last executing test programs: 3m9.120988239s ago: executing program 4 (id=722): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='0', 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) write$sndseq(r4, &(0x7f00000002c0)=[{0x4, 0x40, 0x8, 0x8, @time={0x619, 0x745}, {0x9, 0xb}, {0x5, 0x9}, @time=@tick=0x62e2}, {0x5, 0x4, 0x6, 0x1, @tick=0x7, {0x5, 0xfe}, {0xe, 0x7}, @note={0x0, 0xf0, 0x62, 0x36, 0x7}}, {0xf9, 0xc, 0x4, 0x2, @tick=0x7fff, {0x81, 0xfd}, {0xa, 0x4}, @raw8={"68285c58e3a5086adefc8afb"}}, {0x3, 0x4f, 0xff, 0xfb, @time={0x400, 0xa71}, {0x0, 0x40}, {0x9, 0x80}, @quote={{0x1, 0x44}, 0x6, &(0x7f0000000280)={0x8, 0xff, 0x6, 0xb1, @tick=0x3, {0x4, 0x36}, {0xa0}, @raw32={[0x401, 0x910, 0x4]}}}}], 0x70) 3m5.759226327s ago: executing program 4 (id=731): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x5) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000600)) sendmsg$nl_generic(r0, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x24020400) futimesat(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, 0x0) 3m2.627071203s ago: executing program 4 (id=735): memfd_create(&(0x7f0000000200)='}-]\x00', 0x6) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x190) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x298, 0x200, 0x168, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0xfffd, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 3m1.353563305s ago: executing program 4 (id=737): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x137) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 2m58.115335068s ago: executing program 4 (id=749): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m55.989432817s ago: executing program 4 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x40000000000008, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x25a7, 0x4) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 2m40.260026493s ago: executing program 32 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x40000000000008, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x25a7, 0x4) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 18.816998092s ago: executing program 1 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002ab9700000000000020000000000e0ff070001"], 0x82}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/164, 0xa4}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x7}, 0x2000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) socket$igmp(0x2, 0x3, 0x2) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x11a00) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000300)={0x0, 0x10, 0x4, 0x1}) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) 18.552200702s ago: executing program 1 (id=985): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 18.271334174s ago: executing program 2 (id=987): open$dir(&(0x7f0000000180)='./file0/file1\x00', 0x420401, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, 0xa0) fsmount(0xffffffffffffffff, 0x0, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x8, &(0x7f00000000c0)={0x9, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 17.642124935s ago: executing program 1 (id=989): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x8040) syz_open_dev$video(0x0, 0x81, 0xa082) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x35, 0x15, "719253c233c813bb57cc2450c9c8b97d24ecc020f5"}, 0x35, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 14.782881284s ago: executing program 3 (id=992): fsopen(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) 11.282410694s ago: executing program 1 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2004c884) r5 = syz_pidfd_open(r4, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_mmap={0x99f2, 0x2, 0x4, 0x40, 0x8, {}, {0x4, 0x1, 0x9d, 0xa, 0x7, 0x3, "4f518405"}, 0x8, 0x1, {0x0}, 0x3}) sched_setaffinity(r2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) 10.379041166s ago: executing program 1 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x179) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x2, 0x800, {}, {0xee01}, 0xb11d, 0x4e7}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x40080) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r3, r3, 0x2f}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, r4, 0x2f, 0x30, 0x4}, 0x20) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0), 0x0) 10.286063168s ago: executing program 5 (id=998): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8br0}, './file0\x00'}) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x10) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000800)={{r2}, "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"}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff], [0xfffffffb, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000180)="b4eb3b47", 0x4}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x0, 0xfee00000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x108) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 9.619461392s ago: executing program 0 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000480)}) fadvise64(0xffffffffffffffff, 0xdffffffffffffff, 0x1, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) 9.594445242s ago: executing program 3 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) 8.268700804s ago: executing program 0 (id=1001): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24004844) socket(0x840000000002, 0x3, 0xff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0xc0205647, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000540)=0x1) close_range(r3, r4, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48011) socket$inet6_sctp(0xa, 0x1, 0x84) 8.103444225s ago: executing program 2 (id=1002): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet(0x2, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f00000005c0)=""/231, 0xe7) setns(0xc9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 7.512788122s ago: executing program 5 (id=1003): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setopts(0x4200, r3, 0x0, 0x1) ptrace$cont(0x18, r3, 0x0, 0x0) setpgid(r3, r3) ptrace$setregs(0x4212, r3, 0x58, &(0x7f0000000080)="01") 4.591506066s ago: executing program 0 (id=1004): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r2, r4, 0x0, 0x7ffff004) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) set_mempolicy(0x4005, 0x0, 0x9) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) 4.590127345s ago: executing program 1 (id=1005): setresuid(0x0, 0xee01, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000280)={r6, &(0x7f0000000100)='\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0x1, 0x5e9]}, {0x0, 0xe, 0x5, 0x3}}, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRES8, @ANYRES8=r2, @ANYRESDEC=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) fcntl$setsig(r1, 0xa, 0x11) recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0) 4.541934077s ago: executing program 5 (id=1006): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000380)="96bc2480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x4890) bind$tipc(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f00000002c0)={0xb, 0x4}) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) 4.416098119s ago: executing program 3 (id=1007): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='sele', 0x4) write(r1, &(0x7f0000000100), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0}) socket$kcm(0x21, 0x2, 0x2) epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 4.033402198s ago: executing program 2 (id=1008): socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0xe, &(0x7f00000003c0)='\x00'/14, &(0x7f0000000400)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/217) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="d3002bcf22c2dbb893e8ba51e0910000e5000000"], 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) 3.735417864s ago: executing program 3 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/10, 0x5b) 3.543537925s ago: executing program 5 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x2010, 0xffffffffffffffff, 0xdaac7000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) eventfd2(0x0, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xb6d6, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000001000)={'#! ', './file1', [{0x20, '/dev/v4l-subdev#\x00'}, {0x20, '])'}, {0x20, '#! '}], 0xa, "b2af03be0748e8c40d56f1919dba5b56f146f7cedc006ed3a30564d0f51096c85d94329d264bdd9ddbf54989d067fdc9993311713cd9fdea36bc305a388897d5aab6cc8041db8f167b09818d3d79bbd465fea5f4a3fc6a49704627656f6ef961de8f82f0d96d67c2f1dc535ba2967b35bcd2baa9f07d3edb6a427a1be439acd135ac08a4f29cb94538e8820c7328d0d716309fd0a09513cb85f8b4f79d362bd6a38c144d3e9e89eb3e819a959b4217200c8f87ad517e7ee9e5e3"}, 0xde) close(r5) sched_getscheduler(0x0) 3.358641186s ago: executing program 3 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"a7fe"}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x196) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000700)={@desc={0x1, 0x0, @auto="098bbee6a37ff6fc"}, 0x40, 0x0, '\x00', @a}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.229259657s ago: executing program 0 (id=1012): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.31284322s ago: executing program 2 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.145817406s ago: executing program 3 (id=1014): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) dup(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x403, 0x20000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1ff, 0x3ff, 0x7f, 0x20004, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000240)={@remote, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @loopback, @random="4d3f91828c8a", @private2}}}}, &(0x7f00000002c0)={0x1, 0x2, [0xf00, 0x7a0, 0x1e4, 0xf36]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x40) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.025418501s ago: executing program 0 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200105}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mq_unlink(0x0) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r1, 0x1201}], 0x2, 0x0, &(0x7f00000000c0), 0x8) 1.464094925s ago: executing program 2 (id=1016): socket(0x2, 0x3, 0xff) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$phonet(0x23, 0x2, 0x1) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, 0x3}, 0x80) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @call={0x85, 0x0, 0x0, 0xc8}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) connect$vsock_stream(r2, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.401859089s ago: executing program 5 (id=1017): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x9, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x400, {}, {0x0, 0x2, 0x0, 0x4, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r6}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) 1.024865754s ago: executing program 0 (id=1018): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/87, 0x57}], 0x2, &(0x7f0000000300)=""/243, 0xf3}, 0x40002022) landlock_restrict_self(r7, 0xe) 61.230623ms ago: executing program 2 (id=1019): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='sele', 0x4) write(r1, &(0x7f0000000100), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0}) socket$kcm(0x21, 0x2, 0x2) epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 0s ago: executing program 5 (id=1020): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380), 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64], 0xb2) kernel console output (not intermixed with test programs): 5.592197][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 377.781468][ T7821] ALSA: mixer_oss: invalid OSS volume '' [ 377.850446][ T7828] hpfs: hpfs_map_sector(): read error [ 379.120263][ T7829] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 379.120294][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.3.550 Not tainted syzkaller #0 PREEMPT(full) [ 379.120309][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 379.120319][ T7829] Call Trace: [ 379.120325][ T7829] [ 379.120329][ T7829] dump_stack_lvl+0x100/0x190 [ 379.120352][ T7829] sysfs_warn_dup.cold+0x1c/0x28 [ 379.120370][ T7829] sysfs_create_dir_ns+0x24b/0x2b0 [ 379.120385][ T7829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 379.120399][ T7829] ? find_held_lock+0x2b/0x80 [ 379.120416][ T7829] ? kobject_add_internal+0x25f/0x930 [ 379.120433][ T7829] ? kobject_add_internal+0x25f/0x930 [ 379.120451][ T7829] ? class_dir_child_ns_type+0xd/0x60 [ 379.120467][ T7829] kobject_add_internal+0x2c8/0x930 [ 379.120487][ T7829] kobject_add+0x16a/0x1e0 [ 379.120503][ T7829] ? __pfx_kobject_add+0x10/0x10 [ 379.120520][ T7829] ? get_device_parent+0x1b3/0x4c0 [ 379.120533][ T7829] ? kobject_put+0xb9/0x640 [ 379.120552][ T7829] device_add+0x294/0x1970 [ 379.120566][ T7829] ? lockdep_init_map_type+0x5c/0x250 [ 379.120578][ T7829] ? __pfx_device_add+0x10/0x10 [ 379.120591][ T7829] ? lockdep_init_map_type+0x5c/0x250 [ 379.120603][ T7829] ? __init_waitqueue_head+0xca/0x150 [ 379.120620][ T7829] tty_register_device_attr+0x388/0x7f0 [ 379.120633][ T7829] ? lockdep_init_map_type+0x5c/0x250 [ 379.120646][ T7829] ? __pfx_tty_register_device_attr+0x10/0x10 [ 379.120662][ T7829] ? tty_port_init+0x156/0x1c0 [ 379.120676][ T7829] gsm_activate_mux+0x155/0x2a0 [ 379.120689][ T7829] gsmld_ioctl+0xbbc/0x15c0 [ 379.120706][ T7829] ? __pfx_gsmld_ioctl+0x10/0x10 [ 379.120731][ T7829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.120745][ T7829] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 379.120763][ T7829] ? __pfx_gsmld_ioctl+0x10/0x10 [ 379.120775][ T7829] tty_ioctl+0x11b4/0x1640 [ 379.120788][ T7829] ? __pfx_tty_ioctl+0x10/0x10 [ 379.120798][ T7829] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 379.120812][ T7829] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 379.120826][ T7829] ? __fget_files+0x34/0x3d0 [ 379.120846][ T7829] ? selinux_file_ioctl+0x13b/0x290 [ 379.120856][ T7829] ? selinux_file_ioctl+0xb6/0x290 [ 379.120869][ T7829] ? __pfx_tty_ioctl+0x10/0x10 [ 379.120881][ T7829] __x64_sys_ioctl+0x18e/0x210 [ 379.120893][ T7829] do_syscall_64+0x123/0x790 [ 379.120908][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.120920][ T7829] RIP: 0033:0x7f4b71d9e159 [ 379.120931][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.120942][ T7829] RSP: 002b:00007f4b72d00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.120958][ T7829] RAX: ffffffffffffffda RBX: 00007f4b72026090 RCX: 00007f4b71d9e159 [ 379.120966][ T7829] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 379.120973][ T7829] RBP: 00007f4b71e35024 R08: 0000000000000000 R09: 0000000000000000 [ 379.120979][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.120986][ T7829] R13: 00007f4b72026128 R14: 00007f4b72026090 R15: 00007fff6989f5e8 [ 379.121001][ T7829] [ 379.121027][ T7829] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 379.739592][ T30] audit: type=1400 audit(1788842088.299:549): avc: denied { setattr } for pid=7827 comm="syz.3.550" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 382.216670][ T30] audit: type=1400 audit(1788842090.659:550): avc: denied { mount } for pid=7844 comm="syz.4.556" name="/" dev="ramfs" ino=17382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 383.102022][ T30] audit: type=1400 audit(1788842091.669:551): avc: denied { setopt } for pid=7856 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 383.128532][ T30] audit: type=1400 audit(1788842091.689:552): avc: denied { write } for pid=7856 comm="syz.3.560" name="functions" dev="configfs" ino=8937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.141963][ T30] audit: type=1400 audit(1788842093.709:553): avc: denied { write } for pid=7856 comm="syz.3.560" name="c.1" dev="configfs" ino=13947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.142600][ T30] audit: type=1400 audit(1788842094.709:554): avc: denied { write } for pid=7856 comm="syz.3.560" name="c.1" dev="configfs" ino=13947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.361931][ T30] audit: type=1400 audit(1788842094.919:555): avc: denied { watch watch_reads } for pid=7863 comm="syz.0.562" path="/" dev="ramfs" ino=17457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 386.536173][ T7872] jffs2: notice: (7872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 386.636569][ T30] audit: type=1400 audit(1788842095.199:556): avc: denied { write } for pid=7866 comm="syz.1.563" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.660335][ T1930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 386.702852][ T30] audit: type=1400 audit(1788842095.259:557): avc: denied { add_name } for pid=7866 comm="syz.1.563" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.702894][ T30] audit: type=1400 audit(1788842095.259:558): avc: denied { create } for pid=7866 comm="syz.1.563" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 386.786080][ T30] audit: type=1400 audit(1788842095.349:559): avc: denied { write } for pid=7866 comm="syz.1.563" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.832791][ T1930] usb 4-1: Using ep0 maxpacket: 8 [ 386.840054][ T1930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 386.850373][ T1930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.875919][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.554'. [ 386.895303][ T1930] pvrusb2: Hardware description: Terratec Grabster AV400 [ 386.895326][ T1930] pvrusb2: ********** [ 386.895337][ T1930] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 386.895346][ T1930] pvrusb2: Important functionality might not be entirely working. [ 386.895353][ T1930] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 386.895360][ T1930] pvrusb2: ********** [ 387.129813][ T2345] pvrusb2: Invalid write control endpoint [ 387.299319][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 387.305551][ T30] audit: type=1400 audit(1788842095.759:563): avc: denied { create } for pid=7880 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.305583][ T30] audit: type=1400 audit(1788842095.759:564): avc: denied { setopt } for pid=7880 comm="syz.2.565" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 388.597053][ T30] audit: type=1800 audit(1788842097.159:565): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.562" name="bus" dev="ramfs" ino=17458 res=0 errno=0 [ 388.899720][ T30] audit: type=1400 audit(1788842097.459:566): avc: denied { name_bind } for pid=7889 comm="syz.2.567" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 388.926863][ T1930] usb 4-1: USB disconnect, device number 7 [ 388.997965][ T2345] pvrusb2: Invalid write control endpoint [ 389.019980][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 389.020004][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 389.020010][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 389.020017][ T2345] pvrusb2: Device being rendered inoperable [ 389.020808][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 389.403328][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 390.096538][ T2345] pvrusb2: Attached sub-driver cx25840 [ 390.096562][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 390.096575][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 390.195265][ T7894] kAFS: Can only specify source 'none' with -o dyn [ 392.391089][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 60 seconds [ 392.532495][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 393.592376][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 393.602427][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.602452][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.602480][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.634026][ T10] usb 1-1: config 0 descriptor?? [ 393.956583][ T30] audit: type=1400 audit(1788842102.519:567): avc: denied { listen } for pid=7910 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.978491][ T30] audit: type=1400 audit(1788842102.549:568): avc: denied { accept } for pid=7910 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.038957][ T4919] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 394.038984][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 394.039000][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 394.039018][ T4919] Workqueue: hci1 hci_rx_work [ 394.039035][ T4919] Call Trace: [ 394.039040][ T4919] [ 394.039046][ T4919] dump_stack_lvl+0x100/0x190 [ 394.039066][ T4919] sysfs_warn_dup.cold+0x1c/0x28 [ 394.039085][ T4919] sysfs_create_dir_ns+0x24b/0x2b0 [ 394.039101][ T4919] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 394.039116][ T4919] ? find_held_lock+0x2b/0x80 [ 394.039131][ T4919] ? kobject_add_internal+0x25f/0x930 [ 394.039149][ T4919] ? kobject_add_internal+0x25f/0x930 [ 394.039167][ T4919] ? do_raw_spin_unlock+0x145/0x1e0 [ 394.039182][ T4919] kobject_add_internal+0x2c8/0x930 [ 394.039201][ T4919] kobject_add+0x16a/0x1e0 [ 394.039217][ T4919] ? __pfx_kobject_add+0x10/0x10 [ 394.039232][ T4919] ? class_to_subsys+0x10f/0x150 [ 394.039249][ T4919] ? kobject_put+0xb9/0x640 [ 394.039263][ T4919] ? _raw_spin_unlock+0x28/0x50 [ 394.039279][ T4919] device_add+0x294/0x1970 [ 394.039293][ T4919] ? __pfx_dev_set_name+0x10/0x10 [ 394.039308][ T4919] ? __pfx_device_add+0x10/0x10 [ 394.039322][ T4919] ? mgmt_send_event_skb+0x2fb/0x460 [ 394.039339][ T4919] hci_conn_add_sysfs+0x1a3/0x260 [ 394.039354][ T4919] le_conn_complete_evt+0x122f/0x2130 [ 394.039371][ T4919] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 394.039390][ T4919] ? hci_event_packet+0x186/0xcd0 [ 394.039407][ T4919] hci_le_conn_complete_evt+0x23c/0x3a0 [ 394.039421][ T4919] ? skb_pull_data+0x15f/0x1e0 [ 394.039440][ T4919] hci_le_meta_evt+0x34a/0x5f0 [ 394.039453][ T4919] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 394.039468][ T4919] hci_event_packet+0x51c/0xcd0 [ 394.039480][ T4919] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 394.039493][ T4919] ? __pfx_hci_event_packet+0x10/0x10 [ 394.039509][ T4919] ? lockdep_hardirqs_on+0x7d/0x110 [ 394.039526][ T4919] hci_rx_work+0x451/0xfc0 [ 394.039540][ T4919] process_one_work+0xac7/0x1b10 [ 394.039565][ T4919] ? __pfx_process_one_work+0x10/0x10 [ 394.039582][ T4919] ? lock_acquire+0x1d1/0x380 [ 394.039598][ T4919] ? __pfx_hci_rx_work+0x10/0x10 [ 394.039611][ T4919] worker_thread+0x5ef/0xe50 [ 394.039631][ T4919] ? __pfx_worker_thread+0x10/0x10 [ 394.039648][ T4919] ? kthread+0x13a/0x450 [ 394.039662][ T4919] ? __pfx_worker_thread+0x10/0x10 [ 394.039677][ T4919] kthread+0x373/0x450 [ 394.039691][ T4919] ? __pfx_kthread+0x10/0x10 [ 394.039707][ T4919] ret_from_fork+0x730/0xd60 [ 394.039721][ T4919] ? __pfx_ret_from_fork+0x10/0x10 [ 394.039734][ T4919] ? __switch_to+0x800/0x10f0 [ 394.039749][ T4919] ? __pfx_kthread+0x10/0x10 [ 394.039765][ T4919] ret_from_fork_asm+0x1a/0x30 [ 394.039786][ T4919] [ 394.039840][ T4919] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 394.039865][ T4919] Bluetooth: hci1: failed to register connection device [ 394.387003][ T30] audit: type=1400 audit(1788842102.949:569): avc: denied { create } for pid=7924 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.258392][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267033][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267067][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267084][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267101][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267118][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267135][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267152][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267168][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.267184][ T10] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 395.372104][ T10] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 395.537655][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 395.695667][ T10] usb 1-1: USB disconnect, device number 14 [ 395.792719][ T7932] fido_id[7932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 396.787528][ T30] audit: type=1400 audit(1788842105.349:570): avc: denied { create } for pid=7936 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 397.571446][ T5334] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 397.736486][ T5334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 397.736526][ T5334] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 397.756788][ T5334] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 397.756812][ T5334] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 397.756832][ T5334] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 397.756846][ T5334] usb 1-1: config 129 has no interface number 0 [ 397.756857][ T5334] usb 1-1: config 129 has no interface number 1 [ 397.756883][ T5334] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 397.756900][ T5334] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 397.756919][ T5334] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 397.756935][ T5334] usb 1-1: config 129 interface 135 has no altsetting 0 [ 397.756947][ T5334] usb 1-1: config 129 interface 5 has no altsetting 0 [ 397.871660][ T5334] usb 1-1: string descriptor 0 read error: -22 [ 397.871753][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.936461][ T30] audit: type=1400 audit(1788842106.499:571): avc: denied { connect } for pid=7949 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 397.969476][ T5334] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.993821][ T5334] usb 1-1: MIDIStreaming interface descriptor not found [ 398.011277][ T30] audit: type=1400 audit(1788842106.569:572): avc: denied { write } for pid=7949 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 398.276579][ C0] Unknown status report in ack skb [ 398.337810][ T5334] usb 1-1: USB disconnect, device number 15 [ 401.638053][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 401.638093][ T7970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.588'. [ 401.641422][ T7970] geneve2: entered promiscuous mode [ 401.641439][ T7970] geneve2: entered allmulticast mode [ 401.689559][ T4919] Bluetooth: hci1: command 0x0406 tx timeout [ 403.173786][ T7976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 404.257977][ T30] audit: type=1400 audit(1788842112.509:573): avc: denied { setopt } for pid=7989 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.327493][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.327520][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.344099][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.344123][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.895447][ T30] audit: type=1400 audit(1788842114.459:574): avc: denied { ioctl } for pid=7995 comm="syz.3.595" path="/dev/sg0" dev="devtmpfs" ino=869 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.087187][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 406.118838][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.118865][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.954125][ T30] audit: type=1400 audit(1788842115.489:575): avc: denied { connect } for pid=8010 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 407.741297][ T8014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.852315][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.859841][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.466864][ T30] audit: type=1400 audit(1788842117.029:576): avc: denied { connect } for pid=8026 comm="syz.1.603" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.341821][ T8041] Invalid ELF header magic: != ELF [ 410.733931][ T30] audit: type=1400 audit(1788842118.909:577): avc: denied { module_load } for pid=8033 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 411.700157][ T8036] kvm [8034]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 412.480193][ T8048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.681597][ T5714] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 413.867196][ T5714] usb 2-1: device descriptor read/all, error -71 [ 418.805508][ T30] audit: type=1400 audit(1788842127.369:578): avc: denied { write } for pid=8072 comm="syz.2.616" path="socket:[18785]" dev="sockfs" ino=18785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.841811][ T8089] virtio-fs: tag not found [ 420.706528][ T8118] Invalid source name [ 422.462438][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 90 seconds [ 424.601564][ T8151] netlink: 'syz.0.630': attribute type 1 has an invalid length. [ 424.601595][ T8151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.630'. [ 425.746718][ T30] audit: type=1800 audit(1788842134.309:579): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.626" name="bus" dev="ramfs" ino=18869 res=0 errno=0 [ 426.269856][ T8167] netlink: 'syz.3.635': attribute type 12 has an invalid length. [ 426.307612][ T30] audit: type=1400 audit(1788842134.869:580): avc: denied { bind } for pid=8166 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 428.576487][ T30] audit: type=1400 audit(1788842137.139:581): avc: denied { write } for pid=8188 comm="syz.3.640" name="sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 428.656109][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.657714][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.658032][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.658376][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.660269][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.660632][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.660923][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.661224][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.661579][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.661892][ T8181] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 430.247223][ T30] audit: type=1400 audit(1788842138.809:582): avc: denied { write } for pid=8196 comm="syz.1.641" name="ports" dev="configfs" ino=3270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 430.771117][ T8207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.942926][ T30] audit: type=1400 audit(1788842141.509:583): avc: denied { getopt } for pid=8204 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 434.083390][ T8223] ima: policy update failed [ 434.132565][ T30] audit: type=1807 audit(1788842142.649:584): UNKNOWN=m res=0 [ 434.132597][ T30] audit: type=1802 audit(1788842142.649:585): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.650" res=0 errno=0 [ 434.132625][ T30] audit: type=1802 audit(1788842142.649:586): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.650" res=0 errno=0 [ 434.987081][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.987128][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.384768][ T8229] kvm_intel: kvm [8227]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x40100000001 [ 435.732611][ T8241] FAULT_INJECTION: forcing a failure. [ 435.732611][ T8241] name failslab, interval 1, probability 1, space 0, times 0 [ 435.732651][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.0.655 Not tainted syzkaller #0 PREEMPT(full) [ 435.732666][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 435.732674][ T8241] Call Trace: [ 435.732678][ T8241] [ 435.732683][ T8241] dump_stack_lvl+0x100/0x190 [ 435.732706][ T8241] should_fail_ex.cold+0x5/0xa [ 435.732724][ T8241] should_failslab+0xc2/0x120 [ 435.732740][ T8241] kmem_cache_alloc_noprof+0x92/0x6a0 [ 435.732753][ T8241] ? mas_preallocate+0xc22/0xee0 [ 435.732771][ T8241] mas_preallocate+0xc22/0xee0 [ 435.732787][ T8241] ? __pfx_mas_preallocate+0x10/0x10 [ 435.732807][ T8241] ? anon_vma_name+0x5a/0x250 [ 435.732825][ T8241] __split_vma+0x2f8/0x1de0 [ 435.732844][ T8241] ? __pfx___split_vma+0x10/0x10 [ 435.732868][ T8241] vma_modify+0x1ef4/0x29b0 [ 435.732890][ T8241] ? __pfx_vma_modify+0x10/0x10 [ 435.732907][ T8241] ? __lock_acquire+0x5c0/0x1f40 [ 435.732927][ T8241] vma_modify_flags_uffd+0x312/0x470 [ 435.732946][ T8241] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 435.732969][ T8241] ? __pfx_vma_can_userfault+0x10/0x10 [ 435.732988][ T8241] ? __pfx___might_resched+0x10/0x10 [ 435.733002][ T8241] userfaultfd_register_range+0x4be/0x770 [ 435.733023][ T8241] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 435.733044][ T8241] ? vma_can_userfault+0x124/0x3f0 [ 435.733062][ T8241] ? __pfx_vma_can_userfault+0x10/0x10 [ 435.733080][ T8241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.733097][ T8241] userfaultfd_register+0x900/0xe40 [ 435.733119][ T8241] ? __pfx_userfaultfd_register+0x10/0x10 [ 435.733143][ T8241] ? tomoyo_path_number_perm+0x188/0x580 [ 435.733164][ T8241] userfaultfd_ioctl+0x2e6e/0x61d0 [ 435.733178][ T8241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.733192][ T8241] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 435.733203][ T8241] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 435.733213][ T8241] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 435.733238][ T8241] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 435.733253][ T8241] ? __fget_files+0x34/0x3d0 [ 435.733275][ T8241] ? selinux_file_ioctl+0x13b/0x290 [ 435.733286][ T8241] ? selinux_file_ioctl+0xb6/0x290 [ 435.733300][ T8241] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 435.733313][ T8241] ? __x64_sys_ioctl+0x18e/0x210 [ 435.733323][ T8241] __x64_sys_ioctl+0x18e/0x210 [ 435.733335][ T8241] do_syscall_64+0x123/0x790 [ 435.733350][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.733363][ T8241] RIP: 0033:0x7f17cd99e159 [ 435.733375][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.733386][ T8241] RSP: 002b:00007f17ce906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.733398][ T8241] RAX: ffffffffffffffda RBX: 00007f17cdc25fa0 RCX: 00007f17cd99e159 [ 435.733406][ T8241] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 435.733414][ T8241] RBP: 00007f17cda35024 R08: 0000000000000000 R09: 0000000000000000 [ 435.733421][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.733428][ T8241] R13: 00007f17cdc26038 R14: 00007f17cdc25fa0 R15: 00007ffc39747a18 [ 435.733445][ T8241] [ 436.263720][ T30] audit: type=1400 audit(1788842144.829:587): avc: denied { execute } for pid=8243 comm="syz.0.656" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.621372][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 437.661379][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 438.571593][ T5334] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 438.701370][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 438.751510][ T5334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.762474][ T5334] usb 1-1: not running at top speed; connect to a high speed hub [ 438.762508][ T5334] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 438.784222][ T5334] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 438.784258][ T5334] usb 1-1: config 0 has no interface number 0 [ 438.784289][ T5334] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 438.784308][ T5334] usb 1-1: config 0 interface 88 has no altsetting 0 [ 438.826181][ T5334] usb 1-1: language id specifier not provided by device, defaulting to English [ 438.845703][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 438.845725][ T5334] usb 1-1: Product: syz [ 438.845743][ T5334] usb 1-1: SerialNumber: Љ [ 438.864759][ T5334] usb 1-1: config 0 descriptor?? [ 438.872000][ T8244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 439.741421][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 440.223402][ T5334] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input13 [ 440.292889][ T5334] usb 1-1: USB disconnect, device number 16 [ 440.420402][ T7268] udevd[7268]: Error opening device "/dev/input/event4": No such file or directory [ 440.434403][ T7268] udevd[7268]: Unable to EVIOCGABS device "/dev/input/event4" [ 440.450215][ T7268] udevd[7268]: Unable to EVIOCGABS device "/dev/input/event4" [ 440.502065][ T30] audit: type=1400 audit(1788842149.059:588): avc: denied { shutdown } for pid=8264 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.781428][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.821384][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.950095][ T30] audit: type=1400 audit(1788842150.509:589): avc: denied { mount } for pid=8280 comm="syz.3.667" name="/" dev="hugetlbfs" ino=19380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 442.312909][ T5334] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 442.861358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 442.887648][ T5334] usb 1-1: Using ep0 maxpacket: 32 [ 442.961800][ T5334] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 443.204127][ T5334] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.204153][ T5334] usb 1-1: config 0 has no interface number 0 [ 443.204183][ T5334] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 443.204197][ T5334] usb 1-1: config 0 interface 1 has no altsetting 0 [ 443.247497][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.247522][ T5334] usb 1-1: Product: syz [ 443.247539][ T5334] usb 1-1: Manufacturer: syz [ 443.247549][ T5334] usb 1-1: SerialNumber: syz [ 443.272137][ T5334] usb 1-1: config 0 descriptor?? [ 443.501273][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.513437][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.559345][ T30] audit: type=1400 audit(1788842152.119:590): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 443.595572][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.595833][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.651252][ T5334] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 443.901371][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 444.278853][ T5334] cx231xx 1-1:0.1: Failed to read PCB config [ 444.278994][ T5334] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 444.303354][ T5334] usb 1-1: USB disconnect, device number 17 [ 444.407868][ T8297] syzkaller0: entered promiscuous mode [ 444.407897][ T8297] syzkaller0: entered allmulticast mode [ 444.488653][ T8290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.941363][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 445.143460][ T30] audit: type=1400 audit(1788842153.709:591): avc: denied { map } for pid=8304 comm="syz.0.674" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 445.197394][ T30] audit: type=1400 audit(1788842153.759:592): avc: denied { bind } for pid=8304 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.197433][ T30] audit: type=1400 audit(1788842153.759:593): avc: denied { node_bind } for pid=8304 comm="syz.0.674" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 445.263430][ T8305] 9pnet_fd: Insufficient options for proto=fd [ 445.789279][ T30] audit: type=1400 audit(1788842154.349:594): avc: denied { mount } for pid=8310 comm="syz.0.678" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 445.833590][ T30] audit: type=1400 audit(1788842154.399:595): avc: denied { search } for pid=8310 comm="syz.0.678" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 445.855501][ T30] audit: type=1400 audit(1788842154.399:596): avc: denied { read append } for pid=8310 comm="syz.0.678" name="pool_threads" dev="nfsd" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 445.855529][ T30] audit: type=1400 audit(1788842154.399:597): avc: denied { open } for pid=8310 comm="syz.0.678" path="/129/nfsd/pool_threads" dev="nfsd" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 445.981359][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 447.021350][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 447.211056][ T30] audit: type=1400 audit(1788842155.769:598): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 448.061513][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 448.879513][ T30] audit: type=1400 audit(1788842157.439:599): avc: denied { create } for pid=8327 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.101391][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.141348][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 451.181361][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.221358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.467423][ T8342] netlink: 'syz.3.687': attribute type 7 has an invalid length. [ 452.492851][ T8342] netlink: 'syz.3.687': attribute type 8 has an invalid length. [ 452.538226][ T8345] xt_policy: too many policy elements [ 452.544305][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 120 seconds [ 453.261358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 454.301370][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 455.026795][ T30] audit: type=1400 audit(1788842163.589:600): avc: denied { create } for pid=8363 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.054679][ T30] audit: type=1400 audit(1788842163.619:601): avc: denied { setopt } for pid=8363 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.079796][ T30] audit: type=1400 audit(1788842163.639:602): avc: denied { bind } for pid=8363 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.102699][ T30] audit: type=1400 audit(1788842163.669:603): avc: denied { write } for pid=8363 comm="syz.4.693" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.102734][ T30] audit: type=1400 audit(1788842163.669:604): avc: denied { connect } for pid=8363 comm="syz.4.693" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.342963][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 455.458238][ T30] audit: type=1400 audit(1788842164.019:605): avc: denied { write } for pid=8364 comm="syz.2.686" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 455.490020][ T30] audit: type=1400 audit(1788842164.049:606): avc: denied { name_bind } for pid=8353 comm="syz.3.691" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 455.522836][ T8365] SELinux: DCCP has been removed, pid=8365 comm=syz.2.686 [ 456.381384][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 456.766779][ T30] audit: type=1400 audit(1788842165.279:607): avc: denied { accept } for pid=8373 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 457.421362][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 457.796693][ T8391] Bluetooth: MGMT ver 1.23 [ 458.461359][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 459.437245][ T30] audit: type=1400 audit(1788842167.829:608): avc: denied { create } for pid=8395 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 459.437297][ T30] audit: type=1400 audit(1788842167.829:609): avc: denied { sys_admin } for pid=8395 comm="syz.2.702" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 459.501361][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 460.541354][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 461.556516][ T30] audit: type=1400 audit(1788842170.119:610): avc: denied { ioctl } for pid=8401 comm="syz.3.704" path="socket:[19948]" dev="sockfs" ino=19948 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.581773][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.621363][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.711898][ T8406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.661351][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 463.979649][ T8416] binder: 8411:8416 ioctl c0306201 0 returned -14 [ 464.080776][ T30] audit: type=1400 audit(1788842172.639:611): avc: denied { write } for pid=8418 comm="syz.0.708" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 464.701394][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.741369][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 466.781347][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 467.821352][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 468.182969][ T4968] udevd[4968]: worker [7092] /devices/virtual/block/nbd0 is taking a long time [ 468.861364][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 469.901361][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 470.216614][ T30] audit: type=1400 audit(1788842178.779:612): avc: denied { ioctl } for pid=8436 comm="syz.1.714" path="socket:[20114]" dev="sockfs" ino=20114 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 470.941379][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 471.186841][ T30] audit: type=1400 audit(1788842179.749:613): avc: denied { write } for pid=8442 comm="syz.3.717" name="functions" dev="configfs" ino=8937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 471.221431][ T30] audit: type=1400 audit(1788842179.779:614): avc: denied { ioctl } for pid=8442 comm="syz.3.717" path="/156/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=20126 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 471.251753][ T30] audit: type=1400 audit(1788842179.819:615): avc: denied { append } for pid=8442 comm="syz.3.717" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.531981][ T5334] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 471.881370][ T5334] usb 4-1: Using ep0 maxpacket: 8 [ 471.886951][ T5334] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 471.897548][ T5334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.897570][ T5334] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.897598][ T5334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.931458][ T5334] usb 4-1: config 0 descriptor?? [ 471.981362][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 473.012059][ T30] audit: type=1400 audit(1788842181.569:616): avc: denied { setopt } for pid=8442 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 473.031672][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 473.040984][ T5334] usb 4-1: USB disconnect, device number 8 [ 473.559664][ T30] audit: type=1400 audit(1788842182.119:617): avc: denied { accept } for pid=8470 comm="syz.2.724" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 474.061353][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 475.101346][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 475.829063][ T8475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 476.038413][ T30] audit: type=1400 audit(1788842184.599:618): avc: denied { create } for pid=8481 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 476.062173][ T30] audit: type=1400 audit(1788842184.629:619): avc: denied { write } for pid=8481 comm="syz.0.721" path="socket:[20268]" dev="sockfs" ino=20268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 476.141399][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.181359][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 478.221374][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 479.261506][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 479.334143][ T30] audit: type=1400 audit(1788842187.899:620): avc: denied { ioctl } for pid=8488 comm="syz.2.730" path="socket:[20336]" dev="sockfs" ino=20336 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 479.658330][ T30] audit: type=1400 audit(1788842188.219:621): avc: denied { setopt } for pid=8502 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 480.301506][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 481.341386][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 482.243304][ T8512] syzkaller0: entered promiscuous mode [ 482.243330][ T8512] syzkaller0: entered allmulticast mode [ 482.284206][ T8512] tipc: Started in network mode [ 482.284236][ T8512] tipc: Node identity 7eef4c81c426, cluster identity 4711 [ 482.284366][ T8512] tipc: Enabled bearer , priority 0 [ 482.330951][ T8512] tipc: Resetting bearer [ 482.349022][ T8511] tipc: Resetting bearer [ 482.381355][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 482.492264][ T8511] tipc: Disabling bearer [ 482.554307][ T8521] file system registered [ 482.563609][ T30] audit: type=1400 audit(1788842191.119:622): avc: denied { write } for pid=8520 comm="syz.2.740" name="functions" dev="configfs" ino=8937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 482.623485][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 150 seconds [ 482.646204][ T30] audit: type=1400 audit(1788842191.209:623): avc: denied { read } for pid=8522 comm="syz.0.733" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 482.646243][ T30] audit: type=1400 audit(1788842191.209:624): avc: denied { open } for pid=8522 comm="syz.0.733" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 482.712433][ T30] audit: type=1400 audit(1788842191.279:625): avc: denied { ioctl } for pid=8522 comm="syz.0.733" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 482.786300][ T30] audit: type=1800 audit(1788842191.349:626): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.741" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 482.818868][ T30] audit: type=1400 audit(1788842191.379:627): avc: denied { mount } for pid=8520 comm="syz.2.740" name="/" dev="functionfs" ino=20427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 482.889683][ T30] audit: type=1400 audit(1788842191.449:628): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 482.914776][ T5604] ffs_data_put(): freeing [ 483.421358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 483.600369][ T30] audit: type=1400 audit(1788842192.029:629): avc: denied { kexec_image_load } for pid=8538 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 484.461351][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.501367][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 486.541358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 487.321830][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.757'. [ 487.349830][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 487.581376][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 488.621397][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 489.661420][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 489.764807][ T8605] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 489.765685][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 490.701342][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 491.741360][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 491.905898][ T30] audit: type=1400 audit(1788842200.469:630): avc: denied { block_suspend } for pid=8612 comm="syz.0.762" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 492.781347][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 493.423446][ T8627] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 493.430170][ T8627] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 493.431235][ T8627] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 493.531979][ T5334] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 493.692676][ T5334] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 493.706315][ T5334] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 493.706353][ T5334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.729335][ T5334] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.729359][ T5334] usb 1-1: Manufacturer: syz [ 493.747148][ T5334] usb 1-1: config 0 descriptor?? [ 493.821363][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 494.861340][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 494.918992][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.928343][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.984677][ T5334] rc_core: IR keymap rc-hauppauge not found [ 494.984700][ T5334] Registered IR keymap rc-empty [ 495.042385][ T5334] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 495.055105][ T5334] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 495.113849][ T5334] usb 1-1: USB disconnect, device number 18 [ 495.901366][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 496.068899][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.075438][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.941357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 497.981431][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 499.021341][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 499.111806][ T8674] capability: warning: `syz.2.777' uses deprecated v2 capabilities in a way that may be insecure [ 500.061339][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 501.101363][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 501.552765][ T30] audit: type=1400 audit(1788842210.109:631): avc: denied { write } for pid=8681 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 502.141334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 503.073646][ T8688] binder: 8687:8688 ioctl c00c6211 0 returned -14 [ 503.181337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 504.137223][ T30] audit: type=1400 audit(1788842212.689:632): avc: denied { write } for pid=8684 comm="syz.0.775" path="socket:[21095]" dev="sockfs" ino=21095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 504.221345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 504.369037][ T4919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.386107][ T4919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.397829][ T4919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.407102][ T4919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.414573][ T4919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.751497][ T1930] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 505.201383][ T1930] usb 1-1: Using ep0 maxpacket: 32 [ 505.261340][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 505.350434][ T1930] usb 1-1: unable to get BOS descriptor or descriptor too short [ 505.350472][ T1930] usb 1-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 505.572090][ T1930] usb 1-1: config 1 has an invalid interface number: 242 but max is 2 [ 505.572118][ T1930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.572146][ T1930] usb 1-1: config 1 has no interface number 2 [ 505.669908][ T1930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.669934][ T1930] usb 1-1: Product: syz [ 505.669950][ T1930] usb 1-1: Manufacturer: syz [ 505.669961][ T1930] usb 1-1: SerialNumber: syz [ 506.301520][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.718392][ T52] Bluetooth: hci5: command tx timeout [ 506.790061][ T30] audit: type=1400 audit(1788842215.349:633): avc: denied { read } for pid=8692 comm="syz.0.782" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 506.829654][ T30] audit: type=1400 audit(1788842215.389:634): avc: denied { open } for pid=8692 comm="syz.0.782" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 506.985749][ T8695] input: syz0 as /devices/virtual/input/input15 [ 507.341335][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 508.098245][ T1930] usb 1-1: USB disconnect, device number 19 [ 508.363385][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.382823][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 508.564984][ T8717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.786'. [ 508.781504][ T52] Bluetooth: hci5: command tx timeout [ 509.178835][ T30] audit: type=1400 audit(1788842217.739:635): avc: denied { append } for pid=8719 comm="syz.0.788" name="sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 509.421357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 510.461344][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 510.573401][ T8743] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 510.861364][ T52] Bluetooth: hci5: command tx timeout [ 511.341352][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 511.349445][ T5721] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 511.349458][ T5721] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 511.501387][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 511.668255][ T30] audit: type=1400 audit(1788842220.229:636): avc: denied { ioctl } for pid=8739 comm="syz.2.791" path="socket:[21335]" dev="sockfs" ino=21335 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 511.772123][ T30] audit: type=1400 audit(1788842220.339:637): avc: denied { write } for pid=8708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.093773][ T30] audit: type=1400 audit(1788842220.659:638): avc: denied { write } for pid=8757 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.541390][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 513.168651][ T52] Bluetooth: hci5: command tx timeout [ 513.181147][ T5714] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 513.197717][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 180 seconds [ 513.581383][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 514.175181][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 514.191078][ T5721] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 514.191102][ T5721] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 514.621400][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 515.153560][ T8764] syz.2.793 (8764) used greatest stack depth: 18328 bytes left [ 515.661357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 516.701358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 517.113332][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.118342][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.118454][ T8691] bridge_slave_0: entered allmulticast mode [ 517.119275][ T8691] bridge_slave_0: entered promiscuous mode [ 517.156560][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.170121][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.177986][ T8691] bridge_slave_1: entered allmulticast mode [ 517.218305][ T8691] bridge_slave_1: entered promiscuous mode [ 517.291852][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 517.344850][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.559341][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.624787][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 517.636090][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.636116][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.636139][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.672157][ T10] usb 2-1: config 0 descriptor?? [ 517.741339][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 517.983259][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 517.997943][ T5721] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 517.997986][ T5721] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 518.250224][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 518.262325][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 518.262344][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 518.262353][ T52] Workqueue: hci0 hci_rx_work [ 518.262372][ T52] Call Trace: [ 518.262377][ T52] [ 518.262383][ T52] dump_stack_lvl+0x100/0x190 [ 518.262403][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 518.262424][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 518.262440][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 518.262454][ T52] ? find_held_lock+0x2b/0x80 [ 518.262470][ T52] ? kobject_add_internal+0x25f/0x930 [ 518.262486][ T52] ? kobject_add_internal+0x25f/0x930 [ 518.262504][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 518.262519][ T52] kobject_add_internal+0x2c8/0x930 [ 518.262538][ T52] kobject_add+0x16a/0x1e0 [ 518.262555][ T52] ? __pfx_kobject_add+0x10/0x10 [ 518.262570][ T52] ? class_to_subsys+0x10f/0x150 [ 518.262587][ T52] ? kobject_put+0xb9/0x640 [ 518.262601][ T52] ? _raw_spin_unlock+0x28/0x50 [ 518.262617][ T52] device_add+0x294/0x1970 [ 518.262631][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 518.262646][ T52] ? __pfx_device_add+0x10/0x10 [ 518.262660][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 518.262678][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 518.262693][ T52] le_conn_complete_evt+0x122f/0x2130 [ 518.262710][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 518.262721][ T52] ? hci_event_packet+0x186/0xcd0 [ 518.262736][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 518.262750][ T52] ? skb_pull_data+0x15f/0x1e0 [ 518.262766][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 518.262779][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 518.262794][ T52] hci_event_packet+0x51c/0xcd0 [ 518.262806][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 518.262819][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 518.262835][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 518.262853][ T52] hci_rx_work+0x451/0xfc0 [ 518.262868][ T52] process_one_work+0xac7/0x1b10 [ 518.262891][ T52] ? __pfx_process_one_work+0x10/0x10 [ 518.262908][ T52] ? lock_acquire+0x1d1/0x380 [ 518.262924][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 518.262937][ T52] worker_thread+0x5ef/0xe50 [ 518.262970][ T52] ? kthread+0x13a/0x450 [ 518.262985][ T52] ? __pfx_worker_thread+0x10/0x10 [ 518.263001][ T52] kthread+0x373/0x450 [ 518.263017][ T52] ? __pfx_kthread+0x10/0x10 [ 518.263034][ T52] ret_from_fork+0x730/0xd60 [ 518.263048][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 518.263061][ T52] ? __switch_to+0x800/0x10f0 [ 518.263076][ T52] ? __pfx_kthread+0x10/0x10 [ 518.263092][ T52] ret_from_fork_asm+0x1a/0x30 [ 518.263112][ T52] [ 518.263172][ T52] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 518.263198][ T52] Bluetooth: hci0: failed to register connection device [ 518.562768][ T8691] team0: Port device team_slave_0 added [ 518.646088][ T8691] team0: Port device team_slave_1 added [ 518.678099][ T30] audit: type=1400 audit(1788842227.239:639): avc: denied { write } for pid=8767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.775717][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.775748][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.775771][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.783014][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 519.790453][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.802034][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.802065][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.828915][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 520.095637][ T30] audit: type=1400 audit(1788842228.659:640): avc: denied { mount } for pid=8784 comm="syz.1.796" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 520.137659][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 520.137724][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 520.208341][ T10] usb 2-1: USB disconnect, device number 11 [ 520.222335][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 520.234883][ T5721] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 520.235399][ T5721] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 520.419398][ T8691] hsr_slave_0: entered promiscuous mode [ 520.419919][ T8691] hsr_slave_1: entered promiscuous mode [ 520.420321][ T8691] debugfs: 'hsr0' already exists in 'hsr' [ 520.420340][ T8691] Cannot create hsr debugfs directory [ 520.456850][ T30] audit: type=1400 audit(1788842229.019:641): avc: denied { write } for pid=8797 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.861366][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 521.256571][ T30] audit: type=1400 audit(1788842229.819:642): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 521.901380][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 522.055213][ T8804] syz.1.801 (8804): attempted to duplicate a private mapping with mremap. This is not supported. [ 522.747959][ T30] audit: type=1400 audit(1788842231.309:643): avc: denied { write } for pid=8802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.941724][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 523.050352][ T30] audit: type=1400 audit(1788842231.609:644): avc: denied { write } for pid=8816 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.421682][ T30] audit: type=1400 audit(1788842231.979:645): avc: denied { create } for pid=8818 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 523.981354][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 524.164595][ T8691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 524.207807][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.702280][ T5721] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 524.702306][ T5721] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 524.708451][ T4919] Bluetooth: hci5: command 0x0c1a tx timeout [ 525.021332][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 525.171393][ T8691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.226538][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.226996][ T8691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 525.315865][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.546810][ T8691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.566958][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.738514][ T30] audit: type=1400 audit(1788842234.299:646): avc: denied { listen } for pid=8826 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 526.061368][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 526.162256][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.369370][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.386132][ T30] audit: type=1400 audit(1788842234.949:647): avc: denied { write } for pid=8820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.419268][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.419336][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.457866][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.457929][ T6218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.842590][ T30] audit: type=1400 audit(1788842235.399:648): avc: denied { write } for pid=8852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.101371][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 527.747414][ T8856] overlayfs: overlapping lowerdir path [ 528.141334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 528.707921][ T30] audit: type=1400 audit(1788842236.909:649): avc: denied { getattr } for pid=8863 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.181345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 529.256871][ T30] audit: type=1400 audit(1788842237.819:650): avc: denied { read } for pid=8867 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.256913][ T30] audit: type=1400 audit(1788842237.819:651): avc: denied { open } for pid=8867 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.868589][ T30] audit: type=1400 audit(1788842238.429:652): avc: denied { ioctl } for pid=8877 comm="syz.1.809" path="socket:[22137]" dev="sockfs" ino=22137 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.221337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 531.261497][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 531.279654][ T30] audit: type=1400 audit(1788842239.839:653): avc: denied { write } for pid=8860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.279697][ T30] audit: type=1400 audit(1788842239.839:654): avc: denied { create } for pid=8860 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 531.279723][ T30] audit: type=1400 audit(1788842239.839:655): avc: denied { write } for pid=8860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.ipv4ll" dev="tmpfs" ino=4991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 531.279761][ T30] audit: type=1400 audit(1788842239.839:656): avc: denied { append } for pid=8860 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.ipv4ll" dev="tmpfs" ino=4991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 531.472843][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.636907][ T30] audit: type=1400 audit(1788842240.199:657): avc: denied { getopt } for pid=8877 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.656727][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 531.689963][ T30] audit: type=1400 audit(1788842240.249:658): avc: denied { write } for pid=8893 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.716629][ T30] audit: type=1400 audit(1788842240.279:659): avc: denied { unlink } for pid=8893 comm="rm" name="resolv.conf.lapb5.ipv4ll" dev="tmpfs" ino=4991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 531.833656][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 531.849753][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.849781][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.849809][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.873829][ T9] usb 3-1: config 0 descriptor?? [ 532.301361][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 532.388986][ T30] audit: type=1400 audit(1788842240.949:660): avc: denied { write } for pid=8907 comm="syz.3.808" name="subsystems" dev="configfs" ino=19051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 532.421726][ T5721] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 532.550779][ T8691] veth0_vlan: entered promiscuous mode [ 532.589464][ T8691] veth1_vlan: entered promiscuous mode [ 532.711422][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 533.231790][ T10] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 533.341343][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 533.765095][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.765121][ T10] usb 2-1: Product: syz [ 533.765138][ T10] usb 2-1: Manufacturer: syz [ 533.765148][ T10] usb 2-1: SerialNumber: syz [ 533.808717][ T10] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 533.833558][ T8691] veth0_macvtap: entered promiscuous mode [ 533.857665][ T8691] veth1_macvtap: entered promiscuous mode [ 533.920894][ T10] scsi host1: usb-storage 2-1:1.0 [ 533.958067][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.112817][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.172716][ T6261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.172754][ T6261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.172799][ T6261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.172822][ T6261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.381329][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 534.486288][ T30] audit: type=1400 audit(1788842243.049:661): avc: denied { write } for pid=8901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.547324][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 534.547396][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 534.641019][ T9] usb 3-1: USB disconnect, device number 10 [ 534.662248][ T10] ums_eneub6250 2-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 535.104650][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.104673][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.209297][ T30] audit: type=1400 audit(1788842243.769:662): avc: denied { write } for pid=8942 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.306613][ T6261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.306637][ T6261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.338495][ T8937] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 535.421333][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 535.489228][ T5714] usb 2-1: USB disconnect, device number 12 [ 536.461335][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 536.803804][ T8947] serio: Serial port ttyS3 [ 537.281888][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.5.819'. [ 537.501336][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 537.917259][ T5714] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 538.371362][ T5714] usb 3-1: device descriptor read/64, error -71 [ 538.541323][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 538.956077][ T5714] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 539.581864][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 539.639728][ T8973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.850404][ T30] audit: type=1400 audit(1788842248.409:663): avc: denied { mount } for pid=8972 comm="syz.3.822" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 540.568234][ T5714] usb 3-1: device descriptor read/64, error -71 [ 540.621335][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 540.732001][ T5714] usb usb3-port1: attempt power cycle [ 541.388153][ T5714] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 541.661329][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 541.730342][ T5714] usb 3-1: device descriptor read/8, error -71 [ 542.701324][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 542.780854][ T30] audit: type=1400 audit(1788842251.339:664): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 542.973214][ T30] audit: type=1400 audit(1788842251.529:665): avc: denied { read write } for pid=8981 comm="syz.5.826" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 542.973257][ T30] audit: type=1400 audit(1788842251.529:666): avc: denied { ioctl open } for pid=8981 comm="syz.5.826" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 543.066048][ T30] audit: type=1400 audit(1788842251.629:667): avc: denied { read } for pid=8985 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 543.741711][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 543.975999][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 210 seconds [ 544.781325][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 545.627191][ T9003] Line length is too long: Should be less than 4094 [ 545.742007][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 545.822541][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 545.902047][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 545.913229][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.913254][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.913283][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.937915][ T9] usb 1-1: config 0 descriptor?? [ 546.011442][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 546.861338][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 547.252297][ T30] audit: type=1400 audit(1788842255.799:668): avc: denied { append } for pid=9016 comm="syz.1.834" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 547.363025][ T30] audit: type=1400 audit(1788842255.859:669): avc: denied { ioctl } for pid=9016 comm="syz.1.834" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 547.901928][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 548.294327][ T9] hid_parser_main: 22 callbacks suppressed [ 548.319640][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319683][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319706][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319723][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319741][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319757][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319774][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319790][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319807][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.319823][ T9] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 548.451847][ T9] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 548.941352][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 549.634195][ T5714] usb 1-1: USB disconnect, device number 21 [ 549.705849][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.981334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 550.075802][ T9032] erspan0: entered promiscuous mode [ 550.075902][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 550.932047][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 551.021336][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 551.574502][ T30] audit: type=1400 audit(1788842260.129:670): avc: denied { mount } for pid=9058 comm="syz.5.842" name="/" dev="rpc_pipefs" ino=23224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 551.630593][ T30] audit: type=1400 audit(1788842260.189:671): avc: denied { write } for pid=9058 comm="syz.5.842" name="functions" dev="configfs" ino=8937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 551.630636][ T30] audit: type=1400 audit(1788842260.189:672): avc: denied { write } for pid=9058 comm="syz.5.842" name="header" dev="configfs" ino=23258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 551.702282][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 551.708912][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 551.718992][ T10] usb 1-1: config 0 has no interfaces? [ 551.729107][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.729141][ T10] usb 1-1: Product: syz [ 551.729161][ T10] usb 1-1: Manufacturer: syz [ 551.729171][ T10] usb 1-1: SerialNumber: syz [ 552.061331][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 552.510329][ T10] usb 1-1: config 0 descriptor?? [ 552.627001][ T30] audit: type=1400 audit(1788842261.189:673): avc: denied { unmount } for pid=8691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 553.101327][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 553.485494][ T5714] usb 1-1: USB disconnect, device number 22 [ 554.141334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 554.314230][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 554.314258][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 554.407894][ T6218] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.417654][ T6218] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.444478][ T6218] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.455379][ T6218] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.181345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.604788][ T9073] 9p: Bad value for 'wfdno' [ 555.618585][ T9073] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 556.221811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 557.261338][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 558.190929][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.197336][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.301328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 558.310937][ T9094] netlink: 296 bytes leftover after parsing attributes in process `syz.1.855'. [ 558.752631][ T5334] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 558.901400][ T5334] usb 2-1: Using ep0 maxpacket: 16 [ 558.907044][ T5334] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 558.917284][ T5334] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 558.917308][ T5334] usb 2-1: config 0 has no interface number 0 [ 558.933780][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.933801][ T5334] usb 2-1: Product: syz [ 558.933817][ T5334] usb 2-1: Manufacturer: syz [ 558.933827][ T5334] usb 2-1: SerialNumber: syz [ 559.341325][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 559.838483][ T5334] usb 2-1: config 0 descriptor?? [ 559.848090][ T5334] hub 2-1:0.132: bad descriptor, ignoring hub [ 559.848113][ T5334] hub 2-1:0.132: probe with driver hub failed with error -5 [ 559.871376][ T5334] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input16 [ 560.381320][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 561.132177][ T30] audit: type=1400 audit(1788842269.689:674): avc: denied { read } for pid=9093 comm="syz.1.855" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 561.132222][ T30] audit: type=1400 audit(1788842269.689:675): avc: denied { open } for pid=9093 comm="syz.1.855" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 561.421321][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 561.525819][ T9110] capability: warning: `syz.0.854' uses 32-bit capabilities (legacy support in use) [ 561.542830][ T30] audit: type=1400 audit(1788842270.079:676): avc: denied { name_connect } for pid=9107 comm="syz.0.854" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 561.572636][ T9105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.461317][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.501321][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 564.541612][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 565.581345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 565.908291][ T30] audit: type=1800 audit(1788842274.469:677): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.862" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 565.959252][ T10] libceph: connect (1)[c::]:6789 error -101 [ 565.974958][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 566.137665][ T9135] ceph: No mds server is up or the cluster is laggy [ 566.333510][ T10] libceph: connect (1)[c::]:6789 error -101 [ 566.333645][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 566.621374][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 567.661362][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 568.701320][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 569.517159][ T4953] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 569.547159][ T4953] usb 2-1: device reset changed ep0 maxpacket size! [ 569.741322][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 569.986793][ T5334] usb 2-1: USB disconnect, device number 13 [ 570.781330][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.964042][ T9153] syzkaller0: entered promiscuous mode [ 570.964066][ T9153] syzkaller0: entered allmulticast mode [ 571.821328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 571.979239][ T30] audit: type=1400 audit(1788842280.539:678): avc: denied { ioctl } for pid=9151 comm="syz.2.870" path="socket:[23695]" dev="sockfs" ino=23695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 572.862100][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 572.891675][ T30] audit: type=1400 audit(1788842281.459:679): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 572.931191][ T9160] can0: slcan on ttyS3. [ 573.901386][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 574.147062][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 240 seconds [ 574.498500][ T9160] can0 (unregistered): slcan off ttyS3. [ 574.941314][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 575.779496][ T9178] netlink: 'syz.0.878': attribute type 11 has an invalid length. [ 575.779522][ T9178] netlink: 220 bytes leftover after parsing attributes in process `syz.0.878'. [ 575.981326][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.021327][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.642452][ T30] audit: type=1400 audit(1788842286.209:680): avc: denied { write } for pid=9181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.061322][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 578.071372][ T30] audit: type=1400 audit(1788842286.629:681): avc: denied { write } for pid=9205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.101316][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 580.141318][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 580.286234][ T9216] overlayfs: missing 'lowerdir' [ 581.181318][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 581.544339][ T9234] netlink: 14 bytes leftover after parsing attributes in process `syz.2.886'. [ 581.716205][ T30] audit: type=1400 audit(1788842290.279:682): avc: denied { bind } for pid=9232 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 581.716247][ T30] audit: type=1400 audit(1788842290.279:683): avc: denied { name_bind } for pid=9232 comm="syz.2.886" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 581.716277][ T30] audit: type=1400 audit(1788842290.279:684): avc: denied { node_bind } for pid=9232 comm="syz.2.886" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 581.898537][ T9238] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8691] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9238] [ 582.012664][ T30] audit: type=1400 audit(1788842290.579:685): avc: denied { bind } for pid=9232 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 582.048744][ T30] audit: type=1400 audit(1788842290.609:686): avc: denied { write } for pid=9215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.221445][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 582.331856][ T9242] xt_MASQUERADE: bad MAP_IPS. [ 582.346608][ T30] audit: type=1400 audit(1788842290.909:687): avc: denied { write } for pid=9245 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.574200][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 582.820453][ T9257] netlink: 296 bytes leftover after parsing attributes in process `syz.3.892'. [ 583.261312][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 583.824099][ T30] audit: type=1400 audit(1788842292.389:688): avc: denied { shutdown } for pid=9254 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 584.301330][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 585.341316][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 586.381310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.307594][ T30] audit: type=1400 audit(1788842295.869:689): avc: denied { getopt } for pid=9266 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 587.421318][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 588.275906][ T3652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.461333][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 589.109637][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.897'. [ 589.448101][ T3652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.502015][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 590.541337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 591.350715][ T3652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.581378][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 591.604059][ T3652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.439467][ T30] audit: type=1400 audit(1788842300.999:690): avc: denied { append } for pid=9305 comm="syz.1.907" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 592.621309][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 592.865669][ T30] audit: type=1400 audit(1788842301.429:691): avc: denied { ioctl } for pid=9309 comm="syz.2.896" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 593.661327][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 593.799252][ T9313] netlink: 'syz.2.896': attribute type 4 has an invalid length. [ 593.830631][ T30] audit: type=1400 audit(1788842302.389:692): avc: denied { map } for pid=9309 comm="syz.2.896" path="socket:[24275]" dev="sockfs" ino=24275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 593.830673][ T30] audit: type=1400 audit(1788842302.389:693): avc: denied { read } for pid=9309 comm="syz.2.896" path="socket:[24275]" dev="sockfs" ino=24275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 594.536961][ T30] audit: type=1400 audit(1788842303.089:694): avc: denied { ioctl } for pid=9321 comm="syz.3.903" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 594.701498][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.819183][ T3652] bridge_slave_1: left allmulticast mode [ 594.819223][ T3652] bridge_slave_1: left promiscuous mode [ 594.823013][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.917710][ T3652] bridge_slave_0: left allmulticast mode [ 595.003588][ T30] audit: type=1326 audit(1788842303.569:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.914" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf21d9e159 code=0x0 [ 595.057827][ T3652] bridge_slave_0: left promiscuous mode [ 595.057965][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.741561][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 596.781346][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 597.172277][ T30] audit: type=1400 audit(1788842305.739:696): avc: denied { write } for pid=9323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.504627][ T30] audit: type=1400 audit(1788842306.069:697): avc: denied { write } for pid=9348 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.821666][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 597.919570][ T9357] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 597.919816][ T9357] udc dummy_udc.0: failed to start g1: -19 [ 597.976161][ T9350] input: syz1 as /devices/virtual/input/input17 [ 598.068249][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.088089][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.110555][ T3652] bond0 (unregistering): Released all slaves [ 598.138407][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 598.178150][ T9357] UDC core: g1: couldn't find an available UDC or it's busy [ 598.861316][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.791226][ T30] audit: type=1400 audit(1788842308.349:698): avc: denied { connect } for pid=9371 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 599.901451][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 599.922155][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 599.942074][ T30] audit: type=1400 audit(1788842308.509:699): avc: denied { write } for pid=9371 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 600.031789][ T30] audit: type=1400 audit(1788842308.599:700): avc: denied { read } for pid=9377 comm="syz.3.922" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 600.031829][ T30] audit: type=1400 audit(1788842308.599:701): avc: denied { open } for pid=9377 comm="syz.3.922" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 600.103261][ T9] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 600.113355][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.129083][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.129106][ T9] usb 6-1: Product: syz [ 600.129122][ T9] usb 6-1: Manufacturer: syz [ 600.129133][ T9] usb 6-1: SerialNumber: syz [ 600.165281][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 600.941301][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 601.193813][ T9] gspca_mr97310a: reg read [21] error -110 [ 601.193872][ T9] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -110 [ 601.981304][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.021305][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.533249][ T30] audit: type=1400 audit(1788842312.099:702): avc: denied { write } for pid=9367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.583910][ T5334] usb 6-1: USB disconnect, device number 2 [ 604.061309][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 604.713026][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 270 seconds [ 605.101310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.028211][ T30] audit: type=1400 audit(1788842314.589:703): avc: denied { write } for pid=9399 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.141335][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.304656][ T30] audit: type=1400 audit(1788842314.869:704): avc: denied { setopt } for pid=9407 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 606.392681][ T3652] hsr_slave_0: left promiscuous mode [ 606.398510][ T3652] hsr_slave_1: left promiscuous mode [ 606.447348][ T3652] veth1_macvtap: left promiscuous mode [ 606.453855][ T3652] veth0_macvtap: left promiscuous mode [ 606.453923][ T3652] veth1_vlan: left promiscuous mode [ 606.453971][ T3652] veth0_vlan: left promiscuous mode [ 606.749898][ T30] audit: type=1400 audit(1788842315.309:705): avc: denied { create } for pid=9418 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 606.788052][ T30] audit: type=1400 audit(1788842315.349:706): avc: denied { bind } for pid=9418 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 606.808459][ T30] audit: type=1400 audit(1788842315.379:707): avc: denied { write } for pid=9418 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 607.178031][ T9417] kvm [9416]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 607.186668][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 607.598582][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 607.630001][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 608.221318][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 608.266628][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 608.267023][ T9412] bridge0: port 3(syz_tun) entered blocking state [ 608.267084][ T9412] bridge0: port 3(syz_tun) entered disabled state [ 608.267153][ T9412] syz_tun: entered allmulticast mode [ 608.268130][ T9412] syz_tun: entered promiscuous mode [ 609.175511][ T9412] bridge0: port 3(syz_tun) entered blocking state [ 609.175579][ T9412] bridge0: port 3(syz_tun) entered listening state [ 609.261363][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 609.278303][ T6218] bridge0: port 3(syz_tun) entered disabled state [ 609.413634][ T5334] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 609.533479][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 609.589709][ T5334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 609.598996][ T5334] usb 4-1: not running at top speed; connect to a high speed hub [ 609.599016][ T5334] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 609.599850][ T5334] usb 4-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 609.599863][ T5334] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 609.619179][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.619194][ T5334] usb 4-1: Product: syz [ 609.619203][ T5334] usb 4-1: Manufacturer: syz [ 609.619212][ T5334] usb 4-1: SerialNumber: syz [ 609.676470][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 609.719886][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 609.730265][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 609.746867][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 609.746891][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 609.746911][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 609.746924][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 609.746936][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 609.746949][ T9] usb 2-1: config 0 has no interface number 0 [ 609.746986][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 609.747002][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 609.747015][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.747034][ T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.747051][ T9] usb 2-1: config 0 interface 125 has no altsetting 0 [ 609.747063][ T9] usb 2-1: config 0 interface 125 has no altsetting 2 [ 609.838086][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.838102][ T9] usb 2-1: Product: syz [ 609.838111][ T9] usb 2-1: Manufacturer: syz [ 609.838119][ T9] usb 2-1: SerialNumber: syz [ 609.902258][ T9] usb 2-1: config 0 descriptor?? [ 609.910429][ T9] usb 2-1: selecting invalid altsetting 2 [ 610.301362][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 610.407353][ T30] audit: type=1400 audit(1788842318.969:708): avc: denied { listen } for pid=9451 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 610.942399][ T9] get_1284_register timeout [ 610.951717][ C0] usb 2-1: async_complete: urb error -104 [ 610.951797][ C0] usb 2-1: async_complete: urb error -104 [ 611.341352][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 611.580686][ T5334] usb 4-1: USB disconnect, device number 11 [ 611.670130][ T30] audit: type=1400 audit(1788842320.229:709): avc: denied { write } for pid=9445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.058933][ T9471] comedi comedi3: dt2817: I/O base address or length out of range [ 612.317101][ T30] audit: type=1400 audit(1788842320.879:710): avc: denied { write } for pid=9474 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.381540][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.390059][ T5334] usb 2-1: USB disconnect, device number 15 [ 612.537537][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 613.097140][ T9481] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead [ 613.097173][ T9481] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 613.097190][ T9481] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 613.097592][ T9481] jffs2: notice: (9481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 613.131583][ T30] audit: type=1400 audit(1788842321.659:711): avc: denied { listen } for pid=9477 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 613.131615][ T30] audit: type=1400 audit(1788842321.659:712): avc: denied { accept } for pid=9477 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 613.421389][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 614.461626][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.340451][ T9498] FAULT_INJECTION: forcing a failure. [ 615.340451][ T9498] name failslab, interval 1, probability 1, space 0, times 0 [ 615.340485][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz.1.945 Not tainted syzkaller #0 PREEMPT(full) [ 615.340501][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 615.340509][ T9498] Call Trace: [ 615.340513][ T9498] [ 615.340518][ T9498] dump_stack_lvl+0x100/0x190 [ 615.340545][ T9498] should_fail_ex.cold+0x5/0xa [ 615.340562][ T9498] should_failslab+0xc2/0x120 [ 615.340578][ T9498] __kmalloc_cache_noprof+0x91/0x6d0 [ 615.340595][ T9498] ? kfree+0x22b/0x6d0 [ 615.340609][ T9498] ? vgem_open+0x43/0xe0 [ 615.340626][ T9498] ? __pfx_vgem_open+0x10/0x10 [ 615.340641][ T9498] vgem_open+0x43/0xe0 [ 615.340655][ T9498] drm_file_alloc+0x623/0xb40 [ 615.340672][ T9498] drm_open_helper+0x1fc/0x540 [ 615.340688][ T9498] drm_open+0x1a0/0x3e0 [ 615.340701][ T9498] ? __pfx_drm_open+0x10/0x10 [ 615.340714][ T9498] drm_stub_open+0x20f/0x380 [ 615.340728][ T9498] ? __pfx_drm_stub_open+0x10/0x10 [ 615.340741][ T9498] chrdev_open+0x234/0x6a0 [ 615.340755][ T9498] ? __pfx_chrdev_open+0x10/0x10 [ 615.340769][ T9498] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 615.340788][ T9498] do_dentry_open+0x6ab/0x14d0 [ 615.340799][ T9498] ? __pfx_chrdev_open+0x10/0x10 [ 615.340815][ T9498] vfs_open+0x82/0x3f0 [ 615.340831][ T9498] path_openat+0x19fa/0x2440 [ 615.340847][ T9498] ? __pfx_path_openat+0x10/0x10 [ 615.340867][ T9498] do_file_open+0x20e/0x430 [ 615.340882][ T9498] ? __pfx_do_file_open+0x10/0x10 [ 615.340906][ T9498] ? _raw_spin_unlock+0x28/0x50 [ 615.340919][ T9498] ? alloc_fd+0x471/0x7a0 [ 615.340937][ T9498] do_sys_openat2+0x10f/0x1e0 [ 615.340951][ T9498] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.340966][ T9498] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 615.340985][ T9498] __x64_sys_openat+0x12d/0x210 [ 615.341000][ T9498] ? __pfx___x64_sys_openat+0x10/0x10 [ 615.341021][ T9498] do_syscall_64+0x123/0x790 [ 615.341036][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.341048][ T9498] RIP: 0033:0x7f659d75e98e [ 615.341059][ T9498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.341070][ T9498] RSP: 002b:00007f659e61bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 615.341083][ T9498] RAX: ffffffffffffffda RBX: 00007f659e61c6c0 RCX: 00007f659d75e98e [ 615.341090][ T9498] RDX: 0000000000000000 RSI: 00007f659e61bc00 RDI: ffffffffffffff9c [ 615.341097][ T9498] RBP: 00007f659e61bc00 R08: 0000000000000000 R09: 0000000000000000 [ 615.341104][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 615.341111][ T9498] R13: 00007f659da26038 R14: 00007f659da25fa0 R15: 00007ffe1cde2768 [ 615.341127][ T9498] [ 615.502311][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 615.822165][ T30] audit: type=1326 audit(1788842324.389:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 615.822215][ T30] audit: type=1326 audit(1788842324.389:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 615.879955][ T30] audit: type=1326 audit(1788842324.449:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 615.879994][ T30] audit: type=1326 audit(1788842324.449:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 615.942092][ T30] audit: type=1326 audit(1788842324.509:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 615.942134][ T30] audit: type=1326 audit(1788842324.509:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 615.942168][ T30] audit: type=1326 audit(1788842324.509:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 616.048352][ T30] audit: type=1326 audit(1788842324.609:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 616.048394][ T30] audit: type=1326 audit(1788842324.609:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 616.107571][ T30] audit: type=1326 audit(1788842324.669:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9489 comm="syz.3.944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4b71d9e159 code=0x7ffc0000 [ 616.541345][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 617.581336][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 618.621354][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 619.162296][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.168661][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.661317][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 620.701299][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 621.338059][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 621.338084][ T30] audit: type=1400 audit(1788842329.899:731): avc: denied { write } for pid=9533 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.370610][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 621.579807][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 621.741327][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.781373][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 623.214603][ T9558] TCP: TCP_TX_DELAY enabled [ 623.821338][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 624.024180][ T30] audit: type=1400 audit(1788842332.589:732): avc: denied { bind } for pid=9569 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 624.311791][ T30] audit: type=1800 audit(1788842332.879:733): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.952" name="bus" dev="ramfs" ino=26427 res=0 errno=0 [ 624.390279][ T30] audit: type=1800 audit(1788842332.949:734): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.953" name="bus" dev="ramfs" ino=26431 res=0 errno=0 [ 624.861303][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 625.901334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 626.941307][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 627.981300][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.021332][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.408177][ T9597] FAULT_INJECTION: forcing a failure. [ 629.408177][ T9597] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 629.408211][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.2.965 Not tainted syzkaller #0 PREEMPT(full) [ 629.408226][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 629.408233][ T9597] Call Trace: [ 629.408238][ T9597] [ 629.408243][ T9597] dump_stack_lvl+0x100/0x190 [ 629.408267][ T9597] should_fail_ex.cold+0x5/0xa [ 629.408281][ T9597] ? prepare_alloc_pages+0x16d/0x5b0 [ 629.408298][ T9597] should_fail_alloc_page+0xeb/0x140 [ 629.408314][ T9597] prepare_alloc_pages+0x1f0/0x5b0 [ 629.408330][ T9597] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 629.408352][ T9597] ? __lock_acquire+0x6f1/0x1f40 [ 629.408366][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.408380][ T9597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 629.408401][ T9597] ? __mutex_unlock_slowpath+0x35d/0x930 [ 629.408418][ T9597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.408438][ T9597] ? mm_drop_all_locks+0x390/0x4b0 [ 629.408455][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.408468][ T9597] ? policy_nodemask+0xed/0x4f0 [ 629.408485][ T9597] alloc_pages_mpol+0x201/0x550 [ 629.408501][ T9597] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 629.408521][ T9597] alloc_pages_noprof+0x1a/0x160 [ 629.408538][ T9597] kvm_coalesced_mmio_init+0x1a/0x170 [ 629.408554][ T9597] kvm_dev_ioctl+0xec1/0x1b50 [ 629.408572][ T9597] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 629.408587][ T9597] ? selinux_file_ioctl+0x13b/0x290 [ 629.408599][ T9597] ? selinux_file_ioctl+0xb6/0x290 [ 629.408610][ T9597] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 629.408624][ T9597] __x64_sys_ioctl+0x18e/0x210 [ 629.408637][ T9597] do_syscall_64+0x123/0x790 [ 629.408652][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.408665][ T9597] RIP: 0033:0x7faf21d9e159 [ 629.408675][ T9597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.408685][ T9597] RSP: 002b:00007faf22bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.408697][ T9597] RAX: ffffffffffffffda RBX: 00007faf22026090 RCX: 00007faf21d9e159 [ 629.408705][ T9597] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 629.408711][ T9597] RBP: 00007faf21e35024 R08: 0000000000000000 R09: 0000000000000000 [ 629.408718][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.408725][ T9597] R13: 00007faf22026128 R14: 00007faf22026090 R15: 00007ffd8b4c8018 [ 629.408741][ T9597] [ 630.061302][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 630.747734][ T9607] 9p: Bad value for 'rfdno' [ 631.101411][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 632.141301][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 633.181457][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 634.221320][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 635.261306][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 635.281814][ T5873] block nbd0: Possible stuck request ffff8880286b7000: control (read@0,1024B). Runtime 300 seconds [ 636.301457][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.341301][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.453887][ T30] audit: type=1400 audit(1788842346.019:735): avc: denied { write } for pid=9641 comm="syz.1.976" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 637.834375][ T30] audit: type=1400 audit(1788842346.399:736): avc: denied { write } for pid=9624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.041120][ T9642] device-mapper: table: 248:0: thi: unknown target type [ 638.084281][ T9642] device-mapper: ioctl: error adding target to table [ 638.381297][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 639.281131][ T30] audit: type=1400 audit(1788842347.839:737): avc: denied { write } for pid=9660 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.421716][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 640.325064][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 640.461298][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 641.501428][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 642.541310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 643.364599][ T30] audit: type=1400 audit(1788842351.919:738): avc: denied { setattr } for pid=9675 comm="syz.5.981" name="SCTPv6" dev="sockfs" ino=26847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.567557][ T30] audit: type=1400 audit(1788842352.129:739): avc: denied { accept } for pid=9688 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 643.586922][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 643.665916][ T9690] FAULT_INJECTION: forcing a failure. [ 643.665916][ T9690] name failslab, interval 1, probability 1, space 0, times 0 [ 643.665947][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.0.984 Not tainted syzkaller #0 PREEMPT(full) [ 643.665962][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 643.665969][ T9690] Call Trace: [ 643.665973][ T9690] [ 643.665979][ T9690] dump_stack_lvl+0x100/0x190 [ 643.665999][ T9690] should_fail_ex.cold+0x5/0xa [ 643.666017][ T9690] should_failslab+0xc2/0x120 [ 643.666031][ T9690] __kmalloc_noprof+0xfc/0x840 [ 643.666043][ T9690] ? tomoyo_encode2+0xfb/0x3c0 [ 643.666060][ T9690] tomoyo_encode2+0xfb/0x3c0 [ 643.666075][ T9690] tomoyo_encode+0x29/0x50 [ 643.666086][ T9690] tomoyo_realpath_from_path+0x18c/0x690 [ 643.666102][ T9690] tomoyo_check_open_permission+0x2af/0x3c0 [ 643.666120][ T9690] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 643.666141][ T9690] ? hook_file_open+0x248/0x8e0 [ 643.666166][ T9690] ? path_get+0x61/0x80 [ 643.666183][ T9690] tomoyo_file_open+0x6b/0x90 [ 643.666197][ T9690] security_file_open+0xb5/0x1e0 [ 643.666210][ T9690] do_dentry_open+0x588/0x14d0 [ 643.666226][ T9690] vfs_open+0x82/0x3f0 [ 643.666242][ T9690] path_openat+0x19fa/0x2440 [ 643.666257][ T9690] ? __pfx_path_openat+0x10/0x10 [ 643.666275][ T9690] do_file_open+0x20e/0x430 [ 643.666290][ T9690] ? __pfx_do_file_open+0x10/0x10 [ 643.666314][ T9690] ? _raw_spin_unlock+0x28/0x50 [ 643.666326][ T9690] ? alloc_fd+0x471/0x7a0 [ 643.666344][ T9690] do_sys_openat2+0x10f/0x1e0 [ 643.666358][ T9690] ? __pfx_do_sys_openat2+0x10/0x10 [ 643.666372][ T9690] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 643.666391][ T9690] __x64_sys_openat+0x12d/0x210 [ 643.666407][ T9690] ? __pfx___x64_sys_openat+0x10/0x10 [ 643.666429][ T9690] do_syscall_64+0x123/0x790 [ 643.666444][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.666457][ T9690] RIP: 0033:0x7f17cd95e98e [ 643.666467][ T9690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.666478][ T9690] RSP: 002b:00007f17ce905b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 643.666490][ T9690] RAX: ffffffffffffffda RBX: 00007f17ce9066c0 RCX: 00007f17cd95e98e [ 643.666497][ T9690] RDX: 0000000000000002 RSI: 00007f17ce905c00 RDI: ffffffffffffff9c [ 643.666504][ T9690] RBP: 00007f17ce905c00 R08: 0000000000000000 R09: 0000000000000000 [ 643.666510][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 643.666517][ T9690] R13: 00007f17cdc26038 R14: 00007f17cdc25fa0 R15: 00007ffc39747a18 [ 643.666533][ T9690] [ 643.666557][ T9690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 644.621289][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 645.661297][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.417524][ T30] audit: type=1400 audit(1788842354.979:740): avc: denied { write } for pid=9677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.473226][ T9702] netlink: 68 bytes leftover after parsing attributes in process `syz.0.988'. [ 646.701315][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.798140][ T30] audit: type=1400 audit(1788842355.359:741): avc: denied { write } for pid=9713 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.741322][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 648.228938][ T9722] 9p: Bad value for 'rfdno' [ 648.781290][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 649.821292][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.689819][ T30] audit: type=1400 audit(1788842359.249:742): avc: denied { ioctl } for pid=9726 comm="syz.5.993" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 650.861300][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 651.901300][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 652.941312][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 653.970393][ T30] audit: type=1400 audit(1788842362.529:743): avc: denied { write } for pid=9724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.993548][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 654.323721][ T30] audit: type=1400 audit(1788842362.889:744): avc: denied { write } for pid=9769 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.777319][ T9774] misc userio: Invalid payload size [ 655.021294][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.061427][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.389049][ T30] audit: type=1400 audit(1788842364.949:745): avc: denied { write } for pid=9772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.101292][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 657.662419][ T30] audit: type=1400 audit(1788842366.229:746): avc: denied { write } for pid=9801 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.106937][ T9812] hub 1-0:1.0: USB hub found [ 658.141297][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 658.163799][ T9812] hub 1-0:1.0: 1 port detected [ 659.181382][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.221404][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.473563][ T9845] 0x000000000006-0x000000020000 : "" [ 660.487338][ T9845] ftl_cs: FTL header corrupt! [ 660.516304][ T30] audit: type=1400 audit(1788842369.039:747): avc: denied { ioctl } for pid=9843 comm="syz.0.1015" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 660.561722][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 660.693815][ T30] audit: type=1400 audit(1788842369.259:748): avc: denied { read } for pid=9849 comm="syz.2.1016" dev="nsfs" ino=4026533073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 660.717408][ T9] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 660.727032][ T30] audit: type=1400 audit(1788842369.299:749): avc: denied { open } for pid=9849 comm="syz.2.1016" path="net:[4026533073]" dev="nsfs" ino=4026533073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 660.759435][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.759468][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 660.759501][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.882840][ T9] as10x_usb: device has been detected [ 660.889542][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 661.104677][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 661.261332][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 661.930359][ T30] audit: type=1400 audit(1788842370.479:750): avc: denied { append } for pid=9851 comm="syz.5.1017" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 662.301364][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 662.878139][ T9854] ------------[ cut here ]------------ [ 662.878155][ T9854] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 662.878169][ T9854] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.3.1014/9854 [ 662.899794][ T9854] Modules linked in: [ 662.903704][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.3.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.914583][ T9854] Tainted: [L]=SOFTLOCKUP [ 662.918888][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 662.928960][ T9854] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 662.934457][ T9854] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 3f 73 05 45 85 c0 75 13 48 8d 3d 8c 4a 76 05 48 c7 c6 c0 f4 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 662.954466][ T9854] RSP: 0018:ffffc90003d276a0 EFLAGS: 00010246 [ 662.960669][ T9854] RAX: 0000000000000003 RBX: ffff8880796d8010 RCX: 1ffffffff228a8a0 [ 662.968775][ T9854] RDX: 0000000000000000 RSI: ffffffff8beff4c0 RDI: ffffffff91485010 [ 662.976758][ T9854] RBP: ffffc90003d27810 R08: 0000000000000000 R09: 0000000000000000 [ 662.984740][ T9854] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 662.992726][ T9854] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888032ee7320 [ 663.000675][ T9854] FS: 00007f4b72cff6c0(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000 [ 663.009735][ T9854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.016356][ T9854] CR2: 0000000000000000 CR3: 00000000762f1000 CR4: 00000000003526f0 [ 663.024790][ T9854] Call Trace: [ 663.028053][ T9854] [ 663.030958][ T9854] ? lock_acquire+0x1d1/0x380 [ 663.035753][ T9854] ? as102_stream_ctrl+0x28/0xd0 [ 663.040677][ T9854] ? __pfx___mutex_lock+0x10/0x10 [ 663.045710][ T9854] ? __lock_acquire+0x5c0/0x1f40 [ 663.050625][ T9854] ? rcu_is_watching+0x13/0xc0 [ 663.055410][ T9854] ? __mutex_lock+0x26c/0x1bd0 [ 663.060153][ T9854] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 663.065996][ T9854] ? as102_stream_ctrl+0x28/0xd0 [ 663.070916][ T9854] as102_stream_ctrl+0x28/0xd0 [ 663.075776][ T9854] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 663.081494][ T9854] __dvb_frontend_open+0x122/0xf20 [ 663.086583][ T9854] dvb_frontend_open+0x77c/0x910 [ 663.091522][ T9854] ? find_held_lock+0x2b/0x80 [ 663.096176][ T9854] ? __pfx_dvb_frontend_open+0x10/0x10 [ 663.101659][ T9854] dvb_device_open+0x270/0x3b0 [ 663.106399][ T9854] ? __pfx_dvb_device_open+0x10/0x10 [ 663.111672][ T9854] chrdev_open+0x234/0x6a0 [ 663.116062][ T9854] ? __pfx_chrdev_open+0x10/0x10 [ 663.120970][ T9854] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 663.127287][ T9854] do_dentry_open+0x6ab/0x14d0 [ 663.132054][ T9854] ? __pfx_chrdev_open+0x10/0x10 [ 663.136987][ T9854] vfs_open+0x82/0x3f0 [ 663.141031][ T9854] path_openat+0x19fa/0x2440 [ 663.145614][ T9854] ? __pfx_path_openat+0x10/0x10 [ 663.150526][ T9854] do_file_open+0x20e/0x430 [ 663.155027][ T9854] ? __pfx_do_file_open+0x10/0x10 [ 663.160035][ T9854] ? _raw_spin_unlock+0x28/0x50 [ 663.165005][ T9854] ? alloc_fd+0x471/0x7a0 [ 663.169331][ T9854] do_sys_openat2+0x10f/0x1e0 [ 663.174107][ T9854] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.179282][ T9854] ? fput+0x7c/0x100 [ 663.183178][ T9854] __x64_sys_openat+0x12d/0x210 [ 663.188005][ T9854] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.193380][ T9854] do_syscall_64+0x123/0x790 [ 663.197947][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.203832][ T9854] RIP: 0033:0x7f4b71d5e98e [ 663.208221][ T9854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.227858][ T9854] RSP: 002b:00007f4b72cfeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.236270][ T9854] RAX: ffffffffffffffda RBX: 00007f4b72cff6c0 RCX: 00007f4b71d5e98e [ 663.244232][ T9854] RDX: 0000000000000802 RSI: 00007f4b72cfec00 RDI: ffffffffffffff9c [ 663.252203][ T9854] RBP: 00007f4b72cfec00 R08: 0000000000000000 R09: 0000000000000000 [ 663.260149][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 663.268254][ T9854] R13: 00007f4b72026128 R14: 00007f4b72026090 R15: 00007fff6989f5e8 [ 663.276327][ T9854] [ 663.279324][ T9854] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 663.286576][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.3.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.297393][ T9854] Tainted: [L]=SOFTLOCKUP [ 663.301689][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 663.311713][ T9854] Call Trace: [ 663.314976][ T9854] [ 663.317883][ T9854] dump_stack_lvl+0x100/0x190 [ 663.322539][ T9854] vpanic+0x553/0x970 [ 663.326491][ T9854] ? __pfx_vpanic+0x10/0x10 [ 663.330961][ T9854] ? lock_release+0x24d/0x310 [ 663.335610][ T9854] panic+0xd1/0xe0 [ 663.339301][ T9854] ? __pfx_panic+0x10/0x10 [ 663.343689][ T9854] check_panic_on_warn.cold+0x19/0x34 [ 663.349031][ T9854] ? __mutex_lock+0x944/0x1bd0 [ 663.353767][ T9854] __warn.cold+0x191/0x318 [ 663.358152][ T9854] __report_bug+0x30f/0x440 [ 663.362645][ T9854] ? __mutex_lock+0x944/0x1bd0 [ 663.367383][ T9854] ? __pfx___report_bug+0x10/0x10 [ 663.372380][ T9854] ? stack_depot_save_flags+0x27/0x9f0 [ 663.377812][ T9854] ? kasan_save_stack+0x3f/0x50 [ 663.382636][ T9854] ? kasan_save_stack+0x30/0x50 [ 663.387454][ T9854] ? kasan_save_track+0x14/0x30 [ 663.392286][ T9854] ? kasan_save_free_info+0x3b/0x70 [ 663.397473][ T9854] ? __kasan_slab_free+0x5f/0x80 [ 663.402381][ T9854] ? kfree+0x22b/0x6d0 [ 663.406424][ T9854] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 663.412472][ T9854] report_bug_entry+0xe2/0x290 [ 663.417212][ T9854] ? __mutex_lock+0x94b/0x1bd0 [ 663.421960][ T9854] handle_bug+0x1cd/0x2a0 [ 663.426266][ T9854] exc_invalid_op+0x17/0x50 [ 663.430740][ T9854] asm_exc_invalid_op+0x1a/0x20 [ 663.435565][ T9854] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 663.440912][ T9854] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 3f 73 05 45 85 c0 75 13 48 8d 3d 8c 4a 76 05 48 c7 c6 c0 f4 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 663.460491][ T9854] RSP: 0018:ffffc90003d276a0 EFLAGS: 00010246 [ 663.466528][ T9854] RAX: 0000000000000003 RBX: ffff8880796d8010 RCX: 1ffffffff228a8a0 [ 663.474818][ T9854] RDX: 0000000000000000 RSI: ffffffff8beff4c0 RDI: ffffffff91485010 [ 663.482760][ T9854] RBP: ffffc90003d27810 R08: 0000000000000000 R09: 0000000000000000 [ 663.490701][ T9854] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 663.498727][ T9854] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888032ee7320 [ 663.506701][ T9854] ? lock_acquire+0x1d1/0x380 [ 663.511362][ T9854] ? as102_stream_ctrl+0x28/0xd0 [ 663.516283][ T9854] ? __pfx___mutex_lock+0x10/0x10 [ 663.521288][ T9854] ? __lock_acquire+0x5c0/0x1f40 [ 663.526204][ T9854] ? rcu_is_watching+0x13/0xc0 [ 663.530963][ T9854] ? __mutex_lock+0x26c/0x1bd0 [ 663.535707][ T9854] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 663.541405][ T9854] ? as102_stream_ctrl+0x28/0xd0 [ 663.546334][ T9854] as102_stream_ctrl+0x28/0xd0 [ 663.551092][ T9854] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 663.556787][ T9854] __dvb_frontend_open+0x122/0xf20 [ 663.561872][ T9854] dvb_frontend_open+0x77c/0x910 [ 663.566784][ T9854] ? find_held_lock+0x2b/0x80 [ 663.571440][ T9854] ? __pfx_dvb_frontend_open+0x10/0x10 [ 663.576872][ T9854] dvb_device_open+0x270/0x3b0 [ 663.581612][ T9854] ? __pfx_dvb_device_open+0x10/0x10 [ 663.586872][ T9854] chrdev_open+0x234/0x6a0 [ 663.591265][ T9854] ? __pfx_chrdev_open+0x10/0x10 [ 663.596173][ T9854] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 663.602479][ T9854] do_dentry_open+0x6ab/0x14d0 [ 663.607213][ T9854] ? __pfx_chrdev_open+0x10/0x10 [ 663.612123][ T9854] vfs_open+0x82/0x3f0 [ 663.616166][ T9854] path_openat+0x19fa/0x2440 [ 663.620730][ T9854] ? __pfx_path_openat+0x10/0x10 [ 663.625643][ T9854] do_file_open+0x20e/0x430 [ 663.630119][ T9854] ? __pfx_do_file_open+0x10/0x10 [ 663.635118][ T9854] ? _raw_spin_unlock+0x28/0x50 [ 663.639941][ T9854] ? alloc_fd+0x471/0x7a0 [ 663.644249][ T9854] do_sys_openat2+0x10f/0x1e0 [ 663.648899][ T9854] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.654072][ T9854] ? fput+0x7c/0x100 [ 663.657946][ T9854] __x64_sys_openat+0x12d/0x210 [ 663.662773][ T9854] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.668122][ T9854] do_syscall_64+0x123/0x790 [ 663.672688][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.678554][ T9854] RIP: 0033:0x7f4b71d5e98e [ 663.682941][ T9854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.702519][ T9854] RSP: 002b:00007f4b72cfeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.710902][ T9854] RAX: ffffffffffffffda RBX: 00007f4b72cff6c0 RCX: 00007f4b71d5e98e [ 663.718844][ T9854] RDX: 0000000000000802 RSI: 00007f4b72cfec00 RDI: ffffffffffffff9c [ 663.726788][ T9854] RBP: 00007f4b72cfec00 R08: 0000000000000000 R09: 0000000000000000 [ 663.734728][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 663.742672][ T9854] R13: 00007f4b72026128 R14: 00007f4b72026090 R15: 00007fff6989f5e8 [ 663.750620][ T9854] [ 663.753664][ T9854] Kernel Offset: disabled [ 663.757965][ T9854] Rebooting in 86400 seconds..