][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.149197][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.156704][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.882608][ T6593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.001042][ T6798] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 110.015817][ T942] usb 6-1: USB disconnect, device number 4 [ 110.036942][ T942] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 110.051722][ T942] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 110.066686][ T942] ti_usb_3410_5052 6-1:2.0: device disconnected [ 110.118837][ T6593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.437865][ T6593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.568438][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 110.568475][ T30] audit: type=1400 audit(1788485850.513:401): avc: denied { mount } for pid=6855 comm="syz.2.233" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 110.651600][ T30] audit: type=1400 audit(1788485850.573:402): avc: denied { search } for pid=6855 comm="syz.2.233" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 110.651669][ T30] audit: type=1400 audit(1788485850.573:403): avc: denied { read write } for pid=6855 comm="syz.2.233" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 110.651698][ T30] audit: type=1400 audit(1788485850.573:404): avc: denied { open } for pid=6855 comm="syz.2.233" path="/60/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 110.661970][ T30] audit: type=1400 audit(1788485850.603:405): avc: denied { write } for pid=6856 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.847280][ T6593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.195288][ T5613] Bluetooth: hci1: command tx timeout [ 111.578610][ T30] audit: type=1400 audit(1788485851.523:406): avc: denied { create } for pid=6870 comm="syz.6.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.632886][ T30] audit: type=1400 audit(1788485851.573:407): avc: denied { bind } for pid=6870 comm="syz.6.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.645328][ T30] audit: type=1400 audit(1788485851.593:408): avc: denied { accept } for pid=6874 comm="syz.5.236" lport=56890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.244889][ T30] audit: type=1400 audit(1788485852.193:409): avc: denied { write } for pid=6873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.359355][ T30] audit: type=1400 audit(1788485852.303:410): avc: denied { read } for pid=6890 comm="syz.6.238" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 112.398685][ T6593] bond0 (unregistering): Released all slaves [ 112.619437][ T6899] FAULT_INJECTION: forcing a failure. [ 112.619437][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 112.633143][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 112.633171][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 112.633183][ T6899] Call Trace: [ 112.633190][ T6899] [ 112.633197][ T6899] dump_stack_lvl+0x100/0x190 [ 112.633227][ T6899] should_fail_ex.cold+0x5/0xa [ 112.633258][ T6899] should_failslab+0xc2/0x120 [ 112.633281][ T6899] __kmalloc_noprof+0xfc/0x840 [ 112.633301][ T6899] ? tomoyo_encode2+0xfb/0x3c0 [ 112.633324][ T6899] tomoyo_encode2+0xfb/0x3c0 [ 112.633347][ T6899] tomoyo_encode+0x29/0x50 [ 112.633365][ T6899] tomoyo_realpath_from_path+0x18c/0x690 [ 112.633391][ T6899] tomoyo_check_open_permission+0x2af/0x3c0 [ 112.633420][ T6899] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 112.633456][ T6899] ? hook_file_open+0x248/0x8e0 [ 112.633495][ T6899] ? path_get+0x61/0x80 [ 112.633520][ T6899] tomoyo_file_open+0x6b/0x90 [ 112.633543][ T6899] security_file_open+0xb5/0x1e0 [ 112.633563][ T6899] do_dentry_open+0x588/0x14d0 [ 112.633587][ T6899] vfs_open+0x82/0x3f0 [ 112.633616][ T6899] path_openat+0x19fa/0x2440 [ 112.633642][ T6899] ? __pfx_path_openat+0x10/0x10 [ 112.633670][ T6899] do_file_open+0x20e/0x430 [ 112.633694][ T6899] ? __pfx_do_file_open+0x10/0x10 [ 112.633730][ T6899] ? _raw_spin_unlock+0x28/0x50 [ 112.633759][ T6899] ? alloc_fd+0x471/0x7a0 [ 112.633788][ T6899] do_sys_openat2+0x10f/0x1e0 [ 112.633812][ T6899] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.633834][ T6899] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 112.633863][ T6899] __x64_sys_openat+0x12d/0x210 [ 112.633887][ T6899] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.633922][ T6899] do_syscall_64+0x123/0x790 [ 112.633945][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.633965][ T6899] RIP: 0033:0x7f4eaeb5e98e [ 112.633981][ T6899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.633998][ T6899] RSP: 002b:00007f4eafadeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.634017][ T6899] RAX: ffffffffffffffda RBX: 00007f4eafadf6c0 RCX: 00007f4eaeb5e98e [ 112.634028][ T6899] RDX: 00000000001a3301 RSI: 00007f4eafadec00 RDI: ffffffffffffff9c [ 112.634039][ T6899] RBP: 00007f4eafadec00 R08: 0000000000000000 R09: 0000000000000000 [ 112.634049][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 112.634064][ T6899] R13: 00007f4eaee26038 R14: 00007f4eaee25fa0 R15: 00007ffec28c6268 [ 112.634087][ T6899] [ 112.745829][ T6899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.754686][ T6901] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 112.883058][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.883249][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.883355][ T6828] bridge_slave_0: entered allmulticast mode [ 112.911587][ T6828] bridge_slave_0: entered promiscuous mode [ 112.921210][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.921282][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.921370][ T6828] bridge_slave_1: entered allmulticast mode [ 112.932219][ T6828] bridge_slave_1: entered promiscuous mode [ 113.139933][ T6828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.174769][ T6828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.245987][ T6593] hsr_slave_0: left promiscuous mode [ 113.251756][ T6593] hsr_slave_1: left promiscuous mode [ 113.273473][ T5613] Bluetooth: hci1: command tx timeout [ 113.275597][ T6593] veth1_macvtap: left promiscuous mode [ 113.275624][ T6593] veth0_macvtap: left promiscuous mode [ 113.275705][ T6593] veth1_vlan: left promiscuous mode [ 113.736174][ T6593] team0 (unregistering): Port device vlan0 removed [ 113.785202][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.244'. [ 114.029950][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038707800: rx timeout, send abort [ 114.184007][ T6828] team0: Port device team_slave_0 added [ 114.189818][ T6828] team0: Port device team_slave_1 added [ 114.234327][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.242218][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.242260][ T6828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.292441][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.292472][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.292492][ T6828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.404524][ T6828] hsr_slave_0: entered promiscuous mode [ 114.418100][ T6828] hsr_slave_1: entered promiscuous mode [ 114.418611][ T6828] debugfs: 'hsr0' already exists in 'hsr' [ 114.418649][ T6828] Cannot create hsr debugfs directory [ 114.494813][ T942] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.655696][ T942] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.658284][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.658308][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 114.670620][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.670642][ T942] usb 4-1: Product: syz [ 114.670655][ T942] usb 4-1: Manufacturer: syz [ 114.670668][ T942] usb 4-1: SerialNumber: syz [ 114.687638][ T942] usb 4-1: config 0 descriptor?? [ 114.905871][ T6828] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.917610][ T6828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.930310][ T6828] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.941979][ T6828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.950006][ T6828] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.964273][ T6828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.977201][ T6828] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.991577][ T6828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.108062][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.144386][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.162960][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.163049][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.165506][ T6977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 115.168037][ T942] usb 4-1: USB disconnect, device number 6 [ 115.177812][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.177907][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.190779][ T6977] kvm: pic: level sensitive irq not supported [ 115.190821][ T6977] kvm: pic: level sensitive irq not supported [ 115.198880][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 115.354063][ T5613] Bluetooth: hci1: command tx timeout [ 115.386654][ T6372] udevd[6372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.758778][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 115.759508][ T30] audit: type=1400 audit(1788485855.703:429): avc: denied { write } for pid=6986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.917931][ T30] audit: type=1400 audit(1788485855.863:430): avc: denied { write } for pid=7012 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.029512][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 116.044449][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.165981][ T30] audit: type=1400 audit(1788485856.113:431): avc: denied { read write } for pid=7024 comm="syz.6.261" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.190818][ T30] audit: type=1400 audit(1788485856.113:432): avc: denied { open } for pid=7024 comm="syz.6.261" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.392267][ T6828] veth0_vlan: entered promiscuous mode [ 116.400098][ T6828] veth1_vlan: entered promiscuous mode [ 116.426158][ T6828] veth0_macvtap: entered promiscuous mode [ 116.429986][ T6828] veth1_macvtap: entered promiscuous mode [ 116.440717][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.450466][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.513328][ T6578] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.513380][ T6578] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.513420][ T6578] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.513452][ T6578] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.552787][ T30] audit: type=1400 audit(1788485856.493:433): avc: denied { write } for pid=7022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.650908][ T6593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.659092][ T6593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.670347][ T30] audit: type=1400 audit(1788485856.623:434): avc: denied { write } for pid=7043 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.730734][ T6593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.730765][ T6593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.757660][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 117.072368][ T30] audit: type=1400 audit(1788485857.013:435): avc: denied { mount } for pid=7059 comm="syz.3.266" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 117.100659][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 117.149224][ T7061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.266'. [ 117.159843][ T30] audit: type=1400 audit(1788485857.093:436): avc: denied { write } for pid=7052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.187149][ T30] audit: type=1400 audit(1788485857.133:437): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 117.283780][ T31] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.296302][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.296356][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.315313][ T30] audit: type=1400 audit(1788485857.243:438): avc: denied { write } for pid=7070 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.345181][ T31] usb 8-1: config 0 descriptor?? [ 117.358114][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 117.360203][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 117.411440][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 117.435577][ T5613] Bluetooth: hci1: command tx timeout [ 117.504324][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 117.504955][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.505801][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 117.505834][ T9] usb 7-1: config 0 has no interface number 0 [ 117.505870][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 117.508682][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.508702][ T9] usb 7-1: Product: syz [ 117.508715][ T9] usb 7-1: Manufacturer: syz [ 117.508727][ T9] usb 7-1: SerialNumber: syz [ 117.510709][ T9] usb 7-1: config 0 descriptor?? [ 117.771924][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 117.779733][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 117.786870][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 117.799427][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 117.806608][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.016569][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 118.025263][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 118.032761][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 118.041467][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 118.042538][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 118.042848][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 118.043259][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.043568][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.043972][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.044274][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.049155][ T31] pwc: Registered as video103. [ 118.053843][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input7 [ 118.066799][ T31] usb 8-1: USB disconnect, device number 2 [ 118.125533][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 118.125574][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.956007][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 118.956050][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 118.956081][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 118.956437][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 119.002811][ T9] usb 7-1: USB disconnect, device number 3 [ 119.534806][ T6577] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 119.589184][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.589652][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.593203][ T7112] bridge0: entered allmulticast mode [ 119.628241][ T7112] bridge_slave_1: left allmulticast mode [ 119.628300][ T7112] bridge_slave_1: left promiscuous mode [ 119.629361][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.642317][ T7112] bridge_slave_0: left allmulticast mode [ 119.642340][ T7112] bridge_slave_0: left promiscuous mode [ 119.649698][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.780257][ T7118] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.744683][ T7139] netlink: 'syz.5.291': attribute type 13 has an invalid length. [ 120.948618][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.949099][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.054560][ T7139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.069658][ T7139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.179444][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.295'. [ 121.226698][ T7139] batman_adv: batadv0: Interface deactivated: gretap1 [ 121.296929][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 121.296968][ T30] audit: type=1400 audit(1788485861.243:459): avc: denied { read } for pid=7157 comm="syz.6.298" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.297284][ T7158] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 121.297298][ T7158] audit: out of memory in audit_log_start [ 121.298135][ T30] audit: type=1400 audit(1788485861.243:460): avc: denied { ioctl } for pid=7157 comm="syz.6.298" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.303777][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 121.328067][ T6577] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.328108][ T6577] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.328137][ T6577] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.328171][ T6577] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.473467][ T2164] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 121.625019][ T2164] usb 8-1: Using ep0 maxpacket: 16 [ 121.630844][ T2164] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.641201][ T2164] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.653266][ T2164] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.653293][ T2164] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.653333][ T2164] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.708407][ T2164] usb 8-1: config 0 descriptor?? [ 122.152826][ T2164] hid_parser_main: 852 callbacks suppressed [ 122.162031][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162083][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162112][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162134][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162156][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162176][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162196][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.162215][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.205178][ T2164] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 122.244262][ T2164] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0003/input/input8 [ 122.333051][ T2164] input input8: event field not found [ 122.387368][ T2164] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 122.400048][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 122.417475][ T2164] usb 8-1: USB disconnect, device number 3 [ 122.557781][ T7187] fido_id[7187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 122.781781][ T30] audit: type=1400 audit(1788485862.723:461): avc: denied { read write } for pid=7193 comm="syz.5.310" name="video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 122.781849][ T30] audit: type=1400 audit(1788485862.723:462): avc: denied { open } for pid=7193 comm="syz.5.310" path="/dev/video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 122.827937][ T30] audit: type=1400 audit(1788485862.763:463): avc: denied { create } for pid=7189 comm="syz.6.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.835389][ T30] audit: type=1400 audit(1788485862.783:464): avc: denied { write } for pid=7189 comm="syz.6.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.213644][ T5691] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 123.324078][ T942] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.363287][ T5691] usb 6-1: Using ep0 maxpacket: 8 [ 123.364165][ T5691] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.365075][ T5691] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 123.365111][ T5691] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.365129][ T5691] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.365150][ T5691] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.365170][ T5691] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.365201][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.473679][ T942] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 123.475007][ T942] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.475033][ T942] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.475053][ T942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.475078][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.477865][ T942] usb 4-1: config 0 descriptor?? [ 123.492082][ T7216] netlink: 'syz.6.318': attribute type 1 has an invalid length. [ 123.492100][ T7216] netlink: 224 bytes leftover after parsing attributes in process `syz.6.318'. [ 123.584583][ T5691] usb 6-1: usb_control_msg returned -32 [ 123.584636][ T5691] usbtmc 6-1:16.0: can't read capabilities [ 123.903114][ T5714] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 123.913376][ T942] playstation 0003:054C:09CC.0004: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 124.073221][ T5714] usb 8-1: Using ep0 maxpacket: 8 [ 124.075296][ T5714] usb 8-1: unable to get BOS descriptor or descriptor too short [ 124.075331][ T5714] usb 8-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 2.cc [ 124.075821][ T5714] usb 8-1: config 1 has no interfaces? [ 124.078513][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.078532][ T5714] usb 8-1: Product: syz [ 124.078544][ T5714] usb 8-1: Manufacturer: syz [ 124.078556][ T5714] usb 8-1: SerialNumber: syz [ 124.103683][ T942] playstation 0003:054C:09CC.0004: Invalid reportID received, expected 18 got 188 [ 124.103725][ T942] playstation 0003:054C:09CC.0004: Failed to retrieve DualShock4 pairing info: -22 [ 124.103760][ T942] playstation 0003:054C:09CC.0004: Failed to get MAC address from DualShock4 [ 124.103774][ T942] playstation 0003:054C:09CC.0004: Failed to create dualshock4. [ 124.111272][ T942] playstation 0003:054C:09CC.0004: probe with driver playstation failed with error -22 [ 124.161486][ T30] audit: type=1400 audit(1788485864.103:465): avc: denied { write } for pid=7202 comm="syz.5.312" name="usbtmc0" dev="devtmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.168940][ T942] usb 6-1: USB disconnect, device number 5 [ 124.178385][ T7225] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 124.294640][ T5714] usb 8-1: USB disconnect, device number 4 [ 124.317823][ T2164] usb 4-1: USB disconnect, device number 7 [ 124.693073][ T942] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 124.864155][ T942] usb 7-1: Using ep0 maxpacket: 32 [ 124.873983][ T942] usb 7-1: unable to get BOS descriptor or descriptor too short [ 124.881722][ T942] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 124.898424][ T942] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 124.898461][ T942] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 124.898489][ T942] usb 7-1: config 14 has no interface number 0 [ 124.898508][ T942] usb 7-1: config 14 has no interface number 1 [ 124.898558][ T942] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 124.898581][ T942] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 124.898606][ T942] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 124.898633][ T942] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 124.898658][ T942] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 124.898681][ T942] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.898704][ T942] usb 7-1: config 14 interface 57 has no altsetting 0 [ 124.898720][ T942] usb 7-1: config 14 interface 228 has no altsetting 0 [ 124.946870][ T7237] ip_tables: iptables: counters copy to user failed while replacing table [ 124.973307][ T30] audit: type=1400 audit(1788485864.913:466): avc: denied { append } for pid=7238 comm="syz.3.328" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.016204][ T942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.016229][ T942] usb 7-1: Product: syz [ 125.016243][ T942] usb 7-1: Manufacturer: syz [ 125.016257][ T942] usb 7-1: SerialNumber: syz [ 125.108186][ T7242] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 125.423021][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.499418][ T942] legousbtower 7-1:14.57: interrupt endpoints not found [ 125.583025][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 125.588933][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.599636][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 125.607926][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.617838][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.617906][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.617931][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.617974][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.653903][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.656720][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.657837][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.659890][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.661242][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.836716][ T7257] netlink: 'syz.7.332': attribute type 16 has an invalid length. [ 125.844620][ T7257] netlink: 'syz.7.332': attribute type 17 has an invalid length. [ 125.906855][ T942] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 125.923375][ T942] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 125.934518][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 125.934566][ T9] usbtmc 6-1:16.0: can't read capabilities [ 126.219990][ T5714] usb 6-1: USB disconnect, device number 6 [ 126.359712][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 126.359749][ T30] audit: type=1400 audit(1788485866.303:469): avc: denied { write } for pid=7272 comm="syz.3.335" name="usb_gadget" dev="configfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.402424][ T30] audit: type=1400 audit(1788485866.343:470): avc: denied { write } for pid=7272 comm="syz.3.335" name="UDC" dev="configfs" ino=17661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 126.426938][ T30] audit: type=1400 audit(1788485866.373:471): avc: denied { open } for pid=7272 comm="syz.3.335" path="/83/config/usb_gadget/g1/UDC" dev="configfs" ino=17661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 126.500272][ T7273] Need at least one configuration in g1. [ 126.500541][ T7273] udc dummy_udc.0: failed to start g1: -22 [ 126.500560][ T7273] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 126.509165][ T7273] UDC core: g1: couldn't find an available UDC or it's busy [ 126.647268][ T30] audit: type=1400 audit(1788485866.593:472): avc: denied { ioctl } for pid=7284 comm="syz.3.337" path="socket:[17678]" dev="sockfs" ino=17678 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.688909][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.689040][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.689130][ T7250] bridge_slave_0: entered allmulticast mode [ 126.691803][ T7250] bridge_slave_0: entered promiscuous mode [ 126.696692][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.696756][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.696838][ T7250] bridge_slave_1: entered allmulticast mode [ 126.699487][ T7250] bridge_slave_1: entered promiscuous mode [ 126.783937][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.791465][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.843389][ T30] audit: type=1400 audit(1788485866.793:473): avc: denied { name_bind } for pid=7288 comm="syz.7.339" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.898534][ T7250] team0: Port device team_slave_0 added [ 126.909116][ T7250] team0: Port device team_slave_1 added [ 126.982276][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.982311][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.982332][ T7250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.987632][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.987647][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.987667][ T7250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.100286][ T7250] hsr_slave_0: entered promiscuous mode [ 127.102193][ T7250] hsr_slave_1: entered promiscuous mode [ 127.103167][ T7250] debugfs: 'hsr0' already exists in 'hsr' [ 127.103184][ T7250] Cannot create hsr debugfs directory [ 127.276910][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.276966][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.434401][ T7228] usb 7-1: LEGO USB Tower reset control request failed [ 127.445944][ T2164] usb 7-1: USB disconnect, device number 4 [ 127.479782][ T2164] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 127.564571][ T30] audit: type=1400 audit(1788485867.513:474): avc: denied { read } for pid=7301 comm="syz.7.345" path="socket:[17829]" dev="sockfs" ino=17829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.600378][ T7250] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 127.625142][ T7250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.625758][ T7250] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 127.646236][ T30] audit: type=1400 audit(1788485867.593:475): avc: denied { shutdown } for pid=7301 comm="syz.7.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.648945][ T7250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.650004][ T7309] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.651045][ T7250] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 127.677159][ T7250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.677771][ T7250] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 127.702435][ T7250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.753370][ T5604] Bluetooth: hci0: command tx timeout [ 127.960067][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.995544][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.007460][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.007548][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.018086][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.018157][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.450390][ T30] audit: type=1400 audit(1788485868.393:476): avc: denied { write } for pid=7311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.634993][ T7342] Bluetooth: MGMT ver 1.23 [ 128.640701][ T30] audit: type=1400 audit(1788485868.583:477): avc: denied { getopt } for pid=7341 comm="syz.7.350" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.689070][ T30] audit: type=1400 audit(1788485868.633:478): avc: denied { write } for pid=7339 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.973425][ T7359] FAULT_INJECTION: forcing a failure. [ 128.973425][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 128.973470][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.3.355 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.973497][ T7359] Tainted: [L]=SOFTLOCKUP [ 128.973504][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 128.973515][ T7359] Call Trace: [ 128.973522][ T7359] [ 128.973529][ T7359] dump_stack_lvl+0x100/0x190 [ 128.973561][ T7359] should_fail_ex.cold+0x5/0xa [ 128.973586][ T7359] should_failslab+0xc2/0x120 [ 128.973610][ T7359] __kvmalloc_node_noprof+0x113/0x9b0 [ 128.973630][ T7359] ? __might_fault+0xc5/0x140 [ 128.973656][ T7359] ? xt_alloc_table_info+0x44/0xa0 [ 128.973679][ T7359] xt_alloc_table_info+0x44/0xa0 [ 128.973697][ T7359] do_ip6t_set_ctl+0x611/0xd00 [ 128.973725][ T7359] ? nf_sockopt_find.isra.0+0x222/0x290 [ 128.973743][ T7359] ? nf_sockopt_find.isra.0+0x222/0x290 [ 128.973764][ T7359] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 128.973792][ T7359] ? __mutex_unlock_slowpath+0x35d/0x930 [ 128.973818][ T7359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.973850][ T7359] ? nf_sockopt_find.isra.0+0x222/0x290 [ 128.973872][ T7359] nf_setsockopt+0x8d/0xf0 [ 128.973893][ T7359] ipv6_setsockopt+0x135/0x170 [ 128.973926][ T7359] rawv6_setsockopt+0xee/0x5a0 [ 128.973953][ T7359] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 128.973981][ T7359] ? selinux_socket_setsockopt+0x6a/0x80 [ 128.974008][ T7359] ? sock_common_setsockopt+0x2e/0xf0 [ 128.974030][ T7359] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 128.974053][ T7359] do_sock_setsockopt+0xf3/0x1d0 [ 128.974077][ T7359] __sys_setsockopt+0x195/0x220 [ 128.974110][ T7359] __x64_sys_setsockopt+0xbd/0x160 [ 128.974138][ T7359] ? do_syscall_64+0xae/0x790 [ 128.974158][ T7359] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.974178][ T7359] do_syscall_64+0x123/0x790 [ 128.974201][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.974232][ T7359] RIP: 0033:0x7f4eaeb9e159 [ 128.974250][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.974270][ T7359] RSP: 002b:00007f4eafadf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.974293][ T7359] RAX: ffffffffffffffda RBX: 00007f4eaee25fa0 RCX: 00007f4eaeb9e159 [ 128.974307][ T7359] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 128.974321][ T7359] RBP: 00007f4eaec35024 R08: 00000000000002d8 R09: 0000000000000000 [ 128.974333][ T7359] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 128.974346][ T7359] R13: 00007f4eaee26038 R14: 00007f4eaee25fa0 R15: 00007ffec28c6268 [ 128.974374][ T7359] [ 129.511651][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.670622][ T7389] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.735388][ T7387] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.811494][ T7393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.818561][ T7393] block device autoloading is deprecated and will be removed. [ 129.833850][ T5604] Bluetooth: hci0: command tx timeout [ 130.355613][ T7250] veth0_vlan: entered promiscuous mode [ 130.403364][ T7415] FAULT_INJECTION: forcing a failure. [ 130.403364][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 130.403906][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.5.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.403937][ T7415] Tainted: [L]=SOFTLOCKUP [ 130.403943][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 130.403952][ T7415] Call Trace: [ 130.403958][ T7415] [ 130.403965][ T7415] dump_stack_lvl+0x100/0x190 [ 130.403997][ T7415] should_fail_ex.cold+0x5/0xa [ 130.404024][ T7415] should_failslab+0xc2/0x120 [ 130.404048][ T7415] __kmalloc_cache_noprof+0x91/0x6d0 [ 130.404077][ T7415] ? snd_seq_port_use_ptr+0x3c/0x300 [ 130.404109][ T7415] ? snd_seq_port_connect+0x61/0x540 [ 130.404132][ T7415] snd_seq_port_connect+0x61/0x540 [ 130.404151][ T7415] ? check_subscription_permission.isra.0+0x146/0x240 [ 130.404174][ T7415] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 130.404204][ T7415] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 130.404225][ T7415] ? lock_acquire+0x1d1/0x380 [ 130.404242][ T7415] ? clientptr+0x20/0x190 [ 130.404258][ T7415] ? find_held_lock+0x2b/0x80 [ 130.404278][ T7415] ? clientptr+0x80/0x190 [ 130.404290][ T7415] call_seq_client_ctl+0xa3/0x130 [ 130.404308][ T7415] snd_seq_kernel_client_ctl+0x35/0x50 [ 130.404320][ T7415] snd_seq_oss_midi_open+0x465/0x680 [ 130.404335][ T7415] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 130.404355][ T7415] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 130.404372][ T7415] snd_seq_oss_midi_open_all+0x95/0xf0 [ 130.404389][ T7415] snd_seq_oss_open+0x81c/0xa10 [ 130.404403][ T7415] odev_open+0x6f/0x90 [ 130.404412][ T7415] ? __pfx_odev_open+0x10/0x10 [ 130.404422][ T7415] soundcore_open+0x2e3/0x5a0 [ 130.404437][ T7415] ? __pfx_soundcore_open+0x10/0x10 [ 130.404448][ T7415] chrdev_open+0x234/0x6a0 [ 130.404460][ T7415] ? __pfx_chrdev_open+0x10/0x10 [ 130.404473][ T7415] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 130.404492][ T7415] do_dentry_open+0x6ab/0x14d0 [ 130.404503][ T7415] ? __pfx_chrdev_open+0x10/0x10 [ 130.404518][ T7415] vfs_open+0x82/0x3f0 [ 130.404533][ T7415] path_openat+0x19fa/0x2440 [ 130.404548][ T7415] ? __pfx_path_openat+0x10/0x10 [ 130.404564][ T7415] do_file_open+0x20e/0x430 [ 130.404578][ T7415] ? __pfx_do_file_open+0x10/0x10 [ 130.404600][ T7415] ? _raw_spin_unlock+0x28/0x50 [ 130.404617][ T7415] ? alloc_fd+0x471/0x7a0 [ 130.404633][ T7415] do_sys_openat2+0x10f/0x1e0 [ 130.404647][ T7415] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.404666][ T7415] __x64_sys_openat+0x12d/0x210 [ 130.404682][ T7415] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.404704][ T7415] do_syscall_64+0x123/0x790 [ 130.404719][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.404732][ T7415] RIP: 0033:0x7fab7a79e159 [ 130.404742][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.404753][ T7415] RSP: 002b:00007fab7b6e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.404766][ T7415] RAX: ffffffffffffffda RBX: 00007fab7aa25fa0 RCX: 00007fab7a79e159 [ 130.404773][ T7415] RDX: 0000000000080200 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 130.404780][ T7415] RBP: 00007fab7a835024 R08: 0000000000000000 R09: 0000000000000000 [ 130.404788][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.404794][ T7415] R13: 00007fab7aa26038 R14: 00007fab7aa25fa0 R15: 00007ffe98bffb48 [ 130.404810][ T7415] [ 130.410859][ T7250] veth1_vlan: entered promiscuous mode [ 130.563815][ T7250] veth0_macvtap: entered promiscuous mode [ 130.572465][ T7250] veth1_macvtap: entered promiscuous mode [ 130.667249][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.706232][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.753086][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.753122][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.753150][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.753177][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.886777][ T7422] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 131.147792][ T6593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.147832][ T6593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.159150][ T7437] ======================================================= [ 131.159150][ T7437] WARNING: The mand mount option has been deprecated and [ 131.159150][ T7437] and is ignored by this kernel. Remove the mand [ 131.159150][ T7437] option from the mount to silence this warning. [ 131.159150][ T7437] ======================================================= [ 131.242762][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.242800][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.377508][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 131.377553][ T30] audit: type=1400 audit(1788485871.323:492): avc: denied { write } for pid=7445 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.445366][ T7449] netlink: 14544 bytes leftover after parsing attributes in process `syz.8.331'. [ 131.834671][ T7467] netlink: 'syz.8.377': attribute type 1 has an invalid length. [ 131.913312][ T5604] Bluetooth: hci0: command tx timeout [ 132.036207][ T7467] netlink: 'syz.8.377': attribute type 10 has an invalid length. [ 132.036238][ T7467] netlink: 40 bytes leftover after parsing attributes in process `syz.8.377'. [ 132.036419][ T7467] dummy0: entered promiscuous mode [ 132.177359][ T30] audit: type=1400 audit(1788485872.123:493): avc: denied { write } for pid=7458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.278463][ T30] audit: type=1400 audit(1788485872.223:494): avc: denied { write } for pid=7485 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.653607][ T30] audit: type=1400 audit(1788485872.603:495): avc: denied { getopt } for pid=7496 comm="syz.5.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.636060][ T7511] ip_tables: iptables: counters copy to user failed while replacing table [ 133.662813][ T30] audit: type=1400 audit(1788485873.603:496): avc: denied { mount } for pid=7508 comm="syz.7.389" name="/" dev="rpc_pipefs" ino=19781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 133.697120][ T30] audit: type=1400 audit(1788485873.643:497): avc: denied { unmount } for pid=6828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 133.916711][ T30] audit: type=1400 audit(1788485873.863:498): avc: denied { create } for pid=7514 comm="syz.7.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.943988][ T7515] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.390'. [ 133.993070][ T5604] Bluetooth: hci0: command tx timeout [ 134.028603][ T30] audit: type=1400 audit(1788485873.973:499): avc: denied { read } for pid=7519 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.642895][ T30] audit: type=1400 audit(1788485874.583:500): avc: denied { listen } for pid=7533 comm="syz.7.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.663559][ T30] audit: type=1400 audit(1788485874.613:501): avc: denied { accept } for pid=7533 comm="syz.7.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.900695][ T7540] netlink: 'syz.6.399': attribute type 1 has an invalid length. [ 135.024977][ T7540] bond1: entered promiscuous mode [ 135.030409][ T7540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.046282][ T7544] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.058863][ T7544] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 135.065890][ T7544] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 135.089223][ T7550] netlink: 64 bytes leftover after parsing attributes in process `syz.3.402'. [ 135.316665][ T7551] syzkaller1: entered promiscuous mode [ 135.316703][ T7551] syzkaller1: entered allmulticast mode [ 135.442282][ T7556] RGB/YUV Input: ================= START STATUS ================= [ 135.452215][ T7556] RGB/YUV Input: Test Pattern: 75% Colorbar [ 135.522559][ T7556] RGB/YUV Input: Show Information: All [ 135.522720][ T7556] RGB/YUV Input: Vertical Flip: false [ 135.522862][ T7556] RGB/YUV Input: Horizontal Flip: false [ 135.522916][ T7556] RGB/YUV Input: Brightness: 128 [ 135.589216][ T7556] RGB/YUV Input: Contrast: 128 [ 135.589372][ T7556] RGB/YUV Input: Hue: 0 [ 135.589489][ T7556] RGB/YUV Input: Saturation: 128 [ 135.589622][ T7556] RGB/YUV Input: Pixel Rate: 160000000 [ 135.589727][ T7556] RGB/YUV Input: Horizontal Blanking: 800 [ 135.589824][ T7556] RGB/YUV Input: Vertical Blanking: 3223 [ 135.589958][ T7556] RGB/YUV Input: ================== END STATUS ================== [ 137.051976][ T7564] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.054926][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 137.054940][ T30] audit: type=1400 audit(1788485876.993:508): avc: denied { write } for pid=7563 comm="syz.8.405" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.110781][ T30] audit: type=1400 audit(1788485877.053:509): avc: denied { write } for pid=7561 comm="syz.3.406" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.140048][ T30] audit: type=1400 audit(1788485877.083:510): avc: denied { open } for pid=7561 comm="syz.3.406" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.237988][ T7568] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 137.245024][ T7566] kvm: pic: level sensitive irq not supported [ 137.973618][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 138.122998][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 138.124859][ T9] usb 9-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 138.134825][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.134847][ T9] usb 9-1: Product: syz [ 138.134859][ T9] usb 9-1: Manufacturer: syz [ 138.134872][ T9] usb 9-1: SerialNumber: syz [ 138.214502][ T5714] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 138.363526][ T5714] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.375001][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.375054][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.400471][ T5714] usb 6-1: config 0 descriptor?? [ 138.667781][ T5714] usbhid 6-1:0.0: can't add hid device: -71 [ 138.667879][ T5714] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 138.684984][ T5714] usb 6-1: USB disconnect, device number 7 [ 138.839895][ T30] audit: type=1400 audit(1788485878.783:511): avc: denied { write } for pid=7598 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.842376][ T7599] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 138.880287][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.976670][ T9] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.988126][ T9] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 139.052133][ T9] usb 9-1: USB disconnect, device number 2 [ 139.153047][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 139.313981][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 139.327602][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.338791][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.357944][ T31] usb 6-1: config 0 descriptor?? [ 139.427695][ T7611] CUSE: unknown device info "" [ 139.432664][ T7611] CUSE: unknown device info "Ö" [ 139.440388][ T7611] CUSE: unknown device info "" [ 139.445482][ T7611] CUSE: unknown device info "" [ 139.450565][ T7611] CUSE: unknown device info "" [ 139.455670][ T7611] CUSE: unknown device info "" [ 139.460771][ T7611] CUSE: unknown device info "ðÿÿÿ" [ 139.460782][ T7611] CUSE: unknown device info "" [ 139.460789][ T7611] CUSE: unknown device info "" [ 139.460796][ T7611] CUSE: unknown device info "" [ 139.460804][ T7611] CUSE: unknown device info "" [ 139.460811][ T7611] CUSE: unknown device info "r" [ 139.460817][ T7611] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 139.460825][ T7611] CUSE: unknown device info "ÿÿÿÿ" [ 139.460832][ T7611] CUSE: unknown device info "" [ 139.460838][ T7611] CUSE: unknown device info "€" [ 139.460868][ T7611] CUSE: DEVNAME unspecified [ 140.043025][ T5714] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 140.108481][ T30] audit: type=1800 audit(1788485880.053:512): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.430" name="file0" dev="overlay" ino=62 res=0 errno=0 [ 140.184674][ T31] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 140.194991][ T31] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9 [ 140.206749][ T5714] usb 8-1: Using ep0 maxpacket: 16 [ 140.214576][ T5714] usb 8-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 140.235770][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.235805][ T5714] usb 8-1: Product: syz [ 140.235892][ T5714] usb 8-1: Manufacturer: syz [ 140.235909][ T5714] usb 8-1: SerialNumber: syz [ 140.519297][ T5714] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 140.529689][ T5714] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.588249][ T5714] usb 8-1: USB disconnect, device number 5 [ 140.634658][ T942] usb 6-1: USB disconnect, device number 8 [ 140.634689][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 140.673250][ T5590] udevd[5590]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.903000][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 140.996950][ T30] audit: type=1326 audit(1788485880.943:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.3.438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eaeb9e159 code=0x7ffc0000 [ 141.004261][ T30] audit: type=1326 audit(1788485880.943:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.3.438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eaeb9e159 code=0x7ffc0000 [ 141.004299][ T30] audit: type=1326 audit(1788485880.943:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.3.438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eaeb9e159 code=0x7ffc0000 [ 141.004331][ T30] audit: type=1326 audit(1788485880.943:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.3.438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eaeb9e159 code=0x7ffc0000 [ 141.004363][ T30] audit: type=1326 audit(1788485880.943:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.3.438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4eaeb9e159 code=0x7ffc0000 [ 141.106415][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 141.138429][ T31] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 141.149143][ T31] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 141.149200][ T31] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 141.149241][ T31] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.149269][ T31] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 141.207801][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.207837][ T31] usb 7-1: Product: syz [ 141.207864][ T31] usb 7-1: Manufacturer: syz [ 141.207881][ T31] usb 7-1: SerialNumber: syz [ 141.257217][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 141.278015][ T31] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input10 [ 141.455672][ T7663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.483490][ T31] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 141.483519][ T31] (id 0x00) [ 141.533525][ T31] rc_core: IR keymap rc-imon-pad not found [ 141.535768][ T31] Registered IR keymap rc-empty [ 141.535817][ T31] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 141.535833][ T31] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 141.557703][ T7673] ip_tables: iptables: counters copy to user failed while replacing table [ 141.708690][ T31] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 141.710398][ T31] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input11 [ 141.718092][ T31] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:5> initialized [ 141.901290][ T942] usb 7-1: USB disconnect, device number 5 [ 142.045883][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.449'. [ 142.055447][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 142.061669][ T30] audit: type=1400 audit(1788485882.003:542): avc: denied { read } for pid=7686 comm="syz.7.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.310597][ T7695] PM: suspend entry (deep) [ 142.652002][ T6576] Filesystems sync: 0.339 seconds [ 142.821323][ T30] audit: type=1400 audit(1788485882.763:543): avc: denied { read write } for pid=7709 comm="syz.7.459" name="sg0" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.851104][ T30] audit: type=1400 audit(1788485882.763:544): avc: denied { open } for pid=7709 comm="syz.7.459" path="/dev/sg0" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.851174][ T30] audit: type=1400 audit(1788485882.773:545): avc: denied { ioctl } for pid=7709 comm="syz.7.459" path="/dev/sg0" dev="devtmpfs" ino=866 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.953624][ T942] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.059037][ T7717] syzkaller0: entered promiscuous mode [ 143.065254][ T7717] syzkaller0: entered allmulticast mode [ 143.113371][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 143.118926][ T942] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 143.129924][ T942] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 143.129972][ T942] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 143.130013][ T942] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.130039][ T942] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 143.193699][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.196566][ T7695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.196642][ T7695] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.214103][ T942] usb 4-1: Product: syz [ 143.218335][ T942] usb 4-1: Manufacturer: syz [ 143.223006][ T942] usb 4-1: SerialNumber: syz [ 143.237749][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 143.253492][ T942] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input12 [ 143.294747][ T7695] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.320373][ T7695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.322483][ T7695] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.416801][ T7695] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.429441][ T7695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.431541][ T7695] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.447875][ T7695] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.473423][ T942] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 143.473455][ T942] (id 0x00) [ 143.486387][ T7695] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 143.492435][ T7695] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 143.524156][ T7695] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 143.528512][ T7695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.528598][ T7695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.538744][ T7695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.557841][ T7695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.557911][ T7695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.564119][ T942] rc_core: IR keymap rc-imon-pad not found [ 143.564134][ T942] Registered IR keymap rc-empty [ 143.564188][ T942] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 143.564203][ T942] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 143.586025][ T7695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.616973][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 143.626297][ T7695] Freezing user space processes ** replaying previous printk message ** [ 143.626297][ T7695] Freezing user space processes [ 143.636246][ T7695] ------------[ cut here ]------------ [ 143.636257][ T7695] debug_locks && p->lockdep_depth [ 143.636265][ T7695] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x211/0x2e0, CPU#0: syz.8.453/7695 [ 143.664919][ T7695] Modules linked in: [ 143.668802][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.8.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.679536][ T7695] Tainted: [L]=SOFTLOCKUP [ 143.683844][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 143.693869][ T7695] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 143.699580][ T7695] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 b8 59 89 00 8b ab a0 0b 00 00 31 ff 89 ee e8 79 40 16 00 85 ed 74 09 e8 00 46 16 00 90 <0f> 0b 90 e8 f7 45 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 143.719160][ T7695] RSP: 0018:ffffc90004a17998 EFLAGS: 00010083 [ 143.725199][ T7695] RAX: 00000000000630da RBX: ffff888036032580 RCX: ffffc9000eaa2000 [ 143.733150][ T7695] RDX: 0000000000080000 RSI: ffffffff81f5aa10 RDI: ffff88805964cb00 [ 143.741092][ T7695] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 143.749033][ T7695] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888036032598 [ 143.756980][ T7695] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888036033000 [ 143.764924][ T7695] FS: 00007effdea656c0(0000) GS:ffff888123b60000(0000) knlGS:0000000000000000 [ 143.773825][ T7695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.780380][ T7695] CR2: 00007fc1bf3eb840 CR3: 0000000075c81000 CR4: 00000000003526f0 [ 143.788325][ T7695] Call Trace: [ 143.791578][ T7695] [ 143.794484][ T7695] ? __pfx___set_task_frozen+0x10/0x10 [ 143.799934][ T7695] task_call_func+0x169/0x380 [ 143.804591][ T7695] ? cgroup1_freezing+0x12c/0x3b0 [ 143.809591][ T7695] ? cgroup1_freezing+0x12c/0x3b0 [ 143.814596][ T7695] ? __pfx_task_call_func+0x10/0x10 [ 143.819773][ T7695] ? cgroup1_freezing+0x136/0x3b0 [ 143.824782][ T7695] freeze_task+0x151/0x270 [ 143.829183][ T7695] ? __pfx_freeze_task+0x10/0x10 [ 143.834098][ T7695] ? ktime_get_with_offset+0xf3/0x3d0 [ 143.839495][ T7695] try_to_freeze_tasks+0x243/0x680 [ 143.844602][ T7695] ? do_raw_spin_lock+0x90/0x260 [ 143.849535][ T7695] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 143.855155][ T7695] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.860336][ T7695] ? lockdep_hardirqs_on+0x7d/0x110 [ 143.865508][ T7695] freeze_processes+0xf2/0x1e0 [ 143.870246][ T7695] pm_suspend+0x32c/0x7b0 [ 143.874547][ T7695] state_store+0x101/0x240 [ 143.878936][ T7695] ? __pfx_state_store+0x10/0x10 [ 143.883851][ T7695] kobj_attr_store+0x58/0x80 [ 143.888425][ T7695] ? __pfx_kobj_attr_store+0x10/0x10 [ 143.893688][ T7695] sysfs_kf_write+0xf2/0x150 [ 143.898252][ T7695] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.903522][ T7695] ? __pfx_sysfs_kf_write+0x10/0x10 [ 143.908692][ T7695] vfs_write+0x6af/0x1050 [ 143.913002][ T7695] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 143.918790][ T7695] ? __pfx_vfs_write+0x10/0x10 [ 143.923529][ T7695] ? find_held_lock+0x2b/0x80 [ 143.928191][ T7695] ksys_write+0x12a/0x250 [ 143.932490][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 143.937326][ T7695] do_syscall_64+0x123/0x790 [ 143.941921][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.947802][ T7695] RIP: 0033:0x7effddb9e159 [ 143.952200][ T7695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.971789][ T7695] RSP: 002b:00007effdea65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.980172][ T7695] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e159 [ 143.988340][ T7695] RDX: 0000000000000003 RSI: 0000200000000d00 RDI: 0000000000000006 [ 143.996280][ T7695] RBP: 00007effddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 144.004229][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.012179][ T7695] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007fff0305a8f8 [ 144.020132][ T7695] [ 144.023137][ T7695] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.030393][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.8.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.041126][ T7695] Tainted: [L]=SOFTLOCKUP [ 144.045427][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 144.055479][ T7695] Call Trace: [ 144.058753][ T7695] [ 144.061688][ T7695] dump_stack_lvl+0x100/0x190 [ 144.066350][ T7695] vpanic+0x553/0x970 [ 144.070327][ T7695] ? __pfx_vpanic+0x10/0x10 [ 144.074841][ T7695] panic+0xd1/0xe0 [ 144.078551][ T7695] ? __pfx_panic+0x10/0x10 [ 144.082955][ T7695] check_panic_on_warn.cold+0x19/0x34 [ 144.088304][ T7695] ? __set_task_frozen+0x211/0x2e0 [ 144.093397][ T7695] __warn.cold+0x191/0x318 [ 144.097788][ T7695] __report_bug+0x30f/0x440 [ 144.102271][ T7695] ? __set_task_frozen+0x211/0x2e0 [ 144.107376][ T7695] ? __pfx___report_bug+0x10/0x10 [ 144.112376][ T7695] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 144.117637][ T7695] ? __set_task_frozen+0x211/0x2e0 [ 144.122733][ T7695] report_bug+0xb3/0x220 [ 144.126949][ T7695] ? __set_task_frozen+0x211/0x2e0 [ 144.132045][ T7695] handle_bug+0x16a/0x2a0 [ 144.136350][ T7695] exc_invalid_op+0x17/0x50 [ 144.140827][ T7695] asm_exc_invalid_op+0x1a/0x20 [ 144.145650][ T7695] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 144.151346][ T7695] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 b8 59 89 00 8b ab a0 0b 00 00 31 ff 89 ee e8 79 40 16 00 85 ed 74 09 e8 00 46 16 00 90 <0f> 0b 90 e8 f7 45 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 144.170937][ T7695] RSP: 0018:ffffc90004a17998 EFLAGS: 00010083 [ 144.176975][ T7695] RAX: 00000000000630da RBX: ffff888036032580 RCX: ffffc9000eaa2000 [ 144.184925][ T7695] RDX: 0000000000080000 RSI: ffffffff81f5aa10 RDI: ffff88805964cb00 [ 144.192900][ T7695] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 144.200855][ T7695] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888036032598 [ 144.208809][ T7695] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888036033000 [ 144.216769][ T7695] ? __set_task_frozen+0x210/0x2e0 [ 144.221865][ T7695] ? __set_task_frozen+0x210/0x2e0 [ 144.226952][ T7695] ? __pfx___set_task_frozen+0x10/0x10 [ 144.232386][ T7695] task_call_func+0x169/0x380 [ 144.237039][ T7695] ? cgroup1_freezing+0x12c/0x3b0 [ 144.242045][ T7695] ? cgroup1_freezing+0x12c/0x3b0 [ 144.247051][ T7695] ? __pfx_task_call_func+0x10/0x10 [ 144.252226][ T7695] ? cgroup1_freezing+0x136/0x3b0 [ 144.257230][ T7695] freeze_task+0x151/0x270 [ 144.261628][ T7695] ? __pfx_freeze_task+0x10/0x10 [ 144.266539][ T7695] ? ktime_get_with_offset+0xf3/0x3d0 [ 144.271890][ T7695] try_to_freeze_tasks+0x243/0x680 [ 144.276988][ T7695] ? do_raw_spin_lock+0x90/0x260 [ 144.281906][ T7695] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 144.287514][ T7695] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.292689][ T7695] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.297862][ T7695] freeze_processes+0xf2/0x1e0 [ 144.302598][ T7695] pm_suspend+0x32c/0x7b0 [ 144.306902][ T7695] state_store+0x101/0x240 [ 144.311318][ T7695] ? __pfx_state_store+0x10/0x10 [ 144.316243][ T7695] kobj_attr_store+0x58/0x80 [ 144.320830][ T7695] ? __pfx_kobj_attr_store+0x10/0x10 [ 144.326097][ T7695] sysfs_kf_write+0xf2/0x150 [ 144.330677][ T7695] kernfs_fop_write_iter+0x3e0/0x5f0 [ 144.335948][ T7695] ? __pfx_sysfs_kf_write+0x10/0x10 [ 144.341123][ T7695] vfs_write+0x6af/0x1050 [ 144.345437][ T7695] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 144.351241][ T7695] ? __pfx_vfs_write+0x10/0x10 [ 144.355986][ T7695] ? find_held_lock+0x2b/0x80 [ 144.360657][ T7695] ksys_write+0x12a/0x250 [ 144.364957][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 144.369781][ T7695] do_syscall_64+0x123/0x790 [ 144.374347][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.380210][ T7695] RIP: 0033:0x7effddb9e159 [ 144.384598][ T7695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.404186][ T7695] RSP: 002b:00007effdea65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.412581][ T7695] RAX: ffffffffffffffda RBX: 00007effdde25fa0 RCX: 00007effddb9e159 [ 144.420525][ T7695] RDX: 0000000000000003 RSI: 0000200000000d00 RDI: 0000000000000006 [ 144.428467][ T7695] RBP: 00007effddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 144.436416][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.444357][ T7695] R13: 00007effdde26038 R14: 00007effdde25fa0 R15: 00007fff0305a8f8 [ 144.452309][ T7695] [ 145.520846][ T7695] Shutting down cpus with NMI [ 145.525830][ T7695] Kernel Offset: disabled [ 145.530138][ T7695] Rebooting in 86400 seconds..