last executing test programs: 21.995020714s ago: executing program 2 (id=2853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xfff2}, {0xfff1, 0xa}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x80c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000280), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0x2, 0x0, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x67, 0x0, 0xe2, 0x4, 0x0, @local, @multicast1, {[@end, @noop]}}}}}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = dup(r0) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) write$UHID_INPUT(r2, &(0x7f0000001880)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003070101102507a8a440000102030109021b000101000000090905010210"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r8 = syz_io_uring_setup(0x74b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0xffffffff, 0x100002c1}, 0x0, 0x0, &(0x7f0000000000)) r9 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000003c0)={0x4}) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) 19.310880719s ago: executing program 2 (id=2867): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 19.16581208s ago: executing program 2 (id=2869): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x5c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18.671427819s ago: executing program 2 (id=2874): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x101402, 0x0) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/20, 0x14}], 0x1, 0x0, 0x2, 0x14) socket(0x11, 0x3, 0x0) epoll_create1(0x80000) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) dup3(r2, r1, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000080)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @multicast1}}]}, 0x190) r3 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 18.590074924s ago: executing program 2 (id=2876): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a20cc", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x60) 18.363188892s ago: executing program 2 (id=2878): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 17.09499604s ago: executing program 0 (id=2883): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 16.733251669s ago: executing program 0 (id=2885): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15.848699778s ago: executing program 0 (id=2890): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='active', 0x6) 15.322352436s ago: executing program 0 (id=2895): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) truncate(0x0, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000008500000050000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 15.13425354s ago: executing program 0 (id=2896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5fed, r0, 0x0, 0x0, 0x7, 0x0, 0x2, r0}]) 14.808709926s ago: executing program 0 (id=2899): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 13.46301758s ago: executing program 4 (id=2902): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 13.370799913s ago: executing program 4 (id=2903): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="680000001000390400"/20, @ANYRES32=r3, @ANYBLOB="13980400000000004800128009000100697069700000000038000280060012004e2200000800030000000000080003000000000004001300080002007f000021060012004e2100000500090089"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c", 0x1d, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.311633598s ago: executing program 4 (id=2904): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8) 13.219415885s ago: executing program 4 (id=2906): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) truncate(0x0, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000008500000050000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 13.065221375s ago: executing program 4 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) kexec_load(0x9, 0x5, &(0x7f0000000480)=[{0x0, 0x0, 0x6c0918be, 0x4}, {0x0, 0x0, 0x1000, 0x4}, {&(0x7f0000000280)="f5614fc25d4297a08268e71959155921d497631a41a5c8c4f984c1ee31cdd9c3b3952ac09c7cd61e03a9b59bd1df497f91158ea8f42a9de5c47d1e485a0556b41ac5d154e2a1af2f732fe4a89f3685fc8ea96b0b56b8e574865f801c0c8180f2a967753d728b709610e435a05b13880511aef625f58a4372aa95d25a39c7fd1c8ca9a64658237d494efcad", 0x8b, 0x31, 0x9}, {&(0x7f0000000380)="eb118762307d706de5f87258fd1412c2cd5a", 0x12, 0x17, 0xf20f}, {0x0, 0x0, 0x7, 0x9}], 0x2a0000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x8000, 0x80000, r3}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000940)={0x0, 0x208000, 0x800}, 0x20) kexec_load(0x8, 0x2, &(0x7f0000000800)=[{&(0x7f0000000600)="fcfe673cd6a6c3f64a725a93ef3ae8d1584f93734d46cc4b1b75d5a152e3a5685f974e6da96d57d37c4ba761d2c8dcd18fbafc5c073af7838743c84a71e1c7034f46f62815dbadbba35312505c160c38f87b22d21a4fce8f8955f8423f4263d321933c7c04d5b52bd341d1d862c8bb96c194bcfcc41a799463b6eaa2a9aa49d68842a2f8d70e1f0522a88254e11bc000268be1b566ac0a3c39bfabd7ec62e15d694d98e039421bb6408a04657015f0d81c467b31e5", 0xb5, 0x2, 0x7fffffff}, {&(0x7f0000000700)="61b3779ff140b56219279edfc4de078994c81a584e0ba599d0057046eb1e5b17edab20d71e3de02dd37da20e847abaf570bf3aeab985c3a48a85128adb392d1e1f027e58c13890dbd9ec6c99deef6c0524e5886278b4e8b32d36de5b60dbfcd7407c494e8ef80a4a1cd663625eb9d530bd9f72f2185c3575b14a19812a6d8d2cd0ad36a22429b6b654fde105c17938838cdb2cacdad2ce982c95c21ff0a412893026d6bb27d9b5e997dbd1a3081a345415cb210d7e07a3d72f5d47edab19e3a7a35f92dadf2732879a3f1b755d79ce9e7a2408f41808ef", 0xd7, 0x8, 0x2dc00000000}], 0x80000) kexec_load(0x1, 0x0, &(0x7f00000005c0), 0x150000) 11.957973605s ago: executing program 4 (id=2910): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 4.777004209s ago: executing program 3 (id=2930): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.854959863s ago: executing program 3 (id=2933): inotify_init() bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x20000050, &(0x7f000005ffe4)={0xa, 0x4e22, 0x10002, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x1101000000000000, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x804) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r3, &(0x7f0000000960)='1', 0x1) 3.248082321s ago: executing program 32 (id=2878): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 2.798807326s ago: executing program 3 (id=2937): io_uring_setup(0x115a, &(0x7f0000000440)={0x0, 0x4ef1, 0x40, 0x3, 0x117}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000440)="020000") 2.656786s ago: executing program 3 (id=2938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='bf', 0x2) sendfile(r0, r0, 0x0, 0x8) 2.290518114s ago: executing program 3 (id=2939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000012c0)="b9354b27b553aeee40000b0000a4df2a9080f3c9aa55548f47", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.196258276s ago: executing program 1 (id=2940): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') preadv(r0, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8) 2.098336345s ago: executing program 1 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f40002810", 0x13) 1.976485216s ago: executing program 3 (id=2942): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psm', 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.827654088s ago: executing program 1 (id=2943): syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.722405395s ago: executing program 1 (id=2944): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000440), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[], 0x0) 1.585006911s ago: executing program 1 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) kexec_load(0x9, 0x4, &(0x7f0000000480)=[{0x0, 0x0, 0x1000, 0x4}, {&(0x7f0000000280)="f5614fc25d4297a08268e71959155921d497631a41a5c8c4f984c1ee31cdd9c3b3952ac09c7cd61e03a9b59bd1df497f91158ea8f42a9de5c47d1e485a0556b41ac5d154e2a1af2f732fe4a89f3685fc8ea96b0b56b8e574865f801c0c8180f2a967753d728b709610e435a05b13880511aef625f58a4372aa95d25a39c7fd1c8ca9a64658237d494efcad", 0x8b, 0x31, 0x9}, {&(0x7f0000000380)="eb118762307d706de5f87258fd1412c2cd5a", 0x12, 0x17, 0xf20f}, {0x0, 0x0, 0x7, 0x9}], 0x2a0000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x8000, 0x80000, r3}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000940)={0x0, 0x208000, 0x800}, 0x20) kexec_load(0x8, 0x2, &(0x7f0000000800)=[{&(0x7f0000000600)="fcfe673cd6a6c3f64a725a93ef3ae8d1584f93734d46cc4b1b75d5a152e3a5685f974e6da96d57d37c4ba761d2c8dcd18fbafc5c073af7838743c84a71e1c7034f46f62815dbadbba35312505c160c38f87b22d21a4fce8f8955f8423f4263d321933c7c04d5b52bd341d1d862c8bb96c194bcfcc41a799463b6eaa2a9aa49d68842a2f8d70e1f0522a88254e11bc000268be1b566ac0a3c39bfabd7ec62e15d694d98e039421bb6408a04657015f0d81c467b31e5", 0xb5, 0x2, 0x7fffffff}, {&(0x7f0000000700)="61b3779ff140b56219279edfc4de078994c81a584e0ba599d0057046eb1e5b17edab20d71e3de02dd37da20e847abaf570bf3aeab985c3a48a85128adb392d1e1f027e58c13890dbd9ec6c99deef6c0524e5886278b4e8b32d36de5b60dbfcd7407c494e8ef80a4a1cd663625eb9d530bd9f72f2185c3575b14a19812a6d8d2cd0ad36a22429b6b654fde105c17938838cdb2cacdad2ce982c95c21ff0a412893026d6bb27d9b5e997dbd1a3081a345415cb210d7e07a3d72f5d47edab19e3a7a35f92dadf2732879a3f1b755d79ce9e7a2408f41808ef", 0xd7, 0x8, 0x2dc00000000}], 0x80000) kexec_load(0x1, 0x0, &(0x7f00000005c0), 0x150000) 0s ago: executing program 1 (id=2946): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='veth0_to_bridge\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500feffffff000000000600000008000300", @ANYRES32=r3, @ANYBLOB="081005eb01000000"], 0x24}}, 0x4004800) mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./proc\x00', 0x0) r4 = openat(0xffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x0) write$cgroup_int(r4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x6, 0x4, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ][T14033] md: could not open device unknown-block(0,0). [ 500.138557][T14033] md: error, md_import_device() returned -6 [ 500.291043][T14048] hub 1-0:1.0: USB hub found [ 500.291356][T14048] hub 1-0:1.0: 1 port detected [ 500.366824][T14059] FAULT_INJECTION: forcing a failure. [ 500.366824][T14059] name failslab, interval 1, probability 0, space 0, times 0 [ 500.366856][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.0.2514 Not tainted syzkaller #0 PREEMPT(full) [ 500.366878][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 500.366890][T14059] Call Trace: [ 500.366897][T14059] [ 500.366905][T14059] dump_stack_lvl+0x100/0x190 [ 500.366934][T14059] should_fail_ex.cold+0x5/0xa [ 500.366961][T14059] should_failslab+0xc2/0x120 [ 500.366986][T14059] __kmalloc_cache_noprof+0x91/0x6d0 [ 500.367013][T14059] ? inode_doinit_with_dentry+0x70b/0x1340 [ 500.367033][T14059] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 500.367056][T14059] inode_doinit_with_dentry+0x7b1/0x1340 [ 500.367079][T14059] ? inode_set_ctime_current+0x283/0x850 [ 500.367104][T14059] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 500.367124][T14059] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 500.367149][T14059] ? new_inode+0x15a/0x1c0 [ 500.367171][T14059] selinux_d_instantiate+0x26/0x40 [ 500.367190][T14059] security_d_instantiate+0x14c/0x1b0 [ 500.367215][T14059] d_make_persistent+0x64/0x180 [ 500.367266][T14059] __debugfs_create_file+0x23e/0x4d0 [ 500.367300][T14059] debugfs_create_file_full+0x41/0x60 [ 500.367331][T14059] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 500.367360][T14059] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 500.367405][T14059] ? kasan_save_track+0x14/0x30 [ 500.367428][T14059] ? __kasan_kmalloc+0xaa/0xb0 [ 500.367450][T14059] ? lockdep_init_map_type+0x5c/0x250 [ 500.367476][T14059] preinit_net+0x252/0x920 [ 500.367501][T14059] copy_net_ns+0x1dd/0x7a0 [ 500.367529][T14059] create_new_namespaces+0x3ea/0xac0 [ 500.367564][T14059] unshare_nsproxy_namespaces+0xf2/0x220 [ 500.367588][T14059] ksys_unshare+0x4a2/0xa70 [ 500.367615][T14059] ? __pfx_ksys_unshare+0x10/0x10 [ 500.367650][T14059] __x64_sys_unshare+0x31/0x40 [ 500.367673][T14059] do_syscall_64+0x123/0x790 [ 500.367701][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.367721][T14059] RIP: 0033:0x7fbbbb99e159 [ 500.367738][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.367757][T14059] RSP: 002b:00007fbbbc916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 500.367778][T14059] RAX: ffffffffffffffda RBX: 00007fbbbbc25fa0 RCX: 00007fbbbb99e159 [ 500.367791][T14059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 500.367803][T14059] RBP: 00007fbbbba3503b R08: 0000000000000000 R09: 0000000000000000 [ 500.367816][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.367827][T14059] R13: 00007fbbbbc26038 R14: 00007fbbbbc25fa0 R15: 00007ffc19c71018 [ 500.367854][T14059] [ 500.505761][ T5738] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 500.684154][ T5738] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 500.686904][ T5738] usb 1-1: Dual-Role OTG device on HNP port [ 500.687138][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.687158][ T5738] usb 1-1: SerialNumber: 1234567890 [ 500.714245][ T5699] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 500.755182][ T5738] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 500.788311][ T5738] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 500.813680][ T5738] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 500.830213][ T5738] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.859218][ T5699] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 500.863986][ T5699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.864022][ T5699] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 500.864041][ T5699] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.864072][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.466319][ T31] audit: type=1400 audit(1789220908.854:1043): avc: denied { write } for pid=14046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.282528][ T31] audit: type=1400 audit(1789220909.664:1044): avc: denied { write } for pid=14089 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.906236][ T31] audit: type=1400 audit(1789220910.294:1045): avc: denied { write } for pid=14095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.490461][ T5738] usb 3-1: USB disconnect, device number 63 [ 503.673116][ T31] audit: type=1400 audit(1789220911.054:1046): avc: denied { write } for pid=14124 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.114114][ T5699] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 504.159658][ T31] audit: type=1400 audit(1789220911.544:1047): avc: denied { write } for pid=14133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.265760][ T5699] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.266612][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.266640][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.266661][ T5699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.266696][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.269415][ T5699] usb 2-1: config 0 descriptor?? [ 504.379057][ T31] audit: type=1400 audit(1789220911.764:1048): avc: denied { write } for pid=14155 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.475660][ T5699] usbhid 2-1:0.0: can't add hid device: -71 [ 504.475748][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 504.478432][ T5699] usb 2-1: USB disconnect, device number 70 [ 504.610494][T14168] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 504.648661][T14168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.669325][T14168] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 504.857951][T14178] loop5: detected capacity change from 0 to 7 [ 504.884020][T14178] Dev loop5: unable to read RDB block 7 [ 504.884051][T14178] loop5: AHDI p1 p2 p3 [ 504.884069][T14178] loop5: partition table partially beyond EOD, truncated [ 504.884236][T14178] loop5: p1 start 1818582900 is beyond EOD, truncated [ 504.884253][T14178] loop5: p3 start 335544320 is beyond EOD, truncated [ 504.976802][ T31] audit: type=1400 audit(1789220912.364:1049): avc: denied { write } for pid=14163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.872331][ T31] audit: type=1400 audit(1789220913.254:1050): avc: denied { write } for pid=14193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.689089][ T5606] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 506.893892][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 506.895363][ T5606] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 506.897813][ T5606] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 506.897861][ T5606] usb 2-1: config 0 has no interface number 0 [ 506.897955][ T5606] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 506.903577][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.903610][ T5606] usb 2-1: Product: syz [ 506.903673][ T5606] usb 2-1: Manufacturer: syz [ 506.903710][ T5606] usb 2-1: SerialNumber: syz [ 507.036056][ T5606] usb 2-1: config 0 descriptor?? [ 507.052887][T14199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 507.524886][ T5606] asix 2-1:0.188: probe with driver asix failed with error -71 [ 507.547784][ T5606] usb 2-1: USB disconnect, device number 71 [ 507.615474][T14220] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 507.731003][T14220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.742871][T14225] bond1: (slave veth0_to_bond): Releasing backup interface [ 508.312754][T14225] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 508.727445][T14231] Can't find ip_set type hash:ne [ 508.970354][ T31] audit: type=1400 audit(1789220916.354:1051): avc: denied { write } for pid=14208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.506999][ T5708] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 509.563535][T14250] overlayfs: missing 'lowerdir' [ 509.773404][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 509.782902][ T5708] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 509.802555][ T5708] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 509.802597][ T5708] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 509.802623][ T5708] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.802651][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.840143][T14257] FAULT_INJECTION: forcing a failure. [ 509.840143][T14257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 509.840174][T14257] CPU: 0 UID: 0 PID: 14257 Comm: syz.4.2554 Not tainted syzkaller #0 PREEMPT(full) [ 509.840196][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 509.840207][T14257] Call Trace: [ 509.840214][T14257] [ 509.840221][T14257] dump_stack_lvl+0x100/0x190 [ 509.840252][T14257] should_fail_ex.cold+0x5/0xa [ 509.840276][T14257] get_futex_key+0x1d0/0x14f0 [ 509.840301][T14257] ? __pfx_get_futex_key+0x10/0x10 [ 509.840324][T14257] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 509.840347][T14257] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 509.840372][T14257] futex_wait_setup+0x91/0x540 [ 509.840404][T14257] __futex_wait+0x19f/0x300 [ 509.840426][T14257] ? __pfx___futex_wait+0x10/0x10 [ 509.840441][T14257] ? __pfx_try_to_wake_up+0x10/0x10 [ 509.840459][T14257] ? futex_hash+0x311/0x400 [ 509.840480][T14257] ? __pfx_futex_wake_mark+0x10/0x10 [ 509.840508][T14257] ? find_held_lock+0x2b/0x80 [ 509.840530][T14257] ? futex_wake+0x4ea/0x5e0 [ 509.840560][T14257] futex_wait+0xe6/0x370 [ 509.840576][T14257] ? __pfx_futex_wait+0x10/0x10 [ 509.840597][T14257] ? putname+0xb1/0x110 [ 509.840617][T14257] ? kmem_cache_free+0x127/0x6c0 [ 509.840646][T14257] do_futex+0x265/0x440 [ 509.840668][T14257] ? __pfx_do_futex+0x10/0x10 [ 509.840688][T14257] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.840717][T14257] __x64_sys_futex+0x34f/0x4d0 [ 509.840740][T14257] ? __x64_sys_openat+0x12d/0x210 [ 509.840763][T14257] ? __pfx___x64_sys_futex+0x10/0x10 [ 509.840793][T14257] do_syscall_64+0x123/0x790 [ 509.840818][T14257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.840835][T14257] RIP: 0033:0x7f9709b9e159 [ 509.840850][T14257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.840866][T14257] RSP: 002b:00007f9707df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 509.840884][T14257] RAX: ffffffffffffffda RBX: 00007f9709e25fa8 RCX: 00007f9709b9e159 [ 509.840897][T14257] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9709e25fa8 [ 509.840908][T14257] RBP: 00007f9709e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 509.840919][T14257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.840929][T14257] R13: 00007f9709e26038 R14: 00007ffe06a55b70 R15: 00007ffe06a55c58 [ 509.840951][T14257] [ 509.899561][ T5708] usb 2-1: config 0 descriptor?? [ 509.909583][ T31] audit: type=1400 audit(1789220917.294:1052): avc: denied { write } for pid=14258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.197624][T14270] netlink: 'syz.0.2559': attribute type 1 has an invalid length. [ 510.235233][T14270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.298314][ T31] audit: type=1800 audit(1789220917.684:1053): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2557" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 510.343823][ T5708] usbhid 2-1:0.0: can't add hid device: -71 [ 510.343926][ T5708] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 510.346637][ T5708] usb 2-1: USB disconnect, device number 72 [ 510.571939][ T31] audit: type=1800 audit(1789220917.954:1054): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2560" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 510.836396][ T31] audit: type=1400 audit(1789220918.224:1055): avc: denied { write } for pid=14275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.947243][ T31] audit: type=1400 audit(1789220918.334:1056): avc: denied { write } for pid=14295 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.178308][T14321] overlay: Unknown parameter '/' [ 512.259854][T14324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.360216][ T31] audit: type=1400 audit(1789220919.744:1057): avc: denied { write } for pid=14304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.592063][T14324] md: pers->run() failed ... [ 512.738632][ T31] audit: type=1400 audit(1789220920.124:1058): avc: denied { write } for pid=14335 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.848586][T14338] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 513.008733][ T31] audit: type=1800 audit(1789220920.394:1059): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2571" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 513.179577][T14338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.542514][ T31] audit: type=1800 audit(1789220920.924:1060): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2575" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 513.902782][T14363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 513.992809][T14367] FAULT_INJECTION: forcing a failure. [ 513.992809][T14367] name failslab, interval 1, probability 0, space 0, times 0 [ 513.992845][T14367] CPU: 1 UID: 0 PID: 14367 Comm: syz.2.2577 Not tainted syzkaller #0 PREEMPT(full) [ 513.992872][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 513.992883][T14367] Call Trace: [ 513.992891][T14367] [ 513.992900][T14367] dump_stack_lvl+0x100/0x190 [ 513.992934][T14367] should_fail_ex.cold+0x5/0xa [ 513.992962][T14367] should_failslab+0xc2/0x120 [ 513.992989][T14367] __kvmalloc_node_noprof+0x113/0x9b0 [ 513.993013][T14367] ? vfree+0x12a/0x6d0 [ 513.993037][T14367] ? bpf_check_cfg+0xb4/0x990 [ 513.993071][T14367] bpf_check_cfg+0xb4/0x990 [ 513.993100][T14367] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 513.993129][T14367] bpf_check+0x7b30/0xa980 [ 513.993155][T14367] ? __css_rstat_updated+0x1ce/0x590 [ 513.993178][T14367] ? __lock_acquire+0x5c0/0x1f40 [ 513.993200][T14367] ? __pfx___css_rstat_updated+0x10/0x10 [ 513.993224][T14367] ? lockdep_hardirqs_on+0x7d/0x110 [ 513.993265][T14367] ? __pfx_bpf_check+0x10/0x10 [ 513.993291][T14367] ? lock_acquire+0x1d1/0x380 [ 513.993340][T14367] ? find_held_lock+0x2b/0x80 [ 513.993367][T14367] ? bpf_prog_load+0x1a09/0x2a80 [ 513.993401][T14367] ? __asan_memset+0x23/0x50 [ 513.993426][T14367] ? bpf_prog_load+0x1ac3/0x2a80 [ 513.993453][T14367] bpf_prog_load+0x1ac3/0x2a80 [ 513.993487][T14367] ? __pfx_bpf_prog_load+0x10/0x10 [ 513.993537][T14367] __sys_bpf+0x1f46/0x4a30 [ 513.993565][T14367] ? __pfx___sys_bpf+0x10/0x10 [ 513.993584][T14367] ? find_held_lock+0x2b/0x80 [ 513.993610][T14367] ? futex_wake+0x4ea/0x5e0 [ 513.993679][T14367] ? __x64_sys_futex+0x34f/0x4d0 [ 513.993706][T14367] ? __x64_sys_futex+0x358/0x4d0 [ 513.993735][T14367] ? xfd_validate_state+0x129/0x190 [ 513.993761][T14367] ? __x64_sys_bpf+0xce/0x140 [ 513.993777][T14367] __x64_sys_bpf+0xce/0x140 [ 513.993795][T14367] ? do_syscall_64+0xae/0x790 [ 513.993819][T14367] do_syscall_64+0x123/0x790 [ 513.993843][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.993863][T14367] RIP: 0033:0x7f7bd1f9e159 [ 513.993880][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.993900][T14367] RSP: 002b:00007f7bd2f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.993922][T14367] RAX: ffffffffffffffda RBX: 00007f7bd2225fa0 RCX: 00007f7bd1f9e159 [ 513.993936][T14367] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 513.993948][T14367] RBP: 00007f7bd203503b R08: 0000000000000000 R09: 0000000000000000 [ 513.993960][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.993973][T14367] R13: 00007f7bd2226038 R14: 00007f7bd2225fa0 R15: 00007ffd2058f828 [ 513.993999][T14367] [ 514.331371][T14376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.363139][T14369] usb 1-1: USB disconnect, device number 37 [ 514.467172][T14369] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 514.475358][T14376] md: pers->run() failed ... [ 514.572566][ T31] audit: type=1800 audit(1789220921.954:1061): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2581" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 515.571407][ T31] audit: type=1400 audit(1789220922.954:1062): avc: denied { write } for pid=14362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.318365][T14402] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 516.335601][T14402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.422867][ T31] audit: type=1400 audit(1789220923.804:1063): avc: denied { write } for pid=14406 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.551710][ T31] audit: type=1800 audit(1789220923.934:1064): pid=14416 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2587" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 516.970542][T14369] hub 1-0:1.0: USB hub found [ 516.971241][T14369] hub 1-0:1.0: 1 port detected [ 517.143944][ T5606] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 517.295481][ T5606] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 517.302459][ T5606] usb 1-1: Dual-Role OTG device on HNP port [ 517.312988][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.313016][ T5606] usb 1-1: SerialNumber: 1234567890 [ 517.386479][ T5606] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 517.432996][ T5606] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 517.470989][ T5606] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 517.483159][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'. [ 517.504695][ T5606] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.973251][ T31] audit: type=1400 audit(1789220925.354:1065): avc: denied { write } for pid=14418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.197992][T14435] usb 1-1: USB disconnect, device number 38 [ 518.205963][T14435] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 518.395338][ T31] audit: type=1400 audit(1789220925.784:1066): avc: denied { write } for pid=14443 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.755181][T14435] hub 1-0:1.0: USB hub found [ 518.755436][T14435] hub 1-0:1.0: 1 port detected [ 518.768313][T14448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 518.954983][ T5606] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 519.082327][T14448] md: pers->run() failed ... [ 519.104756][ T5606] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 519.106442][ T5606] usb 1-1: Dual-Role OTG device on HNP port [ 519.106689][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.106710][ T5606] usb 1-1: SerialNumber: 1234567890 [ 519.181944][ T5606] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 519.265138][ T5606] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 519.357933][ T5606] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 519.393544][ T5606] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.508051][ T31] audit: type=1400 audit(1789220926.894:1067): avc: denied { write } for pid=14451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.610515][ T31] audit: type=1400 audit(1789220926.994:1068): avc: denied { write } for pid=14475 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.178469][T14489] usb 1-1: USB disconnect, device number 39 [ 520.188443][T14489] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 520.522277][T14489] hub 1-0:1.0: USB hub found [ 520.522536][T14489] hub 1-0:1.0: 1 port detected [ 520.645002][ T31] audit: type=1800 audit(1789220928.034:1069): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2600" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 520.675901][ T5606] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 520.871540][ T5606] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 520.873162][ T5606] usb 1-1: Dual-Role OTG device on HNP port [ 520.873404][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.873427][ T5606] usb 1-1: SerialNumber: 1234567890 [ 520.947088][ T5606] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 520.996945][ T5606] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 521.029229][ T5606] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 521.078598][ T5606] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.121001][ T31] audit: type=1400 audit(1789220929.504:1070): avc: denied { write } for pid=14487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.270947][ T31] audit: type=1400 audit(1789220929.654:1071): avc: denied { write } for pid=14519 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.393862][ T5708] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 522.556769][ T5708] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 522.557898][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.557958][ T5708] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.557994][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.650147][ T31] audit: type=1400 audit(1789220930.034:1072): avc: denied { write } for pid=14522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.764121][ T31] audit: type=1400 audit(1789220930.154:1073): avc: denied { write } for pid=14533 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.300393][ T31] audit: type=1400 audit(1789220930.684:1074): avc: denied { write } for pid=14540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.452591][T14565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 523.480836][ T31] audit: type=1400 audit(1789220930.864:1075): avc: denied { write } for pid=14561 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.511488][ T31] audit: type=1800 audit(1789220930.904:1076): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2611" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 524.954917][ T31] audit: type=1800 audit(1789220932.334:1077): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2617" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 525.275562][ T31] audit: type=1800 audit(1789220932.664:1078): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2619" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 525.338768][ T5708] usb 2-1: USB disconnect, device number 73 [ 525.634583][ T31] audit: type=1400 audit(1789220933.014:1079): avc: denied { write } for pid=14591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.735079][ T31] audit: type=1400 audit(1789220933.124:1080): avc: denied { write } for pid=14613 comm="syz.1.2624" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 525.890886][ T31] audit: type=1800 audit(1789220933.274:1081): pid=14622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2626" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 525.989385][ T31] audit: type=1400 audit(1789220933.374:1082): avc: denied { write } for pid=14620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.157309][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.162517][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.267501][T14623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.268801][T14623] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.304726][T14623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.363091][T14623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.375957][T14623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.380940][T14623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.380964][T14623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.409051][T14623] veth1_vlan: left promiscuous mode [ 526.410135][T14623] veth0_vlan: left promiscuous mode [ 526.411279][T14623] veth0_vlan: entered promiscuous mode [ 526.412850][T14623] veth1_vlan: entered promiscuous mode [ 526.421512][T14623] veth1_macvtap: left promiscuous mode [ 526.423427][T14623] veth0_macvtap: left promiscuous mode [ 526.425208][T14623] veth0_macvtap: entered promiscuous mode [ 526.427481][T14623] veth1_macvtap: entered promiscuous mode [ 526.438799][T14623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.443744][T14623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.446258][T14623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.448910][T14623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.508789][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.508869][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.516109][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.516197][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.665200][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.665911][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.734083][ T273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.734615][ T273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.820115][T14643] ./file0: Can't lookup blockdev [ 526.953095][ T31] audit: type=1400 audit(1789220934.334:1083): avc: denied { write } for pid=14634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.977900][ T5708] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 527.134765][ T5708] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.135701][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.135728][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.135748][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.135781][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.138075][ T5708] usb 5-1: config 0 descriptor?? [ 527.205986][ T31] audit: type=1800 audit(1789220934.594:1084): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2634" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 527.207845][ T31] audit: type=1400 audit(1789220934.594:1085): avc: denied { write } for pid=14657 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.346873][ T5708] usbhid 5-1:0.0: can't add hid device: -71 [ 527.346981][ T5708] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 527.353391][ T5708] usb 5-1: USB disconnect, device number 69 [ 527.726803][ T31] audit: type=1400 audit(1789220935.114:1086): avc: denied { write } for pid=14669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.913743][ T5708] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 529.124982][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 529.131023][ T5708] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 529.142478][ T5708] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 529.142507][ T5708] usb 2-1: config 0 has no interface number 0 [ 529.142565][ T5708] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 529.168965][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.168983][ T5708] usb 2-1: Product: syz [ 529.168991][ T5708] usb 2-1: Manufacturer: syz [ 529.169000][ T5708] usb 2-1: SerialNumber: syz [ 529.180509][ T5708] usb 2-1: config 0 descriptor?? [ 529.208205][T14700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.325561][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.325928][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.486055][ T5708] asix 2-1:0.188: probe with driver asix failed with error -71 [ 529.490341][ T5708] usb 2-1: USB disconnect, device number 74 [ 530.072050][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 530.072069][ T31] audit: type=1400 audit(1789220937.454:1090): avc: denied { write } for pid=14736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.103564][ T31] audit: type=1400 audit(1789220937.474:1091): avc: denied { ioctl } for pid=14750 comm="syz.3.2652" path="/dev/vbi2" dev="devtmpfs" ino=964 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 530.286635][ T31] audit: type=1400 audit(1789220937.674:1092): avc: denied { write } for pid=14757 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.760001][T14777] FAULT_INJECTION: forcing a failure. [ 531.760001][T14777] name fail_futex, interval 1, probability 0, space 0, times 0 [ 531.760033][T14777] CPU: 0 UID: 0 PID: 14777 Comm: syz.4.2659 Not tainted syzkaller #0 PREEMPT(full) [ 531.760055][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 531.760066][T14777] Call Trace: [ 531.760072][T14777] [ 531.760080][T14777] dump_stack_lvl+0x100/0x190 [ 531.760109][T14777] should_fail_ex.cold+0x5/0xa [ 531.760136][T14777] get_futex_key+0x1d0/0x14f0 [ 531.760161][T14777] ? __pfx_get_futex_key+0x10/0x10 [ 531.760180][T14777] ? __pfx___resched_curr+0x10/0x10 [ 531.760201][T14777] ? wakeup_preempt_fair+0x4a0/0xdc0 [ 531.760227][T14777] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 531.760253][T14777] futex_wait_setup+0x91/0x540 [ 531.760286][T14777] __futex_wait+0x19f/0x300 [ 531.760304][T14777] ? __pfx___futex_wait+0x10/0x10 [ 531.760321][T14777] ? __pfx_try_to_wake_up+0x10/0x10 [ 531.760341][T14777] ? futex_hash+0x311/0x400 [ 531.760365][T14777] ? __pfx_futex_wake_mark+0x10/0x10 [ 531.760395][T14777] ? find_held_lock+0x2b/0x80 [ 531.760420][T14777] ? futex_wake+0x4ea/0x5e0 [ 531.760455][T14777] futex_wait+0xe6/0x370 [ 531.760471][T14777] ? __pfx_futex_wait+0x10/0x10 [ 531.760498][T14777] do_futex+0x265/0x440 [ 531.760521][T14777] ? __pfx_do_futex+0x10/0x10 [ 531.760552][T14777] __x64_sys_futex+0x34f/0x4d0 [ 531.760578][T14777] ? ksys_truncate+0x11b/0x190 [ 531.760598][T14777] ? __pfx___x64_sys_futex+0x10/0x10 [ 531.760618][T14777] ? __pfx_ksys_truncate+0x10/0x10 [ 531.760645][T14777] do_syscall_64+0x123/0x790 [ 531.760671][T14777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.760693][T14777] RIP: 0033:0x7f9709b9e159 [ 531.760710][T14777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.760730][T14777] RSP: 002b:00007f9707df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 531.760760][T14777] RAX: ffffffffffffffda RBX: 00007f9709e25fa8 RCX: 00007f9709b9e159 [ 531.760773][T14777] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9709e25fa8 [ 531.760786][T14777] RBP: 00007f9709e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 531.760800][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.760812][T14777] R13: 00007f9709e26038 R14: 00007ffe06a55b70 R15: 00007ffe06a55c58 [ 531.760839][T14777] [ 532.103242][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.113668][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.173895][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 532.236338][ T31] audit: type=1400 audit(1789220939.624:1093): avc: denied { create } for pid=14792 comm="syz.2.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 532.325597][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 532.326932][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.326987][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.327031][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 532.327052][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.327088][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.432770][ T31] audit: type=1400 audit(1789220939.814:1094): avc: denied { write } for pid=14783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.609162][ T31] audit: type=1400 audit(1789220939.994:1095): avc: denied { write } for pid=14805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.778126][T14817] tipc: Enabling of bearer rejected, failed to enable media [ 533.253888][ T31] audit: type=1400 audit(1789220940.634:1096): avc: denied { write } for pid=14816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.511544][T14841] FAULT_INJECTION: forcing a failure. [ 533.511544][T14841] name fail_futex, interval 1, probability 0, space 0, times 0 [ 533.511599][T14841] CPU: 1 UID: 0 PID: 14841 Comm: syz.2.2670 Not tainted syzkaller #0 PREEMPT(full) [ 533.511623][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 533.511637][T14841] Call Trace: [ 533.511645][T14841] [ 533.511654][T14841] dump_stack_lvl+0x100/0x190 [ 533.511690][T14841] should_fail_ex.cold+0x5/0xa [ 533.511720][T14841] get_futex_key+0x1d0/0x14f0 [ 533.511750][T14841] ? __pfx_get_futex_key+0x10/0x10 [ 533.511775][T14841] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 533.511802][T14841] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 533.511830][T14841] futex_wait_setup+0x91/0x540 [ 533.511864][T14841] __futex_wait+0x19f/0x300 [ 533.511883][T14841] ? __pfx___futex_wait+0x10/0x10 [ 533.511897][T14841] ? __pfx_try_to_wake_up+0x10/0x10 [ 533.511917][T14841] ? futex_hash+0x311/0x400 [ 533.511942][T14841] ? __pfx_futex_wake_mark+0x10/0x10 [ 533.511975][T14841] ? find_held_lock+0x2b/0x80 [ 533.511999][T14841] ? futex_wake+0x4ea/0x5e0 [ 533.512032][T14841] futex_wait+0xe6/0x370 [ 533.512049][T14841] ? __pfx_futex_wait+0x10/0x10 [ 533.512076][T14841] do_futex+0x265/0x440 [ 533.512102][T14841] ? __pfx_do_futex+0x10/0x10 [ 533.512130][T14841] __x64_sys_futex+0x34f/0x4d0 [ 533.512159][T14841] ? __pfx___x64_sys_futex+0x10/0x10 [ 533.512194][T14841] do_syscall_64+0x123/0x790 [ 533.512222][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.512241][T14841] RIP: 0033:0x7f7bd1f9e159 [ 533.512258][T14841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.512275][T14841] RSP: 002b:00007f7bd2f2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 533.512293][T14841] RAX: ffffffffffffffda RBX: 00007f7bd2225fa8 RCX: 00007f7bd1f9e159 [ 533.512305][T14841] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bd2225fa8 [ 533.512316][T14841] RBP: 00007f7bd2225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 533.512326][T14841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.512337][T14841] R13: 00007f7bd2226038 R14: 00007ffd2058f740 R15: 00007ffd2058f828 [ 533.512367][T14841] [ 533.672816][ T31] audit: type=1400 audit(1789220941.054:1097): avc: denied { write } for pid=14842 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.016652][T14856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2675'. [ 534.448003][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.448603][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.935552][ T10] usb 5-1: USB disconnect, device number 70 [ 534.984081][ T31] audit: type=1400 audit(1789220942.374:1098): avc: denied { mount } for pid=14867 comm="syz.1.2679" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 534.988090][ T31] audit: type=1800 audit(1789220942.374:1099): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2679" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 535.303149][T14878] tipc: Enabled bearer , priority 1 [ 535.318350][T14877] tipc: Disabling bearer [ 535.550706][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.567245][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.575108][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.586427][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.588967][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.700045][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 535.766621][ T31] audit: type=1400 audit(1789220943.154:1100): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 536.038935][ T5601] syz_tun (unregistering): left allmulticast mode [ 536.109561][T14902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 536.272398][T14908] FAULT_INJECTION: forcing a failure. [ 536.272398][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 536.272432][T14908] CPU: 0 UID: 0 PID: 14908 Comm: syz.1.2690 Not tainted syzkaller #0 PREEMPT(full) [ 536.272454][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 536.272466][T14908] Call Trace: [ 536.272473][T14908] [ 536.272480][T14908] dump_stack_lvl+0x100/0x190 [ 536.272512][T14908] should_fail_ex.cold+0x5/0xa [ 536.272536][T14908] should_failslab+0xc2/0x120 [ 536.272560][T14908] __kmalloc_noprof+0xfc/0x840 [ 536.272578][T14908] ? alloc_pipe_info+0x1ec/0x590 [ 536.272603][T14908] alloc_pipe_info+0x1ec/0x590 [ 536.272628][T14908] create_pipe_files+0x8c/0x970 [ 536.272652][T14908] do_pipe2+0xbd/0x1e0 [ 536.272674][T14908] ? __pfx_do_pipe2+0x10/0x10 [ 536.272696][T14908] ? __pfx___x64_sys_futex+0x10/0x10 [ 536.272717][T14908] ? __task_pid_nr_ns+0x1ca/0x510 [ 536.272755][T14908] __x64_sys_pipe2+0x54/0x80 [ 536.272779][T14908] do_syscall_64+0x123/0x790 [ 536.272805][T14908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.272825][T14908] RIP: 0033:0x7f3e1359e159 [ 536.272843][T14908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.272859][T14908] RSP: 002b:00007f3e1441d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 536.272877][T14908] RAX: ffffffffffffffda RBX: 00007f3e13825fa0 RCX: 00007f3e1359e159 [ 536.272889][T14908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.272900][T14908] RBP: 00007f3e1363503b R08: 0000000000000000 R09: 0000000000000000 [ 536.272911][T14908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.272922][T14908] R13: 00007f3e13826038 R14: 00007f3e13825fa0 R15: 00007fff90a4d038 [ 536.272948][T14908] [ 536.483881][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 536.543731][ T31] audit: type=1800 audit(1789220943.924:1101): pid=14914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2692" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 536.678974][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 536.681199][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.681240][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.681261][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 536.681282][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.681315][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.088233][T14886] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.088386][T14886] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.088722][T14886] bridge_slave_0: entered allmulticast mode [ 537.090106][T14886] bridge_slave_0: entered promiscuous mode [ 537.093545][T14886] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.093650][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.093743][T14886] bridge_slave_1: entered allmulticast mode [ 537.094937][T14886] bridge_slave_1: entered promiscuous mode [ 537.103653][ T10] usb 4-1: USB disconnect, device number 65 [ 537.147106][T14886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.150380][T14886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.173278][T14886] team0: Port device team_slave_0 added [ 537.177065][T14886] team0: Port device team_slave_1 added [ 537.205302][T14886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.205319][T14886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.205449][T14886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.208856][T14886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.208872][T14886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.208916][T14886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.333661][T14886] hsr_slave_0: entered promiscuous mode [ 537.340314][T14886] hsr_slave_1: entered promiscuous mode [ 537.340908][T14886] debugfs: 'hsr0' already exists in 'hsr' [ 537.340925][T14886] Cannot create hsr debugfs directory [ 537.664620][ T5619] Bluetooth: hci5: command tx timeout [ 537.700409][T14886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.891465][ T31] audit: type=1800 audit(1789220945.254:1102): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2697" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 538.159846][T14886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.329694][T14886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.486645][T14886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.806678][T14959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 538.824963][T14959] md: array md0 already has disks! [ 538.854658][T14959] md: could not open device unknown-block(1,1). [ 538.854708][T14959] md: error, md_import_device() returned -16 [ 538.877596][T14962] FAULT_INJECTION: forcing a failure. [ 538.877596][T14962] name failslab, interval 1, probability 0, space 0, times 0 [ 538.877628][T14962] CPU: 0 UID: 0 PID: 14962 Comm: syz.4.2706 Not tainted syzkaller #0 PREEMPT(full) [ 538.877659][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 538.877672][T14962] Call Trace: [ 538.877679][T14962] [ 538.877687][T14962] dump_stack_lvl+0x100/0x190 [ 538.877719][T14962] should_fail_ex.cold+0x5/0xa [ 538.877748][T14962] should_failslab+0xc2/0x120 [ 538.877775][T14962] kmem_cache_alloc_noprof+0x92/0x6a0 [ 538.877796][T14962] ? d_instantiate+0x8a/0xb0 [ 538.877824][T14962] ? alloc_empty_file+0x5b/0x1c0 [ 538.877854][T14962] alloc_empty_file+0x5b/0x1c0 [ 538.877883][T14962] alloc_file_pseudo+0x183/0x290 [ 538.877913][T14962] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 538.877949][T14962] create_pipe_files+0x360/0x970 [ 538.877976][T14962] do_pipe2+0xbd/0x1e0 [ 538.878000][T14962] ? __pfx_do_pipe2+0x10/0x10 [ 538.878024][T14962] ? xfd_validate_state+0x129/0x190 [ 538.878053][T14962] __x64_sys_pipe2+0x54/0x80 [ 538.878078][T14962] do_syscall_64+0x123/0x790 [ 538.878105][T14962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.878126][T14962] RIP: 0033:0x7f9709b9e159 [ 538.878142][T14962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.878161][T14962] RSP: 002b:00007f9707df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 538.878181][T14962] RAX: ffffffffffffffda RBX: 00007f9709e25fa0 RCX: 00007f9709b9e159 [ 538.878194][T14962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.878206][T14962] RBP: 00007f9709c3503b R08: 0000000000000000 R09: 0000000000000000 [ 538.878218][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.878230][T14962] R13: 00007f9709e26038 R14: 00007f9709e25fa0 R15: 00007ffe06a55c58 [ 538.878254][T14962] [ 539.127951][T14886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.144409][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.145388][T14886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.150034][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.153382][T14886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.188088][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.188884][T14886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.193240][T14886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.224015][T14969] syzkaller0: entered promiscuous mode [ 539.224041][T14969] syzkaller0: entered allmulticast mode [ 539.349773][ T31] audit: type=1400 audit(1789220946.734:1103): avc: denied { setopt } for pid=14968 comm="syz.4.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.350166][ T31] audit: type=1400 audit(1789220946.734:1104): avc: denied { write } for pid=14968 comm="syz.4.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.767386][ T5619] Bluetooth: hci5: command tx timeout [ 539.925583][T14982] usb 1-1: USB disconnect, device number 40 [ 539.927322][T14982] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 541.832146][ T5619] Bluetooth: hci5: command tx timeout [ 542.993554][T14886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.034447][T14886] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.042865][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.042939][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.063962][ T5856] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 543.093291][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.093378][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.216172][ T5856] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 543.218800][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.311659][T14982] hub 1-0:1.0: USB hub found [ 543.311906][T14982] hub 1-0:1.0: 1 port detected [ 543.812107][ T31] audit: type=1400 audit(1789220951.194:1105): avc: denied { write } for pid=14993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.845146][ T5699] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 543.904540][ T5619] Bluetooth: hci5: command tx timeout [ 544.004300][ T5699] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 544.008284][ T5699] usb 1-1: Dual-Role OTG device on HNP port [ 544.008557][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.008578][ T5699] usb 1-1: SerialNumber: 1234567890 [ 544.060981][ T31] audit: type=1400 audit(1789220951.444:1106): avc: denied { write } for pid=15027 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.127321][ T5699] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 544.151887][ T5699] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 544.196173][ T5699] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 544.210817][ T31] audit: type=1400 audit(1789220951.594:1107): avc: denied { mount } for pid=15032 comm="syz.4.2719" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 544.233574][ T31] audit: type=1400 audit(1789220951.604:1108): avc: denied { search } for pid=15032 comm="syz.4.2719" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 544.233622][ T31] audit: type=1400 audit(1789220951.604:1109): avc: denied { write } for pid=15032 comm="syz.4.2719" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 544.233659][ T31] audit: type=1400 audit(1789220951.604:1110): avc: denied { open } for pid=15032 comm="syz.4.2719" path="/550/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 544.272104][T15036] md: array md0 already has disks! [ 544.310643][ T5699] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 544.326286][T15036] md: could not open device unknown-block(1,0). [ 544.326355][T15036] md: error, md_import_device() returned -16 [ 544.521532][ T5856] usb 3-1: ATUSB: AT86RF231 version 1 [ 544.566134][T15036] md: pers->run() failed ... [ 544.735469][ T5856] usb 3-1: Firmware version (0.0) predates our first public release. [ 544.735494][ T5856] usb 3-1: Please update to version 0.2 or newer [ 544.840127][T15063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2722'. [ 544.887994][ T31] audit: type=1400 audit(1789220952.274:1111): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 544.925402][ T31] audit: type=1400 audit(1789220952.314:1112): avc: denied { write } for pid=15037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.138235][ T31] audit: type=1400 audit(1789220952.524:1113): avc: denied { write } for pid=15069 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.147122][ T5856] usb 3-1: USB disconnect, device number 64 [ 545.247180][ T31] audit: type=1400 audit(1789220952.634:1114): avc: denied { ioctl } for pid=15062 comm="syz.3.2723" path="socket:[84831]" dev="sockfs" ino=84831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.539581][ T5602] svc: failed to register nfsdv3 RPC service (errno 111). [ 545.552944][ T5602] svc: failed to register nfsaclv3 RPC service (errno 111). [ 545.552965][ T5602] failed to unregister udp with rpcbind [ 545.554951][ T5602] svc: failed to register nfsdv3 RPC service (errno 97). [ 545.554968][ T5602] svc: failed to register nfsaclv3 RPC service (errno 97). [ 545.554978][ T5602] failed to unregister udp with rpcbind [ 546.266902][ T5856] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 546.422569][ T5856] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 546.445874][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.445932][ T5856] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 546.446048][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.490672][T14886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.514817][T15098] md: array md0 already has disks! [ 546.521910][ T5856] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 546.545884][T15098] md: could not open device unknown-block(1,0). [ 546.545934][T15098] md: error, md_import_device() returned -16 [ 546.638621][T14886] veth0_vlan: entered promiscuous mode [ 546.641323][T15098] md: pers->run() failed ... [ 546.663953][T14886] veth1_vlan: entered promiscuous mode [ 546.755763][T14886] veth0_macvtap: entered promiscuous mode [ 546.780594][T14886] veth1_macvtap: entered promiscuous mode [ 546.839785][T14886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.858616][T14886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.934457][ T1427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.935550][ T1427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.935818][ T1427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.935849][ T1427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.085666][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.085687][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.146044][ T5699] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 547.204168][ T1427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.204190][ T1427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.244776][ T5715] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 547.298555][ T5699] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 547.299494][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.299533][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 547.300439][ T5699] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 547.300461][ T5699] usb 5-1: Manufacturer: syz [ 547.304139][ T5699] usb 5-1: config 0 descriptor?? [ 547.395231][ T5715] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 547.396257][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 547.396286][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 547.396307][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 547.398184][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.398213][ T5715] usb 4-1: Product: syz [ 547.398227][ T5715] usb 4-1: Manufacturer: syz [ 547.398242][ T5715] usb 4-1: SerialNumber: syz [ 547.404587][ T5715] usb 4-1: config 0 descriptor?? [ 547.753657][ T1599] usb 5-1: USB disconnect, device number 71 [ 548.610095][T15146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 548.867046][ T5856] usb 3-1: USB disconnect, device number 65 [ 548.917714][ T5715] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux1 [ 548.918091][ T5856] idmouse 3-1:1.0: disconnected [ 549.454055][ T5715] usb 4-1: USB disconnect, device number 66 [ 550.383707][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2748'. [ 550.409702][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 550.409719][ T31] audit: type=1400 audit(1789220957.794:1120): avc: denied { write } for pid=15154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.545210][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'. [ 550.571819][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'. [ 550.585195][ T31] audit: type=1400 audit(1789220957.964:1121): avc: denied { write } for pid=15192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.841505][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'. [ 550.910531][ T31] audit: type=1400 audit(1789220958.294:1122): avc: denied { write } for pid=15202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.014765][ T31] audit: type=1400 audit(1789220958.404:1123): avc: denied { write } for pid=15219 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.063841][ T1599] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 551.292912][ T1599] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 551.293840][ T1599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.293880][ T1599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.293901][ T1599] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 551.293922][ T1599] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.293957][ T1599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.478533][ T31] audit: type=1400 audit(1789220958.864:1124): avc: denied { write } for pid=15227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.604887][ T31] audit: type=1400 audit(1789220958.994:1125): avc: denied { write } for pid=15239 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.775624][ T1599] usb 3-1: USB disconnect, device number 66 [ 552.091115][T15251] usb 1-1: USB disconnect, device number 41 [ 552.099704][T15251] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 552.260571][ T31] audit: type=1400 audit(1789220959.644:1126): avc: denied { ioctl } for pid=15249 comm="syz.0.2761" path="socket:[85079]" dev="sockfs" ino=85079 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 552.353944][ T5715] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 552.363423][T15251] hub 1-0:1.0: USB hub found [ 552.363694][T15251] hub 1-0:1.0: 1 port detected [ 552.503984][ T5699] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 552.504694][ T5715] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 552.505561][ T5715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.505586][ T5715] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 552.505619][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.625891][ T5715] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 552.675254][ T5699] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 552.679975][ T5699] usb 1-1: Dual-Role OTG device on HNP port [ 552.681624][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.681647][ T5699] usb 1-1: SerialNumber: 1234567890 [ 552.741474][ T5699] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 552.762930][ T5699] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 552.780482][ T5699] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 552.802931][ T5699] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.830404][T15280] FAULT_INJECTION: forcing a failure. [ 552.830404][T15280] name failslab, interval 1, probability 0, space 0, times 0 [ 552.830425][T15280] CPU: 1 UID: 0 PID: 15280 Comm: syz.0.2768 Not tainted syzkaller #0 PREEMPT(full) [ 552.830439][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 552.830447][T15280] Call Trace: [ 552.830452][T15280] [ 552.830458][T15280] dump_stack_lvl+0x100/0x190 [ 552.830479][T15280] should_fail_ex.cold+0x5/0xa [ 552.830496][T15280] should_failslab+0xc2/0x120 [ 552.830512][T15280] kmem_cache_alloc_noprof+0x92/0x6a0 [ 552.830525][T15280] ? __pfx_map_id_range_down+0x10/0x10 [ 552.830538][T15280] ? security_inode_alloc+0x3b/0x2c0 [ 552.830562][T15280] security_inode_alloc+0x3b/0x2c0 [ 552.830579][T15280] inode_init_always_gfp+0xc6f/0xfb0 [ 552.830596][T15280] alloc_inode+0x8e/0x250 [ 552.830607][T15280] new_inode+0x22/0x1c0 [ 552.830618][T15280] debugfs_create_symlink+0xb4/0x1f0 [ 552.830637][T15280] ref_tracker_dir_symlink+0x257/0x3b0 [ 552.830657][T15280] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 552.830685][T15280] ? rcu_is_watching+0x13/0xc0 [ 552.830699][T15280] ? ida_alloc_range+0x70d/0x830 [ 552.830715][T15280] ? kfree+0x1e5/0x6d0 [ 552.830730][T15280] ? xas_nomem+0x189/0x2c0 [ 552.830748][T15280] ? __pfx_net_ns_net_init+0x10/0x10 [ 552.830762][T15280] net_ns_net_init+0x7e/0x120 [ 552.830776][T15280] ops_init+0x1e2/0x5f0 [ 552.830791][T15280] setup_net+0x118/0x3a0 [ 552.830805][T15280] ? __pfx_setup_net+0x10/0x10 [ 552.830823][T15280] copy_net_ns+0x345/0x7a0 [ 552.830839][T15280] create_new_namespaces+0x3ea/0xac0 [ 552.830856][T15280] unshare_nsproxy_namespaces+0xf2/0x220 [ 552.830871][T15280] ksys_unshare+0x4a2/0xa70 [ 552.830885][T15280] ? __pfx_ksys_unshare+0x10/0x10 [ 552.830903][T15280] __x64_sys_unshare+0x31/0x40 [ 552.830916][T15280] do_syscall_64+0x123/0x790 [ 552.830931][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.830943][T15280] RIP: 0033:0x7f5d5d79e159 [ 552.830953][T15280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.830964][T15280] RSP: 002b:00007f5d5e57e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.830976][T15280] RAX: ffffffffffffffda RBX: 00007f5d5da25fa0 RCX: 00007f5d5d79e159 [ 552.830983][T15280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 552.830990][T15280] RBP: 00007f5d5d83503b R08: 0000000000000000 R09: 0000000000000000 [ 552.830997][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.831004][T15280] R13: 00007f5d5da26038 R14: 00007f5d5da25fa0 R15: 00007ffd6215b9a8 [ 552.831018][T15280] [ 552.831055][T15280] debugfs: out of free dentries, can not create symlink 'netns-cc-4026533962-refcnt' [ 553.105660][ T31] audit: type=1400 audit(1789220960.484:1127): avc: denied { write } for pid=15255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.223174][ T31] audit: type=1400 audit(1789220960.604:1128): avc: denied { write } for pid=15287 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.431147][ T31] audit: type=1400 audit(1789220960.814:1129): avc: denied { setopt } for pid=15292 comm="syz.2.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 553.521497][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'. [ 553.580935][T15298] md: array md0 already has disks! [ 553.624463][T15300] md: could not open device unknown-block(1,0). [ 553.624524][T15300] md: error, md_import_device() returned -16 [ 553.792315][T15308] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 553.877336][T15298] md: pers->run() failed ... [ 554.133148][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 554.956725][ T1599] usb 5-1: USB disconnect, device number 72 [ 555.036334][ T1599] idmouse 5-1:1.0: disconnected [ 555.122902][T15345] usb 1-1: USB disconnect, device number 42 [ 555.124852][T15345] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 555.252795][T15345] hub 1-0:1.0: USB hub found [ 555.253055][T15345] hub 1-0:1.0: 1 port detected [ 555.406605][ T5699] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 555.555805][ T5699] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 555.557569][ T5699] usb 1-1: Dual-Role OTG device on HNP port [ 555.557814][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.557852][ T5699] usb 1-1: SerialNumber: 1234567890 [ 555.609042][ T5699] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 555.632615][ T5699] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 555.678642][ T5699] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 555.681897][T15360] FAULT_INJECTION: forcing a failure. [ 555.681897][T15360] name failslab, interval 1, probability 0, space 0, times 0 [ 555.681931][T15360] CPU: 0 UID: 0 PID: 15360 Comm: syz.1.2781 Not tainted syzkaller #0 PREEMPT(full) [ 555.681957][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 555.681969][T15360] Call Trace: [ 555.681978][T15360] [ 555.681989][T15360] dump_stack_lvl+0x100/0x190 [ 555.682023][T15360] should_fail_ex.cold+0x5/0xa [ 555.682051][T15360] should_failslab+0xc2/0x120 [ 555.682079][T15360] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 555.682101][T15360] ? __d_alloc+0x35/0xa50 [ 555.682132][T15360] __d_alloc+0x35/0xa50 [ 555.682160][T15360] d_alloc+0x4a/0x1e0 [ 555.682186][T15360] lookup_one_qstr_excl+0x171/0x250 [ 555.682213][T15360] start_dirop+0x59/0xb0 [ 555.682232][T15360] simple_start_creating+0xf9/0x110 [ 555.682254][T15360] ? __pfx_simple_start_creating+0x10/0x10 [ 555.682279][T15360] ? mntput+0x70/0xa0 [ 555.682300][T15360] ? simple_pin_fs+0xa3/0x190 [ 555.682322][T15360] debugfs_start_creating.part.0+0x9f/0x180 [ 555.682353][T15360] debugfs_create_symlink+0x62/0x1f0 [ 555.682381][T15360] ref_tracker_dir_symlink+0x257/0x3b0 [ 555.682409][T15360] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 555.682458][T15360] ? rcu_is_watching+0x13/0xc0 [ 555.682485][T15360] ? ida_alloc_range+0x70d/0x830 [ 555.682510][T15360] ? kfree+0x1e5/0x6d0 [ 555.682537][T15360] ? xas_nomem+0x189/0x2c0 [ 555.682568][T15360] ? __pfx_net_ns_net_init+0x10/0x10 [ 555.682592][T15360] net_ns_net_init+0x7e/0x120 [ 555.682615][T15360] ops_init+0x1e2/0x5f0 [ 555.682648][T15360] setup_net+0x118/0x3a0 [ 555.682673][T15360] ? __pfx_setup_net+0x10/0x10 [ 555.682704][T15360] copy_net_ns+0x345/0x7a0 [ 555.682732][T15360] create_new_namespaces+0x3ea/0xac0 [ 555.682761][T15360] unshare_nsproxy_namespaces+0xf2/0x220 [ 555.682785][T15360] ksys_unshare+0x4a2/0xa70 [ 555.682810][T15360] ? __pfx_ksys_unshare+0x10/0x10 [ 555.682841][T15360] __x64_sys_unshare+0x31/0x40 [ 555.682862][T15360] do_syscall_64+0x123/0x790 [ 555.682889][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.682908][T15360] RIP: 0033:0x7f3e1359e159 [ 555.682924][T15360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.682940][T15360] RSP: 002b:00007f3e1441d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 555.682958][T15360] RAX: ffffffffffffffda RBX: 00007f3e13825fa0 RCX: 00007f3e1359e159 [ 555.682970][T15360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 555.682981][T15360] RBP: 00007f3e1363503b R08: 0000000000000000 R09: 0000000000000000 [ 555.682991][T15360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.683001][T15360] R13: 00007f3e13826038 R14: 00007f3e13825fa0 R15: 00007fff90a4d038 [ 555.683023][T15360] [ 555.702370][ T5699] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.507063][T15382] usb 1-1: USB disconnect, device number 43 [ 557.509342][T15382] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 557.510762][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.510813][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.691816][T15382] hub 1-0:1.0: USB hub found [ 557.692082][T15382] hub 1-0:1.0: 1 port detected [ 557.724035][T15385] hub 1-0:1.0: USB hub found [ 557.725852][T15385] hub 1-0:1.0: 1 port detected [ 557.850667][T15050] udevd[15050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.4/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 557.964430][ T5699] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 558.023572][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 558.023589][ T31] audit: type=1400 audit(1789220965.404:1135): avc: denied { write } for pid=15358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.146573][ T5699] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 558.151339][ T5699] usb 1-1: Dual-Role OTG device on HNP port [ 558.153523][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.153551][ T5699] usb 1-1: SerialNumber: 1234567890 [ 558.259284][ T5699] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 558.570012][ T5699] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 558.681049][ T5699] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 558.687741][ T31] audit: type=1400 audit(1789220966.074:1136): avc: denied { write } for pid=15401 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.736190][ T5699] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.285235][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 559.339269][T15412] misc userio: No port type given on /dev/userio [ 559.435827][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2795'. [ 559.440313][ T10] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 559.441280][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.441307][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 559.441339][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.470501][ T10] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 560.277330][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.279096][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.698165][T15436] md: could not open device unknown-block(1,1). [ 560.698216][T15436] md: error, md_import_device() returned -16 [ 561.063953][ T31] audit: type=1400 audit(1789220968.424:1137): avc: denied { write } for pid=15434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.126697][T15451] FAULT_INJECTION: forcing a failure. [ 561.126697][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 561.126725][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.2.2804 Not tainted syzkaller #0 PREEMPT(full) [ 561.126748][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 561.126759][T15451] Call Trace: [ 561.126766][T15451] [ 561.126774][T15451] dump_stack_lvl+0x100/0x190 [ 561.126804][T15451] should_fail_ex.cold+0x5/0xa [ 561.126829][T15451] should_failslab+0xc2/0x120 [ 561.126855][T15451] __kmalloc_noprof+0xfc/0x840 [ 561.126875][T15451] ? tomoyo_encode2+0xfb/0x3c0 [ 561.126901][T15451] tomoyo_encode2+0xfb/0x3c0 [ 561.126924][T15451] tomoyo_encode+0x29/0x50 [ 561.126943][T15451] tomoyo_realpath_from_path+0x18c/0x690 [ 561.126968][T15451] tomoyo_path_number_perm+0x23c/0x580 [ 561.126996][T15451] ? tomoyo_path_number_perm+0x22e/0x580 [ 561.127023][T15451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 561.127057][T15451] ? __lock_acquire+0x5c0/0x1f40 [ 561.127089][T15451] ? __fget_files+0x34/0x3d0 [ 561.127111][T15451] ? find_held_lock+0x2b/0x80 [ 561.127132][T15451] ? hook_file_ioctl_common+0x140/0x440 [ 561.127158][T15451] ? __fget_files+0x21f/0x3d0 [ 561.127181][T15451] security_file_ioctl+0xd3/0x230 [ 561.127200][T15451] __x64_sys_ioctl+0xb7/0x210 [ 561.127220][T15451] do_syscall_64+0x123/0x790 [ 561.127244][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.127263][T15451] RIP: 0033:0x7f7bd1f9ddeb [ 561.127278][T15451] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 561.127295][T15451] RSP: 002b:00007f7bd2f27f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.127317][T15451] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7bd1f9ddeb [ 561.127330][T15451] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 561.127342][T15451] RBP: 00007f7bd2f28fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 561.127353][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.127364][T15451] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.127386][T15451] [ 561.193407][T15451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.284502][ T31] audit: type=1400 audit(1789220968.664:1138): avc: denied { write } for pid=15459 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.614498][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 561.765545][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.767061][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.767168][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.767189][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.767226][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.788572][ T10] usb 3-1: config 0 descriptor?? [ 562.010262][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 562.010367][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 562.021292][ T10] usb 3-1: USB disconnect, device number 67 [ 562.227406][ T31] audit: type=1400 audit(1789220969.614:1139): avc: denied { write } for pid=15474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.231395][ T10] usb 4-1: USB disconnect, device number 67 [ 562.236053][ T10] idmouse 4-1:1.0: disconnected [ 562.423386][ T31] audit: type=1400 audit(1789220969.814:1140): avc: denied { write } for pid=15499 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.795381][T15522] md: could not open device unknown-block(1,1). [ 562.795424][T15522] md: error, md_import_device() returned -16 [ 563.006790][T15536] FAULT_INJECTION: forcing a failure. [ 563.006790][T15536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 563.006821][T15536] CPU: 0 UID: 0 PID: 15536 Comm: syz.1.2823 Not tainted syzkaller #0 PREEMPT(full) [ 563.006841][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 563.006853][T15536] Call Trace: [ 563.006859][T15536] [ 563.006868][T15536] dump_stack_lvl+0x100/0x190 [ 563.006904][T15536] should_fail_ex.cold+0x5/0xa [ 563.006925][T15536] ? prepare_alloc_pages+0x16d/0x5b0 [ 563.006952][T15536] should_fail_alloc_page+0xeb/0x140 [ 563.006978][T15536] prepare_alloc_pages+0x1f0/0x5b0 [ 563.006999][T15536] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 563.007047][T15536] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 563.007079][T15536] ? find_held_lock+0x2b/0x80 [ 563.007105][T15536] ? cpa_flush+0x701/0x9b0 [ 563.007129][T15536] ? cpa_flush+0x7af/0x9b0 [ 563.007155][T15536] ? do_raw_spin_unlock+0x145/0x1e0 [ 563.007180][T15536] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.007209][T15536] ? _raw_spin_unlock+0x28/0x50 [ 563.007230][T15536] ? cpa_flush+0x387/0x9b0 [ 563.007254][T15536] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.007281][T15536] ? __pfx_cpa_flush+0x10/0x10 [ 563.007304][T15536] ? pgprot2cachemode+0x9a/0x130 [ 563.007337][T15536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 563.007359][T15536] ? policy_nodemask+0xed/0x4f0 [ 563.007382][T15536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 563.007405][T15536] ? policy_nodemask+0xed/0x4f0 [ 563.007430][T15536] alloc_pages_mpol+0x201/0x550 [ 563.007455][T15536] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 563.007480][T15536] ? alloc_pages_noprof+0xf9/0x160 [ 563.007508][T15536] alloc_pages_noprof+0x1a/0x160 [ 563.007534][T15536] kimage_alloc_pages+0x72/0x380 [ 563.007556][T15536] kimage_alloc_page+0x232/0x910 [ 563.007586][T15536] kimage_load_segment+0x507/0xde0 [ 563.007611][T15536] do_kexec_load+0x58d/0x810 [ 563.007634][T15536] ? __pfx_do_kexec_load+0x10/0x10 [ 563.007658][T15536] ? _copy_from_user+0x59/0xd0 [ 563.007678][T15536] __x64_sys_kexec_load+0x1bf/0x230 [ 563.007700][T15536] do_syscall_64+0x123/0x790 [ 563.007727][T15536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.007745][T15536] RIP: 0033:0x7f3e1359e159 [ 563.007762][T15536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.007779][T15536] RSP: 002b:00007f3e1441d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 563.007800][T15536] RAX: ffffffffffffffda RBX: 00007f3e13825fa0 RCX: 00007f3e1359e159 [ 563.007812][T15536] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 563.007824][T15536] RBP: 00007f3e1363503b R08: 0000000000000000 R09: 0000000000000000 [ 563.007836][T15536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.007845][T15536] R13: 00007f3e13826038 R14: 00007f3e13825fa0 R15: 00007fff90a4d038 [ 563.007869][T15536] [ 563.016338][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 563.168317][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 563.172584][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 563.175529][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.175557][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 563.177747][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.177767][ T10] usb 3-1: Product: syz [ 563.177779][ T10] usb 3-1: Manufacturer: syz [ 563.177808][ T10] usb 3-1: SerialNumber: syz [ 563.186681][ T10] usb 3-1: config 0 descriptor?? [ 563.454048][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 563.480167][ T31] audit: type=1400 audit(1789220970.864:1141): avc: denied { write } for pid=15521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.483875][ T5856] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 563.549077][ T10] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 563.632371][ T31] audit: type=1400 audit(1789220971.014:1142): avc: denied { write } for pid=15549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.636062][ T5856] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 563.637652][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.637688][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 563.637706][ T5856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 563.637726][ T5856] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.637757][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.756915][ T10] imon:send_packet: packet tx failed (-71) [ 563.776596][ T10] imon 3-1:0.0: panel buttons/knobs setup failed [ 563.964780][ T10] rc_core: IR keymap rc-imon-pad not found [ 563.964798][ T10] Registered IR keymap rc-empty [ 563.964857][ T10] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 563.964874][ T10] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 563.966644][ T10] imon:send_packet: packet tx failed (-71) [ 563.984009][ T10] imon 3-1:0.0: remote input dev register failed [ 563.984124][ T10] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 564.042450][T15563] loop5: detected capacity change from 0 to 7 [ 564.047372][T15563] Dev loop5: unable to read RDB block 7 [ 564.047396][T15563] loop5: AHDI p1 p2 p3 [ 564.047412][T15563] loop5: partition table partially beyond EOD, truncated [ 564.047625][T15563] loop5: p1 start 1818582900 is beyond EOD, truncated [ 564.047642][T15563] loop5: p3 start 335544320 is beyond EOD, truncated [ 564.168991][ T5856] usb 2-1: USB disconnect, device number 75 [ 564.242469][T15568] FAULT_INJECTION: forcing a failure. [ 564.242469][T15568] name failslab, interval 1, probability 0, space 0, times 0 [ 564.242500][T15568] CPU: 0 UID: 0 PID: 15568 Comm: syz.4.2828 Not tainted syzkaller #0 PREEMPT(full) [ 564.242524][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 564.242536][T15568] Call Trace: [ 564.242544][T15568] [ 564.242552][T15568] dump_stack_lvl+0x100/0x190 [ 564.242586][T15568] should_fail_ex.cold+0x5/0xa [ 564.242615][T15568] should_failslab+0xc2/0x120 [ 564.242641][T15568] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 564.242662][T15568] ? start_dirop+0x79/0xb0 [ 564.242684][T15568] ? alloc_inode+0x68/0x250 [ 564.242706][T15568] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 564.242735][T15568] alloc_inode+0x68/0x250 [ 564.242754][T15568] new_inode+0x22/0x1c0 [ 564.242775][T15568] __debugfs_create_file+0xd8/0x4d0 [ 564.242805][T15568] debugfs_create_file_full+0x41/0x60 [ 564.242835][T15568] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 564.242863][T15568] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 564.242916][T15568] ? kasan_save_track+0x14/0x30 [ 564.242939][T15568] ? __kasan_kmalloc+0xaa/0xb0 [ 564.242962][T15568] ? lockdep_init_map_type+0x5c/0x250 [ 564.242994][T15568] preinit_net+0x252/0x920 [ 564.243021][T15568] copy_net_ns+0x1dd/0x7a0 [ 564.243049][T15568] create_new_namespaces+0x3ea/0xac0 [ 564.243077][T15568] unshare_nsproxy_namespaces+0xf2/0x220 [ 564.243104][T15568] ksys_unshare+0x4a2/0xa70 [ 564.243128][T15568] ? __pfx_ksys_unshare+0x10/0x10 [ 564.243162][T15568] __x64_sys_unshare+0x31/0x40 [ 564.243185][T15568] do_syscall_64+0x123/0x790 [ 564.243212][T15568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.243232][T15568] RIP: 0033:0x7f9709b9e159 [ 564.243249][T15568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.243268][T15568] RSP: 002b:00007f9707df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 564.243289][T15568] RAX: ffffffffffffffda RBX: 00007f9709e25fa0 RCX: 00007f9709b9e159 [ 564.243302][T15568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 564.243314][T15568] RBP: 00007f9709c3503b R08: 0000000000000000 R09: 0000000000000000 [ 564.243325][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.243337][T15568] R13: 00007f9709e26038 R14: 00007f9709e25fa0 R15: 00007ffe06a55c58 [ 564.243363][T15568] [ 564.246467][T15568] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88802acb02c0' [ 564.554662][ T31] audit: type=1400 audit(1789220971.944:1143): avc: denied { write } for pid=15556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.903278][ T31] audit: type=1400 audit(1789220972.284:1144): avc: denied { write } for pid=15577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.340559][ T10] imon 3-1:0.0: unable to initialize intf0, err 0 [ 565.340582][ T10] imon:imon_probe: failed to initialize context! [ 565.340593][ T10] imon 3-1:0.0: unable to register, err -19 [ 565.347376][ T10] usb 3-1: USB disconnect, device number 68 [ 565.444556][ T31] audit: type=1400 audit(1789220972.834:1145): avc: denied { bind } for pid=15584 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.445052][ T31] audit: type=1400 audit(1789220972.834:1146): avc: denied { accept } for pid=15584 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.446562][ T31] audit: type=1400 audit(1789220972.834:1147): avc: denied { ioctl } for pid=15584 comm="syz.1.2832" path="socket:[86743]" dev="sockfs" ino=86743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 565.693821][ T10] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 565.740842][T15597] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 565.853018][ T10] usb 3-1: device descriptor read/all, error -71 [ 566.193851][ T5715] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 566.229402][ T31] audit: type=1400 audit(1789220973.594:1148): avc: denied { write } for pid=15599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.337807][ T31] audit: type=1400 audit(1789220973.724:1149): avc: denied { write } for pid=15616 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.366966][ T5715] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 566.367941][ T5715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.367965][ T5715] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 566.367999][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.424837][ T5715] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 566.474759][ T5699] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 566.604552][T15620] md: could not open device unknown-block(1,1). [ 566.604597][T15620] md: error, md_import_device() returned -16 [ 566.630085][ T5699] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 566.631019][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.631081][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.631103][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.631127][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.631163][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.545923][ T31] audit: type=1400 audit(1789220974.934:1150): avc: denied { write } for pid=15630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.037278][ T5606] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 569.407151][ T5606] usb 3-1: Using ep0 maxpacket: 32 [ 569.469279][ T5606] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 569.474823][ T5699] usb 5-1: USB disconnect, device number 73 [ 569.536351][ T5699] idmouse 5-1:1.0: disconnected [ 569.582840][ T5606] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 569.582869][ T5606] usb 3-1: config 0 has no interface number 0 [ 569.582906][ T5606] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 569.666308][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.666335][ T5606] usb 3-1: Product: syz [ 569.666349][ T5606] usb 3-1: Manufacturer: syz [ 569.666363][ T5606] usb 3-1: SerialNumber: syz [ 569.700496][ T5856] usb 2-1: USB disconnect, device number 76 [ 569.701624][ T5606] usb 3-1: config 0 descriptor?? [ 569.702334][T15680] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 569.760404][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2858'. [ 570.019835][ T5606] asix 3-1:0.188: probe with driver asix failed with error -71 [ 570.037752][ T5606] usb 3-1: USB disconnect, device number 71 [ 570.041903][T15701] usb 1-1: USB disconnect, device number 44 [ 570.043876][T15701] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 570.260086][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 570.260103][ T31] audit: type=1326 audit(1789220977.644:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aeaf9e159 code=0x0 [ 570.274159][T15701] hub 1-0:1.0: USB hub found [ 570.274380][T15701] hub 1-0:1.0: 1 port detected [ 570.413816][ T5856] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 570.564347][ T5856] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 570.566581][ T5856] usb 1-1: Dual-Role OTG device on HNP port [ 570.567010][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.567039][ T5856] usb 1-1: SerialNumber: 1234567890 [ 570.623089][ T5856] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 570.646283][ T31] audit: type=1400 audit(1789220978.034:1155): avc: denied { write } for pid=15704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.726906][ T5856] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 570.773561][ T31] audit: type=1400 audit(1789220978.154:1156): avc: denied { write } for pid=15728 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.817749][ T5856] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 570.917385][ T5856] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.477117][T15761] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 571.549046][ T31] audit: type=1400 audit(1789220978.934:1157): avc: denied { write } for pid=15732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.554716][T15761] md: could not open device unknown-block(1,0). [ 571.679814][ T31] audit: type=1400 audit(1789220979.064:1158): avc: denied { write } for pid=15773 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.858523][T15772] md: pers->run() failed ... [ 572.455688][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 572.644121][ T31] audit: type=1326 audit(1789220980.034:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15782 comm="syz.1.2879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1359e159 code=0x0 [ 572.825871][ T5856] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 572.974493][ T5856] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 572.975355][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.975394][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.975414][ T5856] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 572.975434][ T5856] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.975468][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.169452][ T31] audit: type=1400 audit(1789220980.554:1160): avc: denied { write } for pid=15783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.323697][ T31] audit: type=1400 audit(1789220980.704:1161): avc: denied { write } for pid=15810 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.457519][ T5856] usb 5-1: USB disconnect, device number 74 [ 573.808028][ T31] audit: type=1400 audit(1789220981.194:1162): avc: denied { write } for pid=15813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.964606][ T31] audit: type=1400 audit(1789220981.334:1163): avc: denied { write } for pid=15831 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.248745][T15844] FAULT_INJECTION: forcing a failure. [ 574.248745][T15844] name failslab, interval 1, probability 0, space 0, times 0 [ 574.248776][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.1.2889 Not tainted syzkaller #0 PREEMPT(full) [ 574.248798][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.248810][T15844] Call Trace: [ 574.248817][T15844] [ 574.248825][T15844] dump_stack_lvl+0x100/0x190 [ 574.248859][T15844] should_fail_ex.cold+0x5/0xa [ 574.248889][T15844] should_failslab+0xc2/0x120 [ 574.248916][T15844] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 574.248939][T15844] ? sock_alloc_inode+0x26/0x2c0 [ 574.248966][T15844] ? __pfx_sock_alloc_inode+0x10/0x10 [ 574.248994][T15844] sock_alloc_inode+0x26/0x2c0 [ 574.249026][T15844] ? __pfx_sock_alloc_inode+0x10/0x10 [ 574.249052][T15844] alloc_inode+0x68/0x250 [ 574.249069][T15844] sock_alloc+0x44/0x280 [ 574.249088][T15844] ? security_socket_create+0x7f/0x250 [ 574.249116][T15844] __sock_create+0xc2/0x860 [ 574.249148][T15844] __sys_socket+0x14d/0x260 [ 574.249179][T15844] ? __pfx___sys_socket+0x10/0x10 [ 574.249217][T15844] __x64_sys_socket+0x72/0xb0 [ 574.249244][T15844] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.249270][T15844] do_syscall_64+0x123/0x790 [ 574.249297][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.249318][T15844] RIP: 0033:0x7f3e1359e159 [ 574.249334][T15844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.249354][T15844] RSP: 002b:00007f3e1441d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 574.249375][T15844] RAX: ffffffffffffffda RBX: 00007f3e13825fa0 RCX: 00007f3e1359e159 [ 574.249390][T15844] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 574.249401][T15844] RBP: 00007f3e1363503b R08: 0000000000000000 R09: 0000000000000000 [ 574.249414][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.249425][T15844] R13: 00007f3e13826038 R14: 00007f3e13825fa0 R15: 00007fff90a4d038 [ 574.249451][T15844] [ 574.249462][T15844] socket: no more sockets [ 574.376208][T15849] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 574.504530][T15849] md: could not open device unknown-block(1,0). [ 574.706212][T15849] md/raid1:md0: active with 1 out of 1 mirrors [ 574.727453][T15849] md0: detected capacity change from 0 to 8192 [ 574.990404][T15873] syz.1.2894 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 574.990440][T15873] CPU: 0 UID: 0 PID: 15873 Comm: syz.1.2894 Not tainted syzkaller #0 PREEMPT(full) [ 574.990461][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.990473][T15873] Call Trace: [ 574.990481][T15873] [ 574.990489][T15873] dump_stack_lvl+0x100/0x190 [ 574.990521][T15873] dump_header+0xfb/0x606 [ 574.990544][T15873] oom_kill_process.cold+0xd/0x380 [ 574.990567][T15873] out_of_memory+0x340/0x14f0 [ 574.990594][T15873] ? __pfx_out_of_memory+0x10/0x10 [ 574.990625][T15873] mem_cgroup_out_of_memory+0xc6/0x130 [ 574.990646][T15873] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 574.990665][T15873] ? find_held_lock+0x2b/0x80 [ 574.990695][T15873] ? do_raw_spin_unlock+0x145/0x1e0 [ 574.990719][T15873] ? _raw_spin_unlock+0x28/0x50 [ 574.990741][T15873] try_charge_memcg+0x783/0xf60 [ 574.990774][T15873] ? __pfx_try_charge_memcg+0x10/0x10 [ 574.990798][T15873] ? find_held_lock+0x2b/0x80 [ 574.990821][T15873] ? rcu_read_unlock+0x17/0x60 [ 574.990847][T15873] ? rcu_read_unlock+0x17/0x60 [ 574.990881][T15873] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 574.990918][T15873] ? kasan_save_track+0x14/0x30 [ 574.990940][T15873] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 574.990959][T15873] ? alloc_empty_file+0x5b/0x1c0 [ 574.990987][T15873] alloc_empty_file+0x5b/0x1c0 [ 574.991013][T15873] dentry_open+0x46/0xd0 [ 574.991035][T15873] open_namespace+0x107/0x1c0 [ 574.991062][T15873] ? __pfx_open_namespace+0x10/0x10 [ 574.991096][T15873] open_related_ns+0x41/0x70 [ 574.991120][T15873] sock_ioctl+0x2bb/0x6b0 [ 574.991149][T15873] ? __pfx_sock_ioctl+0x10/0x10 [ 574.991181][T15873] ? selinux_file_ioctl+0x13b/0x290 [ 574.991202][T15873] ? selinux_file_ioctl+0xb6/0x290 [ 574.991223][T15873] ? __pfx_sock_ioctl+0x10/0x10 [ 574.991253][T15873] __x64_sys_ioctl+0x18e/0x210 [ 574.991283][T15873] do_syscall_64+0x123/0x790 [ 574.991313][T15873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.991334][T15873] RIP: 0033:0x7f3e1359e159 [ 574.991352][T15873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.991371][T15873] RSP: 002b:00007f3e1441d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.991392][T15873] RAX: ffffffffffffffda RBX: 00007f3e13825fa0 RCX: 00007f3e1359e159 [ 574.991404][T15873] RDX: 0000000000000000 RSI: 000000000000894c RDI: 0000000000000003 [ 574.991415][T15873] RBP: 00007f3e1363503b R08: 0000000000000000 R09: 0000000000000000 [ 574.991427][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.991439][T15873] R13: 00007f3e13826038 R14: 00007f3e13825fa0 R15: 00007fff90a4d038 [ 574.991463][T15873] [ 574.991472][T15873] memory: usage 0kB, limit 0kB, failcnt 19 [ 574.991483][T15873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 574.991493][T15873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 574.991503][T15873] Memory cgroup stats for /syz1/test: [ 574.991623][T15873] cache 0 [ 574.991632][T15873] rss 0 [ 574.991639][T15873] rss_huge 0 [ 574.991646][T15873] shmem 0 [ 574.991652][T15873] mapped_file 0 [ 574.991659][T15873] dirty 0 [ 574.991665][T15873] writeback 0 [ 574.991672][T15873] workingset_refault_anon 0 [ 574.991678][T15873] workingset_refault_file 0 [ 574.991686][T15873] swap 0 [ 574.991692][T15873] swapcached 0 [ 574.991698][T15873] pgpgin 0 [ 574.991703][T15873] pgpgout 0 [ 574.991710][T15873] pgfault 3 [ 574.991717][T15873] pgmajfault 0 [ 574.991723][T15873] inactive_anon 0 [ 574.991729][T15873] active_anon 0 [ 574.991736][T15873] inactive_file 0 [ 574.991742][T15873] active_file 0 [ 574.991749][T15873] unevictable 0 [ 574.991755][T15873] hierarchical_memory_limit 0 [ 574.991762][T15873] hierarchical_memsw_limit 9223372036854771712 [ 574.991768][T15873] total_cache 0 [ 574.991774][T15873] total_rss 0 [ 574.991780][T15873] total_rss_huge 0 [ 574.991786][T15873] total_shmem 0 [ 574.991793][T15873] total_mapped_file 0 [ 574.991799][T15873] total_dirty 0 [ 574.991805][T15873] total_writeback 0 [ 574.991812][T15873] total_workingset_refault_anon 0 [ 574.991820][T15873] total_workingset_refault_file 0 [ 574.991827][T15873] total_swap 0 [ 574.991833][T15873] total_swapcached 0 [ 574.991840][T15873] total_pgpgin 0 [ 574.991847][T15873] total_pgpgout 0 [ 574.991854][T15873] total_pgfault 3 [ 574.991860][T15873] total_pgmajfault 0 [ 574.991867][T15873] total_inactive_anon 0 [ 574.991874][T15873] total_active_anon 0 [ 574.991881][T15873] total_inactive_file 0 [ 574.991888][T15873] total_active_file 0 [ 574.991894][T15873] total_unevictable 0 [ 574.991901][T15873] anon_cost 0 [ 574.991907][T15873] file_cost 0 [ 574.991915][T15873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.2894,pid=15871,uid=0 [ 574.995285][T15873] Memory cgroup out of memory: Killed process 15871 (syz.1.2894) total-vm:104300kB, anon-rss:1420kB, file-rss:22712kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 575.235470][ T1599] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 575.339311][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 575.339330][ T31] audit: type=1400 audit(1789220982.724:1167): avc: denied { write } for pid=15867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.491840][ T1599] usb 4-1: Using ep0 maxpacket: 32 [ 575.499756][ T5699] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 575.517068][ T1599] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 575.569389][ T1599] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 575.569419][ T1599] usb 4-1: config 0 has no interface number 0 [ 575.569455][ T1599] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 575.573230][ T1599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.573258][ T1599] usb 4-1: Product: syz [ 575.573273][ T1599] usb 4-1: Manufacturer: syz [ 575.573285][ T1599] usb 4-1: SerialNumber: syz [ 575.577385][ T31] audit: type=1400 audit(1789220982.964:1168): avc: denied { write } for pid=15892 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.649875][ T1599] usb 4-1: config 0 descriptor?? [ 575.651016][T15876] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.654837][ T5699] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 575.656298][ T5699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.656333][ T5699] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.656352][ T5699] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 575.656371][ T5699] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.656405][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.893827][T12630] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 575.903618][ T1599] asix 4-1:0.188: probe with driver asix failed with error -71 [ 575.931308][ T1599] usb 4-1: USB disconnect, device number 68 [ 575.975842][ T31] audit: type=1400 audit(1789220983.364:1169): avc: denied { write } for pid=15896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.035850][ T31] audit: type=1400 audit(1789220983.424:1170): avc: denied { write } for pid=15907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.073433][ T5699] usb 5-1: USB disconnect, device number 75 [ 576.076555][T12630] usb 2-1: Using ep0 maxpacket: 32 [ 576.078474][T12630] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 576.081186][T12630] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 576.081206][T12630] usb 2-1: config 0 has no interface number 0 [ 576.081242][T12630] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 576.086222][T12630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.086243][T12630] usb 2-1: Product: syz [ 576.086255][T12630] usb 2-1: Manufacturer: syz [ 576.086268][T12630] usb 2-1: SerialNumber: syz [ 576.118162][T12630] usb 2-1: config 0 descriptor?? [ 576.127840][T15886] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 576.319602][ T31] audit: type=1400 audit(1789220983.704:1171): avc: denied { write } for pid=15909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.348888][T12630] asix 2-1:0.188: probe with driver asix failed with error -71 [ 576.375408][T12630] usb 2-1: USB disconnect, device number 77 [ 576.447375][ T31] audit: type=1400 audit(1789220983.834:1172): avc: denied { write } for pid=15920 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.532290][T15923] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 576.651998][T15931] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 576.754676][T15929] md: could not open device unknown-block(1,0). [ 576.914056][ T31] audit: type=1400 audit(1789220984.294:1173): avc: denied { write } for pid=15924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.989236][T15951] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 577.028668][ T31] audit: type=1400 audit(1789220984.414:1174): avc: denied { write } for pid=15952 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.062757][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2905'. [ 577.062931][T15951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 578.247450][T15974] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 578.275288][T15973] FAULT_INJECTION: forcing a failure. [ 578.275288][T15973] name failslab, interval 1, probability 0, space 0, times 0 [ 578.275321][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.3.2911 Not tainted syzkaller #0 PREEMPT(full) [ 578.275345][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 578.275358][T15973] Call Trace: [ 578.275365][T15973] [ 578.275373][T15973] dump_stack_lvl+0x100/0x190 [ 578.275406][T15973] should_fail_ex.cold+0x5/0xa [ 578.275436][T15973] should_failslab+0xc2/0x120 [ 578.275462][T15973] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 578.275484][T15973] ? sock_alloc_inode+0x26/0x2c0 [ 578.275515][T15973] ? __pfx_sock_alloc_inode+0x10/0x10 [ 578.275542][T15973] sock_alloc_inode+0x26/0x2c0 [ 578.275567][T15973] ? __pfx_sock_alloc_inode+0x10/0x10 [ 578.275591][T15973] alloc_inode+0x68/0x250 [ 578.275611][T15973] sock_alloc+0x44/0x280 [ 578.275632][T15973] ? security_socket_create+0x7f/0x250 [ 578.275662][T15973] __sock_create+0xc2/0x860 [ 578.275692][T15973] __sys_socket+0x14d/0x260 [ 578.275722][T15973] ? __pfx___sys_socket+0x10/0x10 [ 578.275760][T15973] __x64_sys_socket+0x72/0xb0 [ 578.275788][T15973] ? lockdep_hardirqs_on+0x7d/0x110 [ 578.275813][T15973] do_syscall_64+0x123/0x790 [ 578.275841][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.275861][T15973] RIP: 0033:0x7f2aeaf9e159 [ 578.275878][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.275898][T15973] RSP: 002b:00007f2aebe2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 578.275919][T15973] RAX: ffffffffffffffda RBX: 00007f2aeb225fa0 RCX: 00007f2aeaf9e159 [ 578.275934][T15973] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 578.275946][T15973] RBP: 00007f2aeb03503b R08: 0000000000000000 R09: 0000000000000000 [ 578.275958][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.275970][T15973] R13: 00007f2aeb226038 R14: 00007f2aeb225fa0 R15: 00007ffc1e682268 [ 578.275997][T15973] [ 578.276026][T15973] socket: no more sockets [ 578.487299][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 578.581311][ T31] audit: type=1326 audit(1789220985.964:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15979 comm="syz.1.2914" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1359e159 code=0x0 [ 578.581419][ T31] audit: type=1400 audit(1789220985.964:1176): avc: denied { write } for pid=15963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.001276][T15995] Failed to initialize the IGMP autojoin socket (err -12) [ 579.623851][ T5699] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 579.774317][ T5699] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 579.775156][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.775195][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.775215][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 579.775230][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.775251][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.443887][ T5856] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 580.593884][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 580.594630][ T5856] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 580.595527][ T5856] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 580.595547][ T5856] usb 4-1: config 0 has no interface number 0 [ 580.595573][ T5856] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.597272][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.597291][ T5856] usb 4-1: Product: syz [ 580.597304][ T5856] usb 4-1: Manufacturer: syz [ 580.597316][ T5856] usb 4-1: SerialNumber: syz [ 580.599199][ T5856] usb 4-1: config 0 descriptor?? [ 580.601096][T16010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 580.807963][ T5856] asix 4-1:0.188: probe with driver asix failed with error -71 [ 580.830486][ T5856] usb 4-1: USB disconnect, device number 69 [ 582.405112][ T1599] usb 2-1: USB disconnect, device number 78 [ 582.494926][ T5856] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 582.597661][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'. [ 582.647439][ T5856] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 582.651401][ T5856] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.651444][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.651467][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.651489][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.651525][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.933683][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 582.933700][ T31] audit: type=1326 audit(1789220990.314:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.1.2925" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1359e159 code=0x0 [ 583.823890][ T5856] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 583.973838][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 583.974389][ T5856] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 583.975411][ T5856] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 583.975434][ T5856] usb 2-1: config 0 has no interface number 0 [ 583.975466][ T5856] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 583.977399][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.977421][ T5856] usb 2-1: Product: syz [ 583.977434][ T5856] usb 2-1: Manufacturer: syz [ 583.977444][ T5856] usb 2-1: SerialNumber: syz [ 583.979372][ T5856] usb 2-1: config 0 descriptor?? [ 583.980062][T16031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 584.184905][ T5856] asix 2-1:0.188: probe with driver asix failed with error -71 [ 584.189137][ T5856] usb 2-1: USB disconnect, device number 79 [ 584.765855][ T31] audit: type=1400 audit(1789220992.154:1179): avc: denied { ioctl } for pid=16033 comm="syz.1.2927" path="/583/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4047 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 585.261419][ T5699] usb 4-1: USB disconnect, device number 70 [ 586.586592][T16054] usb 1-1: USB disconnect, device number 45 [ 586.588665][T16054] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 586.804552][T16054] hub 1-0:1.0: USB hub found [ 586.804990][T16054] hub 1-0:1.0: 1 port detected [ 586.953924][ T5856] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 587.017498][ T31] audit: type=1400 audit(1789220994.404:1180): avc: denied { write } for pid=16055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.116983][ T5856] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 587.118699][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.122372][ T5856] usb 1-1: Dual-Role OTG device on HNP port [ 587.122669][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.122691][ T5856] usb 1-1: SerialNumber: 1234567890 [ 587.122726][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.133642][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.155520][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.168389][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 587.181363][ T5856] cdc_ncm 1-1:1.0: MAC-Address: a6:2b:09:1d:ce:6d [ 587.231050][ T31] audit: type=1400 audit(1789220994.614:1181): avc: denied { write } for pid=16074 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.245784][ T5856] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a6:2b:09:1d:ce:6d [ 587.291963][ T5856] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 587.322908][ T5856] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.963527][ T31] audit: type=1400 audit(1789220995.344:1182): avc: denied { write } for pid=16082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.002455][ T31] audit: type=1400 audit(1789220995.384:1183): avc: denied { read } for pid=16106 comm="syz.1.2940" name="id" dev="configfs" ino=88829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 588.131854][ T31] audit: type=1400 audit(1789220995.514:1184): avc: denied { write } for pid=16108 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.511551][ T31] audit: type=1400 audit(1789220995.894:1185): avc: denied { write } for pid=16116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.591810][ T31] audit: type=1400 audit(1789220995.974:1186): avc: denied { write } for pid=16137 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.636323][T16073] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.715626][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.716199][T16073] bridge_slave_0: entered allmulticast mode [ 588.725491][T16073] bridge_slave_0: entered promiscuous mode [ 588.782776][T16073] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.791462][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.792316][T16073] bridge_slave_1: entered allmulticast mode [ 588.836517][T16073] bridge_slave_1: entered promiscuous mode [ 589.268099][ T5619] Bluetooth: hci1: command tx timeout [ 589.320537][T16073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.373649][T16073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.689032][T16073] team0: Port device team_slave_0 added [ 589.731392][T16073] team0: Port device team_slave_1 added [ 590.153295][T16073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.153315][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.153337][T16073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.208899][T16073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.208933][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.208955][T16073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.287017][T16073] hsr_slave_0: entered promiscuous mode [ 590.287820][T16073] hsr_slave_1: entered promiscuous mode [ 590.288369][T16073] debugfs: 'hsr0' already exists in 'hsr' [ 590.288386][T16073] Cannot create hsr debugfs directory [ 590.334785][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 590.342874][ T31] audit: type=1400 audit(1789220997.724:1187): avc: denied { write } for pid=16143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.381360][T16113] [ 590.383747][T16113] ====================================================== [ 590.390777][T16113] WARNING: possible circular locking dependency detected [ 590.397794][T16113] syzkaller #0 Not tainted [ 590.402185][T16113] ------------------------------------------------------ [ 590.409174][T16113] syz.3.2942/16113 is trying to acquire lock: [ 590.415222][T16113] ffff888059d6f788 (kn->active#84){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 590.424260][T16113] [ 590.424260][T16113] but task is already holding lock: [ 590.431623][T16113] ffffffff904e1fa0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 590.440942][T16113] [ 590.440942][T16113] which lock already depends on the new lock. [ 590.440942][T16113] [ 590.451350][T16113] [ 590.451350][T16113] the existing dependency chain (in reverse order) is: [ 590.460362][T16113] [ 590.460362][T16113] -> #1 (serio_mutex){+.+.}-{4:4}: [ 590.467664][T16113] lock_acquire+0x1d1/0x380 [ 590.472693][T16113] __mutex_lock+0x1a4/0x1bd0 [ 590.477819][T16113] drvctl_store+0x3c/0x350 [ 590.482766][T16113] dev_attr_store+0x58/0x80 [ 590.487783][T16113] sysfs_kf_write+0xf2/0x150 [ 590.492887][T16113] kernfs_fop_write_iter+0x3e0/0x5f0 [ 590.498698][T16113] vfs_write+0x6af/0x1050 [ 590.503529][T16113] ksys_write+0x12a/0x250 [ 590.508360][T16113] do_syscall_64+0x123/0x790 [ 590.513457][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.519855][T16113] [ 590.519855][T16113] -> #0 (kn->active#84){++++}-{0:0}: [ 590.527310][T16113] check_prev_add+0xeb/0xe60 [ 590.532430][T16113] __lock_acquire+0x1528/0x1f40 [ 590.537792][T16113] lock_acquire+0x1d1/0x380 [ 590.542800][T16113] kernfs_drain+0x4f0/0x600 [ 590.547810][T16113] __kernfs_remove+0x34c/0xb80 [ 590.553084][T16113] kernfs_remove_by_name_ns+0x7c/0x120 [ 590.559043][T16113] remove_files+0x96/0x1c0 [ 590.563982][T16113] sysfs_remove_group+0x8b/0x1b0 [ 590.569434][T16113] sysfs_remove_groups+0x60/0xb0 [ 590.574884][T16113] device_remove_attrs+0x192/0x290 [ 590.580600][T16113] device_del+0x36e/0x9b0 [ 590.585463][T16113] serio_destroy_port+0x47f/0x590 [ 590.591006][T16113] serio_unregister_port+0x2b/0x40 [ 590.596623][T16113] userio_char_release+0x91/0xe0 [ 590.602076][T16113] __fput+0x3ff/0xb50 [ 590.606745][T16113] task_work_run+0x150/0x240 [ 590.611844][T16113] exit_to_user_mode_loop+0x1d8/0x700 [ 590.617730][T16113] do_syscall_64+0x661/0x790 [ 590.622833][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.629226][T16113] [ 590.629226][T16113] other info that might help us debug this: [ 590.629226][T16113] [ 590.639536][T16113] Possible unsafe locking scenario: [ 590.639536][T16113] [ 590.646962][T16113] CPU0 CPU1 [ 590.652305][T16113] ---- ---- [ 590.657763][T16113] lock(serio_mutex); [ 590.661814][T16113] lock(kn->active#84); [ 590.668560][T16113] lock(serio_mutex); [ 590.675128][T16113] lock(kn->active#84); [ 590.679357][T16113] [ 590.679357][T16113] *** DEADLOCK *** [ 590.679357][T16113] [ 590.687480][T16113] locks held by syz.3.2942/16113: 1, last CPU#1: [ 590.693784][T16113] #0: ffffffff904e1fa0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 590.703433][T16113] [ 590.703433][T16113] stack backtrace: [ 590.709313][T16113] CPU: 1 UID: 0 PID: 16113 Comm: syz.3.2942 Not tainted syzkaller #0 PREEMPT(full) [ 590.718663][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 590.728704][T16113] Call Trace: [ 590.731966][T16113] [ 590.734880][T16113] dump_stack_lvl+0x100/0x190 [ 590.739641][T16113] print_circular_bug.cold+0x178/0x1be [ 590.745088][T16113] check_noncircular+0x146/0x160 [ 590.750012][T16113] check_prev_add+0xeb/0xe60 [ 590.754586][T16113] __lock_acquire+0x1528/0x1f40 [ 590.759421][T16113] lock_acquire+0x1d1/0x380 [ 590.763920][T16113] ? __kernfs_remove+0x34c/0xb80 [ 590.768847][T16113] ? kernfs_drain+0x4c7/0x600 [ 590.773512][T16113] kernfs_drain+0x4f0/0x600 [ 590.777999][T16113] ? __kernfs_remove+0x34c/0xb80 [ 590.782928][T16113] ? __pfx_kernfs_drain+0x10/0x10 [ 590.787936][T16113] ? find_held_lock+0x2b/0x80 [ 590.792603][T16113] ? __kernfs_remove+0x224/0xb80 [ 590.797540][T16113] ? __kernfs_remove+0x224/0xb80 [ 590.802467][T16113] ? up_write+0x2dc/0x5b0 [ 590.806786][T16113] __kernfs_remove+0x34c/0xb80 [ 590.811541][T16113] kernfs_remove_by_name_ns+0x7c/0x120 [ 590.816981][T16113] remove_files+0x96/0x1c0 [ 590.821385][T16113] sysfs_remove_group+0x8b/0x1b0 [ 590.826401][T16113] sysfs_remove_groups+0x60/0xb0 [ 590.831335][T16113] device_remove_attrs+0x192/0x290 [ 590.836426][T16113] ? __pfx_device_remove_attrs+0x10/0x10 [ 590.842042][T16113] device_del+0x36e/0x9b0 [ 590.846354][T16113] ? __pfx_device_del+0x10/0x10 [ 590.851195][T16113] ? mark_held_locks+0x40/0x70 [ 590.855942][T16113] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 590.861746][T16113] serio_destroy_port+0x47f/0x590 [ 590.866864][T16113] serio_unregister_port+0x2b/0x40 [ 590.871962][T16113] userio_char_release+0x91/0xe0 [ 590.876883][T16113] ? __pfx_userio_char_release+0x10/0x10 [ 590.882497][T16113] __fput+0x3ff/0xb50 [ 590.886469][T16113] task_work_run+0x150/0x240 [ 590.891059][T16113] ? __pfx_task_work_run+0x10/0x10 [ 590.896172][T16113] exit_to_user_mode_loop+0x1d8/0x700 [ 590.901531][T16113] ? rcu_is_watching+0x13/0xc0 [ 590.906280][T16113] do_syscall_64+0x661/0x790 [ 590.910865][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.916739][T16113] RIP: 0033:0x7f2aeaf9e159 [ 590.921154][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.940745][T16113] RSP: 002b:00007ffc1e6823c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 590.949149][T16113] RAX: 0000000000000000 RBX: 00007f2aeb227da0 RCX: 00007f2aeaf9e159 [ 590.957193][T16113] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 590.965232][T16113] RBP: 00007f2aeb227da0 R08: 0000000000000006 R09: 0000000000000000 [ 590.973197][T16113] R10: 00007f2aeb227cb0 R11: 0000000000000246 R12: 000000000008fcb4 [ 590.981151][T16113] R13: 00007f2aeb22609c R14: 000000000008fa02 R15: 00007f2aeb226090 [ 590.989110][T16113] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 591.080417][ T31] audit: type=1326 audit(1789220998.454:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.1.2946" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1359e159 code=0x0 [ 591.169841][ T31] audit: type=1400 audit(1789220998.554:1189): avc: denied { write } for pid=16159 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.343849][ T5619] Bluetooth: hci1: command tx timeout [ 591.376188][ T31] audit: type=1400 audit(1789220998.764:1190): avc: denied { write } for pid=16161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.445646][ T31] audit: type=1400 audit(1789220998.834:1191): avc: denied { write } for pid=16172 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.502984][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 591.505171][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 591.520030][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 591.521900][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 591.522159][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 591.604343][ T5603] syz_tun (unregistering): left allmulticast mode [ 591.653308][T16157] syz_tun (unregistering): left allmulticast mode [ 591.973317][ T1462] bridge_slave_1: left allmulticast mode [ 591.973342][ T1462] bridge_slave_1: left promiscuous mode [ 591.973459][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.981988][ T1462] bridge_slave_0: left allmulticast mode [ 591.982009][ T1462] bridge_slave_0: left promiscuous mode [ 591.982140][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.057177][ T1462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.058218][ T1462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.058897][ T1462] bond0 (unregistering): Released all slaves [ 592.161595][ T1462] hsr_slave_0: left promiscuous mode [ 592.161818][ T1462] hsr_slave_1: left promiscuous mode [ 592.162071][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.162275][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.229501][ T1462] team0 (unregistering): Port device team_slave_1 removed [ 592.243098][ T1462] team0 (unregistering): Port device team_slave_0 removed [ 592.298199][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.298285][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.298359][T16174] bridge_slave_0: entered allmulticast mode [ 592.299017][T16174] bridge_slave_0: entered promiscuous mode [ 592.302131][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.302173][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.302236][T16174] bridge_slave_1: entered allmulticast mode [ 592.302768][T16174] bridge_slave_1: entered promiscuous mode [ 592.346761][T16174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.350117][T16174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.376009][T16174] team0: Port device team_slave_0 added [ 592.380745][T16174] team0: Port device team_slave_1 added [ 592.400704][T16174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.400721][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.400748][T16174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.401251][T16174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.401262][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.401292][T16174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.441040][T16174] hsr_slave_0: entered promiscuous mode [ 592.443150][T16174] hsr_slave_1: entered promiscuous mode [ 592.443498][T16174] debugfs: 'hsr0' already exists in 'hsr' [ 592.443512][T16174] Cannot create hsr debugfs directory [ 592.582807][T16174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 592.591508][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.599219][T16174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 592.602632][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.603149][T16174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.625902][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.626458][T16174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.628420][T16174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.662843][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.662899][T16174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.663017][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.663082][T16174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.718339][T16174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.730776][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.731285][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.750436][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.751209][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 592.756964][ T273] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.757013][ T273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.762168][ T273] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.762213][ T273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.967939][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 592.967956][ T31] audit: type=1400 audit(1789221000.354:1198): avc: denied { write } for pid=16240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.011367][ T31] audit: type=1400 audit(1789221000.394:1199): avc: denied { write } for pid=16258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.049269][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 593.081258][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.223539][T16174] veth0_vlan: entered promiscuous mode [ 593.238686][T16174] veth1_vlan: entered promiscuous mode [ 593.250680][ T31] audit: type=1400 audit(1789221000.634:1200): avc: denied { write } for pid=16264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.284401][T16174] veth0_macvtap: entered promiscuous mode [ 593.286848][T16174] veth1_macvtap: entered promiscuous mode [ 593.299564][ T31] audit: type=1400 audit(1789221000.684:1201): avc: denied { write } for pid=16280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.328960][T16174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.339065][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 593.340964][T16174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.367932][ T1427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.379743][T16174] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 593.401409][ T1427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.401429][ T1427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.404552][T16174] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 593.424732][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.424750][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.444869][ T1462] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.444910][ T273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.444938][ T273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.563572][ T31] audit: type=1400 audit(1789221000.944:1202): avc: denied { write } for pid=16283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.605655][ T31] audit: type=1400 audit(1789221000.994:1203): avc: denied { write } for pid=16294 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.638367][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 593.748012][ T31] audit: type=1400 audit(1789221001.134:1204): avc: denied { write } for pid=16296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.792090][ T31] audit: type=1400 audit(1789221001.174:1205): avc: denied { write } for pid=16307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.958334][ T31] audit: type=1400 audit(1789221001.344:1206): avc: denied { write } for pid=16311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.009003][ T31] audit: type=1400 audit(1789221001.394:1207): avc: denied { write } for pid=16322 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.470526][ T1462] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.276418][ T1462] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.317421][ T1462] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.356912][ T1462] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.416205][ T1462] bridge_slave_1: left allmulticast mode [ 597.416230][ T1462] bridge_slave_1: left promiscuous mode [ 597.416337][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.417355][ T1462] bridge_slave_0: left allmulticast mode [ 597.417372][ T1462] bridge_slave_0: left promiscuous mode [ 597.417465][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.486410][ T1462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.487471][ T1462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.487993][ T1462] bond0 (unregistering): Released all slaves [ 597.666695][ T1462] hsr_slave_0: left promiscuous mode [ 597.668536][ T1462] hsr_slave_1: left promiscuous mode [ 597.668793][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.668804][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.669060][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.669072][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.672236][ T1462] veth1_macvtap: left promiscuous mode [ 597.672253][ T1462] veth0_macvtap: left promiscuous mode [ 597.672294][ T1462] veth1_vlan: left promiscuous mode [ 597.672317][ T1462] veth0_vlan: left promiscuous mode [ 597.781205][ T1462] team0 (unregistering): Port device team_slave_1 removed [ 597.783683][ T1462] team0 (unregistering): Port device team_slave_0 removed [ 597.832718][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 597.992964][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 597.992981][ T31] audit: type=1400 audit(1789221005.374:1216): avc: denied { write } for pid=16397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.036949][ T31] audit: type=1400 audit(1789221005.424:1217): avc: denied { write } for pid=16408 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.068657][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 598.192773][ T31] audit: type=1400 audit(1789221005.574:1218): avc: denied { write } for pid=16411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.229881][ T31] audit: type=1400 audit(1789221005.614:1219): avc: denied { write } for pid=16422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.276723][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 598.398544][ T31] audit: type=1400 audit(1789221005.784:1220): avc: denied { write } for pid=16425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.440542][ T31] audit: type=1400 audit(1789221005.824:1221): avc: denied { write } for pid=16436 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.477670][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8