last executing test programs: 1m6.455394038s ago: executing program 1 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045518, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x400000007ff) write$tcp_mem(r0, &(0x7f0000000180)={0x22, 0x20, 0x4, 0x20, 0x2}, 0x48) 1m4.759885169s ago: executing program 1 (id=1130): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) 1m4.281483342s ago: executing program 1 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x800, &(0x7f00007bd000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 1m3.420538879s ago: executing program 1 (id=1134): socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="ff00", 0x2) r2 = syz_io_uring_setup(0x395e, &(0x7f0000000540)={0x0, 0xedba, 0x0, 0x5, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x7, 0x8, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1m2.432470752s ago: executing program 1 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 1m0.105235511s ago: executing program 1 (id=1146): prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x10003}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x80000) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0x22) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000960) rmdir(&(0x7f0000000100)='./control\x00') 59.615087591s ago: executing program 32 (id=1146): prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x10003}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x80000) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0x22) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000960) rmdir(&(0x7f0000000100)='./control\x00') 9.333562885s ago: executing program 2 (id=1387): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = syz_io_uring_setup(0xefd, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x3c, 0x0, @fd=r5, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f00000006c0)={0x2, 0x6, 0x0, 0x0, 0x4}, 0x1}}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 9.331915735s ago: executing program 4 (id=1388): syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201002) dup(0xffffffffffffffff) 7.501509679s ago: executing program 0 (id=1394): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x4d, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x80, 0x2, 0x35e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x4003bfff, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0x4000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7.492851363s ago: executing program 2 (id=1395): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.491932729s ago: executing program 4 (id=1396): socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x455, 0x4800003e, 0xffffffffffffffff, 0x0) setgid(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) userfaultfd(0x80801) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x8) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1) r2 = socket(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x4, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 7.331700687s ago: executing program 2 (id=1397): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166e", 0x2, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) 7.260623324s ago: executing program 3 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r3, &(0x7f0000002880)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x6, 0x4) 7.239486009s ago: executing program 4 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 6.187829618s ago: executing program 3 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331, 0xa1}, 0x14}}, 0x40010) 6.177263818s ago: executing program 0 (id=1402): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 6.176672769s ago: executing program 4 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) 5.54308855s ago: executing program 5 (id=1404): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0x0) connect$netlink(r1, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x200080, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.688595206s ago: executing program 3 (id=1405): syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)={0x19c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}, {0x6}, {0x8, 0xb, 0xb85}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xf7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x3000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x162b}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.573498686s ago: executing program 0 (id=1406): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x1000, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)}}], 0x1, 0xc8040) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800500150002000000080012"], 0x64}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x2c0000) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.52774955s ago: executing program 4 (id=1407): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4.450929271s ago: executing program 5 (id=1408): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x43, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0x4018aee3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 4.368288849s ago: executing program 3 (id=1409): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e020000000000"], 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) ppoll(&(0x7f0000004700)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0) fanotify_mark(r3, 0x105, 0x5000003a, r1, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)=0x200) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000240)={0x8, {{0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd8c}}}, 0x88) 4.166990075s ago: executing program 0 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 4.159978972s ago: executing program 5 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000001c0), &(0x7f0000000680), 0x2, r3}, 0x38) 3.956420341s ago: executing program 2 (id=1412): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x27, 0x3, 0xd) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0xb}, {0xb, 0xc}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r2, 0x891f, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @empty}}) mprotect(&(0x7f00001dc000/0x3000)=nil, 0x3000, 0x100000a) r3 = socket$packet(0x11, 0x3, 0x300) unshare(0x20400) recvmmsg(r3, 0x0, 0x0, 0x2060, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) move_pages(0x0, 0x2000000000000027, &(0x7f00000003c0)=[&(0x7f00001f1000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0xc) 2.954811605s ago: executing program 5 (id=1413): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000200)='::%.0.0\xdb\x10\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {0x700, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r1, &(0x7f00000002c0)=""/153, 0x99) 2.840450779s ago: executing program 0 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x67}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) 2.616132738s ago: executing program 2 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 1.62153151s ago: executing program 5 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, r0, 0x9, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 1.607859251s ago: executing program 3 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndctrl(0x0, 0xce5, 0x2400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.129460979s ago: executing program 0 (id=1418): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r1, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x3031}, 0x0) write(r0, 0x0, 0x0) 265.62707ms ago: executing program 2 (id=1419): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 58.90608ms ago: executing program 3 (id=1420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) unshare(0x20400) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dsp(0xffffffffffffff9c, 0x0, 0x242, 0x0) 58.010423ms ago: executing program 5 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x200009}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10002, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x401, 0x80, 0x89, 0xfffffffffffffffd, 0xc, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=1422): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x8001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 152.440255][ T31] audit: type=1326 audit(1791222810.232:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.440299][ T31] audit: type=1326 audit(1791222810.232:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.440336][ T31] audit: type=1326 audit(1791222810.232:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.440673][ T31] audit: type=1326 audit(1791222810.232:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.441695][ T31] audit: type=1326 audit(1791222810.232:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.441874][ T31] audit: type=1326 audit(1791222810.232:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.551263][ T31] audit: type=1326 audit(1791222810.322:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.4.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa75af9e199 code=0x7ffc0000 [ 152.863936][ T7682] 9pnet_fd: Insufficient options for proto=fd [ 153.463804][ T7695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.635914][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 155.635931][ T31] audit: type=1400 audit(1791222813.432:566): avc: denied { write } for pid=7755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.831247][ T31] audit: type=1400 audit(1791222813.622:567): avc: denied { write } for pid=7773 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.703127][ T31] audit: type=1400 audit(1791222815.492:568): avc: denied { write } for pid=7785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.843304][ T31] audit: type=1400 audit(1791222815.572:569): avc: denied { write } for pid=7801 comm="syz.2.534" name="dev" dev="proc" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 158.344855][ T31] audit: type=1400 audit(1791222816.132:570): avc: denied { write } for pid=7821 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.781865][ T31] audit: type=1400 audit(1791222816.572:571): avc: denied { setopt } for pid=7832 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.804768][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 158.980480][ T7834] hsr_slave_0 (unregistering): left promiscuous mode [ 159.946852][ T5817] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.112899][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 160.114259][ T5817] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 160.116841][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.116865][ T5817] usb 1-1: Product: syz [ 160.116879][ T5817] usb 1-1: Manufacturer: syz [ 160.116894][ T5817] usb 1-1: SerialNumber: syz [ 161.248899][ T7837] mmap: syz.0.542 (7837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.428442][ T5817] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 161.436386][ T5817] usb 1-1: USB disconnect, device number 10 [ 161.537817][ T7863] tipc: Failed to remove unknown binding: 66,0,0/0:370432071/370432073 [ 161.537845][ T7863] tipc: Failed to remove unknown binding: 66,0,0/0:370432071/370432072 [ 161.538443][ T7863] tipc: Failed to remove unknown binding: 66,0,0/0:370432071/370432073 [ 161.538464][ T7863] tipc: Failed to remove unknown binding: 66,0,0/0:370432071/370432072 [ 161.653647][ T31] audit: type=1400 audit(1791222819.442:572): avc: denied { create } for pid=7865 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.655467][ T31] audit: type=1400 audit(1791222819.452:573): avc: denied { load_policy } for pid=7865 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.656079][ T7866] SELinux: failed to load policy [ 162.124992][ T31] audit: type=1400 audit(1791222819.922:574): avc: denied { audit_write } for pid=7882 comm="syz.0.555" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.180478][ T31] audit: type=1400 audit(1791222819.972:575): avc: denied { read } for pid=7882 comm="syz.0.555" name="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.181035][ T31] audit: type=1400 audit(1791222819.972:576): avc: denied { read open } for pid=7882 comm="syz.0.555" path="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.204883][ T31] audit: type=1400 audit(1791222819.982:577): avc: denied { read } for pid=7882 comm="syz.0.555" name="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.204926][ T31] audit: type=1400 audit(1791222819.982:578): avc: denied { watch watch_reads } for pid=7882 comm="syz.0.555" path="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.514272][ T31] audit: type=1400 audit(1791222820.312:579): avc: denied { getopt } for pid=7885 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.592748][ T31] audit: type=1400 audit(1791222820.382:580): avc: denied { setopt } for pid=7887 comm="syz.1.556" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.733803][ T31] audit: type=1400 audit(1791222820.532:581): avc: denied { write } for pid=7895 comm="syz.1.561" name="functions" dev="configfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.223839][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 163.223875][ T7912] netlink: 'syz.2.567': attribute type 7 has an invalid length. [ 163.223887][ T7912] netlink: 'syz.2.567': attribute type 8 has an invalid length. [ 163.223900][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 163.228888][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 163.228918][ T7912] netlink: 'syz.2.567': attribute type 7 has an invalid length. [ 163.228929][ T7912] netlink: 'syz.2.567': attribute type 8 has an invalid length. [ 163.228940][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 163.382115][ T7918] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 163.657523][ T7925] FAULT_INJECTION: forcing a failure. [ 163.657523][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 163.657559][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.1.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.657587][ T7925] Tainted: [L]=SOFTLOCKUP [ 163.657594][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.657607][ T7925] Call Trace: [ 163.657614][ T7925] [ 163.657622][ T7925] dump_stack_lvl+0x100/0x190 [ 163.657657][ T7925] should_fail_ex.cold+0x5/0xa [ 163.657686][ T7925] should_failslab+0xc2/0x120 [ 163.657714][ T7925] __kmalloc_cache_noprof+0x91/0x6d0 [ 163.657735][ T7925] ? nexthop_alloc+0x3c/0x1f0 [ 163.657764][ T7925] nexthop_alloc+0x3c/0x1f0 [ 163.657790][ T7925] rtm_new_nexthop+0x2779/0x8990 [ 163.657819][ T7925] ? kfree_skbmem+0x19a/0x210 [ 163.657845][ T7925] ? stack_trace_save+0x8e/0xc0 [ 163.657866][ T7925] ? __pfx_stack_trace_save+0x10/0x10 [ 163.657892][ T7925] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 163.657920][ T7925] ? kfree_skbmem+0x19a/0x210 [ 163.657940][ T7925] ? kasan_save_stack+0x3f/0x50 [ 163.657964][ T7925] ? kasan_save_stack+0x30/0x50 [ 163.657992][ T7925] ? kasan_save_track+0x14/0x30 [ 163.658016][ T7925] ? kasan_save_free_info+0x3b/0x70 [ 163.658034][ T7925] ? __kasan_slab_free+0x5f/0x80 [ 163.658058][ T7925] ? kmem_cache_free+0x127/0x6c0 [ 163.658077][ T7925] ? kfree_skbmem+0x19a/0x210 [ 163.658096][ T7925] ? consume_skb+0xd1/0x110 [ 163.658126][ T7925] ? nlmon_xmit+0xa5/0xe0 [ 163.658145][ T7925] ? dev_hard_start_xmit+0x121/0x760 [ 163.658167][ T7925] ? __dev_queue_xmit+0x1c25/0x4a40 [ 163.658190][ T7925] ? netlink_deliver_tap+0xa4d/0xcc0 [ 163.658213][ T7925] ? netlink_unicast+0x62b/0x850 [ 163.658238][ T7925] ? netlink_sendmsg+0x8b0/0xda0 [ 163.658262][ T7925] ? ____sys_sendmsg+0xa4d/0xbe0 [ 163.658282][ T7925] ? ___sys_sendmsg+0x190/0x1e0 [ 163.658302][ T7925] ? __sys_sendmsg+0x160/0x210 [ 163.658328][ T7925] ? do_syscall_64+0x123/0x790 [ 163.658349][ T7925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.658391][ T7925] ? lock_acquire+0x1d1/0x380 [ 163.658413][ T7925] ? avc_has_perm_noaudit+0x56/0x470 [ 163.658444][ T7925] ? find_held_lock+0x2b/0x80 [ 163.658489][ T7925] ? __lock_acquire+0x5c0/0x1f40 [ 163.658522][ T7925] ? lock_acquire+0x1d1/0x380 [ 163.658544][ T7925] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 163.658563][ T7925] ? find_held_lock+0x2b/0x80 [ 163.658592][ T7925] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.658610][ T7925] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.658632][ T7925] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 163.658660][ T7925] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 163.658677][ T7925] rtnetlink_rcv_msg+0x95e/0xe90 [ 163.658698][ T7925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.658725][ T7925] ? ref_tracker_free+0x37e/0x6c0 [ 163.658759][ T7925] netlink_rcv_skb+0x159/0x420 [ 163.658785][ T7925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.658805][ T7925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.658840][ T7925] ? netlink_deliver_tap+0x1ae/0xcc0 [ 163.658870][ T7925] netlink_unicast+0x585/0x850 [ 163.658901][ T7925] ? __pfx_netlink_unicast+0x10/0x10 [ 163.658936][ T7925] netlink_sendmsg+0x8b0/0xda0 [ 163.658967][ T7925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.659007][ T7925] ? selinux_socket_sendmsg+0x198/0x2f0 [ 163.659038][ T7925] ____sys_sendmsg+0xa4d/0xbe0 [ 163.659059][ T7925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.659089][ T7925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.659123][ T7925] ___sys_sendmsg+0x190/0x1e0 [ 163.659148][ T7925] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.659170][ T7925] ? futex_wait+0x11e/0x370 [ 163.659200][ T7925] ? find_held_lock+0x2b/0x80 [ 163.659240][ T7925] __sys_sendmsg+0x160/0x210 [ 163.659267][ T7925] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.659311][ T7925] do_syscall_64+0x123/0x790 [ 163.659336][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.659356][ T7925] RIP: 0033:0x7fb39079e199 [ 163.659373][ T7925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.659392][ T7925] RSP: 002b:00007fb3916c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.659414][ T7925] RAX: ffffffffffffffda RBX: 00007fb390a25fa0 RCX: 00007fb39079e199 [ 163.659427][ T7925] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 163.659439][ T7925] RBP: 00007fb3908350b8 R08: 0000000000000000 R09: 0000000000000000 [ 163.659451][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.659463][ T7925] R13: 00007fb390a26038 R14: 00007fb390a25fa0 R15: 00007ffdc4d5f258 [ 163.659488][ T7925] [ 166.830000][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 166.830017][ T31] audit: type=1400 audit(1791222824.622:594): avc: denied { write } for pid=8008 comm="syz.0.587" name="sda" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.917440][ T31] audit: type=1400 audit(1791222824.712:595): avc: denied { write } for pid=7986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.255210][ T31] audit: type=1400 audit(1791222825.052:596): avc: denied { write } for pid=8016 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.658250][ T8023] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 167.710595][ T8023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.793907][ T8027] bond3: (slave geneve2): making interface the new active one [ 167.852151][ T8027] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 168.115340][ T31] audit: type=1400 audit(1791222825.912:597): avc: denied { view } for pid=8033 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 168.639862][ T31] audit: type=1400 audit(1791222826.432:598): avc: denied { create } for pid=8042 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 168.663307][ T31] audit: type=1400 audit(1791222826.462:599): avc: denied { write } for pid=8042 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 168.996512][ T31] audit: type=1400 audit(1791222826.792:600): avc: denied { read } for pid=8037 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.112085][ T31] audit: type=1400 audit(1791222826.902:601): avc: denied { create } for pid=8059 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 169.207630][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 169.285909][ T8066] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 169.628334][ T8072] netlink: zone id is out of range [ 169.628497][ T8072] netlink: zone id is out of range [ 169.628506][ T8072] netlink: zone id is out of range [ 170.603011][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.607085][ T8066] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 170.607172][ T8066] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 170.664370][ T31] audit: type=1400 audit(1791222828.462:602): avc: denied { listen } for pid=8079 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.666711][ T31] audit: type=1400 audit(1791222828.462:603): avc: denied { accept } for pid=8079 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.669634][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 170.785997][ T4927] Bluetooth: hci2: unexpected subevent 0x01 length: 19 > 18 [ 170.786024][ T4927] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 171.999118][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 171.999138][ T31] audit: type=1400 audit(1791222829.792:605): avc: denied { name_connect } for pid=8115 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 172.046855][ T31] audit: type=1400 audit(1791222829.842:606): avc: denied { listen } for pid=8115 comm="syz.2.617" lport=59341 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.047446][ T31] audit: type=1400 audit(1791222829.842:607): avc: denied { create } for pid=8117 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.064652][ T31] audit: type=1400 audit(1791222829.852:608): avc: denied { setopt } for pid=8117 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.073208][ T31] audit: type=1400 audit(1791222829.852:609): avc: denied { read } for pid=8117 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.074767][ T31] audit: type=1400 audit(1791222829.852:610): avc: denied { read } for pid=8117 comm="syz.0.619" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.074805][ T31] audit: type=1400 audit(1791222829.852:611): avc: denied { open } for pid=8117 comm="syz.0.619" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.079131][ T8120] binder: 8117:8120 ioctl c00c620f 200000000000 returned -22 [ 172.079176][ T31] audit: type=1400 audit(1791222829.872:612): avc: denied { ioctl } for pid=8117 comm="syz.0.619" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.363699][ T31] audit: type=1400 audit(1791222830.152:613): avc: denied { write } for pid=8130 comm="syz.0.625" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.363744][ T31] audit: type=1400 audit(1791222830.162:614): avc: denied { ioctl } for pid=8130 comm="syz.0.625" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.844161][ T5612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 172.844199][ T5612] Bluetooth: hci0: MSFT extension not registered [ 174.279280][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 174.426847][ T8169] FAULT_INJECTION: forcing a failure. [ 174.426847][ T8169] name failslab, interval 1, probability 0, space 0, times 0 [ 174.426883][ T8169] CPU: 1 UID: 0 PID: 8169 Comm: syz.4.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.426912][ T8169] Tainted: [L]=SOFTLOCKUP [ 174.426920][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.426931][ T8169] Call Trace: [ 174.426939][ T8169] [ 174.426948][ T8169] dump_stack_lvl+0x100/0x190 [ 174.426983][ T8169] should_fail_ex.cold+0x5/0xa [ 174.427012][ T8169] should_failslab+0xc2/0x120 [ 174.427042][ T8169] __kvmalloc_node_noprof+0x113/0x9b0 [ 174.427068][ T8169] ? __pfx___mutex_lock+0x10/0x10 [ 174.427092][ T8169] ? nf_hook_entries_grow+0x6b9/0x870 [ 174.427123][ T8169] nf_hook_entries_grow+0x6b9/0x870 [ 174.427159][ T8169] __nf_register_net_hook+0x112/0x780 [ 174.427192][ T8169] nf_register_net_hook+0xdb/0x170 [ 174.427220][ T8169] nf_register_net_hooks+0x5d/0xd0 [ 174.427248][ T8169] ? __pfx_selinux_nf_register+0x10/0x10 [ 174.427272][ T8169] ops_init+0x1e2/0x5f0 [ 174.427305][ T8169] setup_net+0x118/0x3a0 [ 174.427334][ T8169] ? __pfx_setup_net+0x10/0x10 [ 174.427377][ T8169] copy_net_ns+0x345/0x7a0 [ 174.427399][ T8169] create_new_namespaces+0x3ea/0xac0 [ 174.427430][ T8169] unshare_nsproxy_namespaces+0xf2/0x220 [ 174.427457][ T8169] ksys_unshare+0x4a2/0xa70 [ 174.427482][ T8169] ? __pfx_ksys_unshare+0x10/0x10 [ 174.427516][ T8169] __x64_sys_unshare+0x31/0x40 [ 174.427540][ T8169] do_syscall_64+0x123/0x790 [ 174.427564][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.427585][ T8169] RIP: 0033:0x7fa75af9e199 [ 174.427602][ T8169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.427621][ T8169] RSP: 002b:00007fa75bdcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 174.427641][ T8169] RAX: ffffffffffffffda RBX: 00007fa75b225fa0 RCX: 00007fa75af9e199 [ 174.427654][ T8169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 174.427666][ T8169] RBP: 00007fa75b0350b8 R08: 0000000000000000 R09: 0000000000000000 [ 174.427677][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.427689][ T8169] R13: 00007fa75b226038 R14: 00007fa75b225fa0 R15: 00007ffec5354108 [ 174.427716][ T8169] [ 174.778816][ T8176] netlink: zone id is out of range [ 174.778967][ T8176] netlink: zone id is out of range [ 174.779002][ T8176] netlink: zone id is out of range [ 177.096143][ T8196] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 177.189894][ T8196] bond3: entered promiscuous mode [ 177.194465][ T8196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.232051][ T8202] macvtap1: entered allmulticast mode [ 177.273064][ T8196] bond3: (slave bridge2): making interface the new active one [ 177.273085][ T8196] bridge2: entered promiscuous mode [ 177.275590][ T8196] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 177.588334][ T8212] ref_ctr_offset mismatch. inode: 0x297 offset: 0x0 ref_ctr_offset(old): 0x30 ref_ctr_offset(new): 0x0 [ 178.052843][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 178.203262][ T9] usb 3-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 178.204083][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 178.204099][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 178.204118][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.206459][ T8213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.206572][ T8213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.272828][ T5612] Bluetooth: hci5: Can't claim NULL iso interface [ 178.420514][ T5612] Bluetooth: hci5: Failed to get device id (-71) [ 178.420535][ T5612] Bluetooth: hci5: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 178.421075][ T9] usb 3-1: USB disconnect, device number 5 [ 179.392347][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 179.392365][ T31] audit: type=1400 audit(1791222837.182:625): avc: denied { write } for pid=8232 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.531853][ T31] audit: type=1400 audit(1791222837.322:626): avc: denied { setopt } for pid=8235 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.587327][ T31] audit: type=1400 audit(1791222837.382:627): avc: denied { kexec_image_load } for pid=8229 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 179.869902][ T8242] batman_adv: batadv0: Interface deactivated: dummy0 [ 179.869927][ T8242] batman_adv: batadv0: Removing interface: dummy0 [ 179.879471][ T8242] bridge_slave_0: left allmulticast mode [ 179.879492][ T8242] bridge_slave_0: left promiscuous mode [ 179.881055][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.360525][ T8242] bridge_slave_1: left allmulticast mode [ 180.360549][ T8242] bridge_slave_1: left promiscuous mode [ 180.360696][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.430594][ T8242] bond0: (slave bond_slave_0): Releasing backup interface [ 180.469932][ T8242] bond_slave_0: left promiscuous mode [ 180.480308][ T8242] bond0: (slave bond_slave_1): Releasing backup interface [ 180.482398][ T8242] bond_slave_1: left promiscuous mode [ 180.510242][ T8242] team0: Port device team_slave_0 removed [ 180.527745][ T8242] team0: Port device team_slave_1 removed [ 180.529982][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.530000][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.533867][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.533882][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.562656][ T8242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.588722][ T8246] tipc: Started in network mode [ 180.588748][ T8246] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 180.588911][ T8246] tipc: Enabled bearer , priority 0 [ 180.588985][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 180.588999][ T8248] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 180.597320][ T6484] tipc: Resetting bearer [ 180.618730][ T8250] syzkaller0: entered promiscuous mode [ 180.618749][ T8250] syzkaller0: entered allmulticast mode [ 180.736361][ T8257] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.232237][ T8269] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 181.288464][ T8269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.358689][ T8274] bond2: (slave veth5): Enslaving as an active interface with a down link [ 181.423870][ T31] audit: type=1400 audit(1791222839.222:628): avc: denied { execute } for pid=8272 comm="syz.3.671" path=2F6D656D66643A14A3BB07202864656C6574656429 dev="hugetlbfs" ino=33962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 181.478423][ T8269] bond2: (slave dummy0): making interface the new active one [ 181.490325][ T8269] dummy0: entered promiscuous mode [ 181.497275][ T8269] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 181.534369][ T8269] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 181.534384][ T8269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.669'. [ 181.570234][ T8269] bond2: (slave dummy0): Releasing active interface [ 181.606295][ T5817] tipc: Node number set to 11578026 [ 182.883827][ T8298] key id 000004d2 not found [ 185.213862][ T8344] FAULT_INJECTION: forcing a failure. [ 185.213862][ T8344] name fail_futex, interval 1, probability 0, space 0, times 1 [ 185.213886][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.2.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.213902][ T8344] Tainted: [L]=SOFTLOCKUP [ 185.213907][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.213914][ T8344] Call Trace: [ 185.213919][ T8344] [ 185.213923][ T8344] dump_stack_lvl+0x100/0x190 [ 185.213944][ T8344] should_fail_ex.cold+0x5/0xa [ 185.213963][ T8344] get_futex_key+0x1d0/0x14f0 [ 185.213981][ T8344] ? __pfx_get_futex_key+0x10/0x10 [ 185.213997][ T8344] ? tomoyo_write_control+0x9aa/0x13a0 [ 185.214013][ T8344] futex_wake+0xf4/0x5e0 [ 185.214024][ T8344] ? lock_acquire+0x1d1/0x380 [ 185.214039][ T8344] ? find_held_lock+0x2b/0x80 [ 185.214057][ T8344] ? __pfx_futex_wake+0x10/0x10 [ 185.214071][ T8344] ? rcu_read_lock_any_held+0x6a/0x90 [ 185.214090][ T8344] ? find_held_lock+0x2b/0x80 [ 185.214105][ T8344] ? ksys_write+0x190/0x250 [ 185.214118][ T8344] ? ksys_write+0x190/0x250 [ 185.214132][ T8344] do_futex+0x2b2/0x440 [ 185.214149][ T8344] ? __pfx_do_futex+0x10/0x10 [ 185.214165][ T8344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.214184][ T8344] __x64_sys_futex+0x34f/0x4d0 [ 185.214201][ T8344] ? fput+0x7c/0x100 [ 185.214217][ T8344] ? __pfx___x64_sys_futex+0x10/0x10 [ 185.214234][ T8344] ? ksys_write+0x1ac/0x250 [ 185.214248][ T8344] ? __pfx_ksys_write+0x10/0x10 [ 185.214276][ T8344] do_syscall_64+0x123/0x790 [ 185.214298][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.214310][ T8344] RIP: 0033:0x7f840219e199 [ 185.214320][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.214331][ T8344] RSP: 002b:00007f84030d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.214343][ T8344] RAX: ffffffffffffffda RBX: 00007f8402425fa8 RCX: 00007f840219e199 [ 185.214350][ T8344] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8402425fac [ 185.214358][ T8344] RBP: 00007f8402425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 185.214364][ T8344] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 185.214371][ T8344] R13: 00007f8402426038 R14: 00007ffc4ad95490 R15: 00007ffc4ad95578 [ 185.214386][ T8344] [ 185.578736][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 185.684291][ T8318] Bluetooth: hci2: command 0x0406 tx timeout [ 185.684330][ T8318] Bluetooth: hci4: command 0x0406 tx timeout [ 185.684353][ T8318] Bluetooth: hci3: command 0x0406 tx timeout [ 185.684375][ T8318] Bluetooth: hci1: command 0x0406 tx timeout [ 185.809995][ T31] audit: type=1400 audit(1791222843.602:629): avc: denied { write } for pid=8368 comm="syz.1.700" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.811930][ T8369] binder: 8368:8369 ioctl c0306201 200000000080 returned -14 [ 185.815039][ T8369] binder: 8368:8369 ioctl c0306201 2000000003c0 returned -14 [ 185.837196][ T31] audit: type=1400 audit(1791222843.612:630): avc: denied { map } for pid=8368 comm="syz.1.700" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.971605][ T8383] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 186.991739][ T8383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.019948][ T8383] bond1: (slave veth3): Enslaving as an active interface with a down link [ 187.033710][ T8383] dummy0: left promiscuous mode [ 187.038241][ T8383] bond1: (slave dummy0): making interface the new active one [ 187.039040][ T8383] dummy0: entered promiscuous mode [ 187.039270][ T8383] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 187.048074][ T8383] netlink: 'syz.4.705': attribute type 10 has an invalid length. [ 187.048092][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.705'. [ 187.092421][ T8383] bond1: (slave dummy0): Releasing active interface [ 187.100640][ T189] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.144281][ T31] audit: type=1400 audit(1791222844.942:631): avc: denied { create } for pid=8385 comm="syz.2.706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.151746][ T31] audit: type=1400 audit(1791222844.942:632): avc: denied { setopt } for pid=8385 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.261312][ T31] audit: type=1400 audit(1791222845.052:633): avc: denied { connect } for pid=8378 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.282576][ T189] usb 1-1: Using ep0 maxpacket: 8 [ 187.288218][ T189] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 187.289251][ T189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.289271][ T189] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.289316][ T189] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 187.291388][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.291409][ T189] usb 1-1: Product: syz [ 187.291422][ T189] usb 1-1: Manufacturer: syz [ 187.291436][ T189] usb 1-1: SerialNumber: syz [ 188.003033][ T31] audit: type=1400 audit(1791222845.702:634): avc: denied { write } for pid=8374 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.133877][ T189] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 188.139396][ T189] usb 1-1: USB disconnect, device number 11 [ 188.210742][ T8398] udevd[8398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.269306][ T31] audit: type=1400 audit(1791222846.062:635): avc: denied { mount } for pid=8399 comm="syz.1.710" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.462481][ T31] audit: type=1400 audit(1791222846.252:636): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.522481][ T31] audit: type=1400 audit(1791222846.312:637): avc: denied { read write } for pid=8403 comm="syz.4.712" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 188.522723][ T31] audit: type=1400 audit(1791222846.312:638): avc: denied { open } for pid=8403 comm="syz.4.712" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 188.576148][ T8407] FAULT_INJECTION: forcing a failure. [ 188.576148][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 188.576178][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.1.713 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.576203][ T8407] Tainted: [L]=SOFTLOCKUP [ 188.576210][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.576220][ T8407] Call Trace: [ 188.576225][ T8407] [ 188.576233][ T8407] dump_stack_lvl+0x100/0x190 [ 188.576266][ T8407] should_fail_ex.cold+0x5/0xa [ 188.576292][ T8407] should_failslab+0xc2/0x120 [ 188.576316][ T8407] kmem_cache_alloc_noprof+0x92/0x6a0 [ 188.576344][ T8407] ? __anon_vma_prepare+0xae/0x690 [ 188.576367][ T8407] __anon_vma_prepare+0xae/0x690 [ 188.576383][ T8407] ? rcu_read_unlock+0x2d/0xb0 [ 188.576402][ T8407] ? rcu_read_unlock+0x2d/0xb0 [ 188.576422][ T8407] __vmf_anon_prepare+0x11f/0x250 [ 188.576449][ T8407] do_wp_page+0xd14/0x45c0 [ 188.576477][ T8407] ? lock_acquire+0x1d1/0x380 [ 188.576499][ T8407] ? __pfx_do_wp_page+0x10/0x10 [ 188.576526][ T8407] ? do_raw_spin_lock+0x128/0x260 [ 188.576549][ T8407] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.576577][ T8407] __handle_mm_fault+0x1cd2/0x2f60 [ 188.576604][ T8407] ? lock_vma_under_rcu+0x11d/0x590 [ 188.576629][ T8407] ? __pfx___handle_mm_fault+0x10/0x10 [ 188.576663][ T8407] ? lock_vma_under_rcu+0x17c/0x590 [ 188.576712][ T8407] handle_mm_fault+0x363/0xa20 [ 188.576747][ T8407] do_user_addr_fault+0x59c/0x12f0 [ 188.576780][ T8407] exc_page_fault+0x6f/0xd0 [ 188.576804][ T8407] asm_exc_page_fault+0x26/0x30 [ 188.576821][ T8407] RIP: 0033:0x7fb390652d1f [ 188.576836][ T8407] Code: 24 10 4c 89 44 24 08 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 74 24 18 4c 8b 64 24 10 4c 8b 6c 24 08 48 89 da e8 63 b4 14 00 8b 13 <49> 89 1e b9 01 80 00 00 48 89 c5 8b 43 40 41 89 e8 8d 14 90 8b 43 [ 188.576852][ T8407] RSP: 002b:00007fb3916c5fc0 EFLAGS: 00010286 [ 188.576866][ T8407] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: ffffffffffffffe8 [ 188.576876][ T8407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001004175 [ 188.576885][ T8407] RBP: 00007fb3908350b8 R08: 0000000000000000 R09: 0000000000000000 [ 188.576894][ T8407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.576903][ T8407] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdc4d5f258 [ 188.576923][ T8407] [ 188.577079][ T8407] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 188.631309][ T189] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 188.676954][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.677003][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.742125][ T189] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.094304][ T8424] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 190.180374][ T8424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.235204][ T8436] bond4: (slave veth7): Enslaving as an active interface with a down link [ 190.320643][ T8424] dummy0: left promiscuous mode [ 190.335381][ T8424] bond4: (slave dummy0): making interface the new active one [ 190.340436][ T8424] dummy0: entered promiscuous mode [ 190.340716][ T8424] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 190.371995][ T8424] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 190.372009][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 190.375816][ T8424] bond4: (slave dummy0): Releasing active interface [ 190.543466][ T8450] bond2: entered allmulticast mode [ 190.543490][ T8450] wireguard0: entered allmulticast mode [ 190.652839][ T984] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.802840][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 190.983659][ T984] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.983823][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 190.983836][ T31] audit: type=1326 audit(1791222848.782:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.983924][ T31] audit: type=1326 audit(1791222848.782:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.985092][ T984] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 190.985135][ T984] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.985157][ T984] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.985185][ T984] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.985206][ T984] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.985241][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.985285][ T31] audit: type=1326 audit(1791222848.782:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.985465][ T31] audit: type=1326 audit(1791222848.782:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.985576][ T31] audit: type=1326 audit(1791222848.782:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.986036][ T31] audit: type=1326 audit(1791222848.782:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.986141][ T31] audit: type=1326 audit(1791222848.782:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.986262][ T31] audit: type=1326 audit(1791222848.782:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.986610][ T31] audit: type=1326 audit(1791222848.782:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 190.986787][ T31] audit: type=1326 audit(1791222848.782:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840219e199 code=0x7ffc0000 [ 191.844815][ T8470] usbtmc 5-1:16.0: simple control status returned 0 [ 192.046936][ T4939] usb 5-1: USB disconnect, device number 10 [ 192.114589][ T8474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.213944][ T8463] ceph: No mds server is up or the cluster is laggy [ 192.558797][ T8496] syzkaller0: entered promiscuous mode [ 192.810746][ T8499] netlink: 300 bytes leftover after parsing attributes in process `syz.3.742'. [ 193.960847][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 8 < 9 [ 193.960880][ T4927] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 193.960950][ T4927] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 193.960967][ T4927] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 193.961703][ T4927] Bluetooth: hci3: unexpected event for opcode 0x203b [ 194.044324][ T5608] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9 [ 194.044353][ T5608] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 194.059926][ T5608] Bluetooth: hci3: unexpected event for opcode 0x203b [ 195.612310][ T8531] l2tp_ppp: sess 2/0: no socket in recv [ 195.873241][ T8533] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 196.173000][ T4927] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 196.173055][ T4927] Bluetooth: hci0: MSFT extension not registered [ 196.373697][ T8546] kvm: pic: single mode not supported [ 196.374383][ T8546] kvm: pic: non byte read [ 196.375562][ T8546] kvm: pic: level sensitive irq not supported [ 196.375641][ T8546] kvm: pic: non byte read [ 196.375908][ T8546] kvm: pic: level sensitive irq not supported [ 196.375956][ T8546] kvm: pic: non byte read [ 196.376741][ T8546] kvm: pic: level sensitive irq not supported [ 196.376790][ T8546] kvm: pic: non byte read [ 196.376951][ T8546] kvm: pic: level sensitive irq not supported [ 196.376994][ T8546] kvm: pic: non byte read [ 196.377152][ T8546] kvm: pic: level sensitive irq not supported [ 196.377196][ T8546] kvm: pic: non byte read [ 196.377989][ T8546] kvm: pic: level sensitive irq not supported [ 196.378038][ T8546] kvm: pic: non byte read [ 196.378234][ T8546] kvm: pic: level sensitive irq not supported [ 196.378617][ T8546] kvm: pic: non byte read [ 197.952156][ T8564] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 197.968208][ T8561] fuse: fd is not a fuse device [ 198.118790][ T8564] bond2: entered promiscuous mode [ 198.122539][ T8564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.368254][ T8572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.368571][ T8572] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 198.368591][ T8572] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 198.514237][ T8585] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.767'. [ 198.864779][ T8572] bond2: (slave wireguard0): making interface the new active one [ 198.864804][ T8572] wireguard0: entered promiscuous mode [ 198.868647][ T8572] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 199.021486][ T8588] syzkaller0: entered promiscuous mode [ 199.021506][ T8588] syzkaller0: entered allmulticast mode [ 199.370907][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'. [ 199.413102][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 199.892536][ T8607] syzkaller0: entered promiscuous mode [ 199.892550][ T8607] syzkaller0: entered allmulticast mode [ 199.923567][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 199.923585][ T31] audit: type=1400 audit(1791222857.722:670): avc: denied { ioctl } for pid=8606 comm="syz.4.775" path="socket:[36841]" dev="sockfs" ino=36841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.032971][ T5817] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 200.183567][ T5817] usb 3-1: not running at top speed; connect to a high speed hub [ 200.183587][ T5817] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 200.184273][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.185340][ T5817] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 200.185360][ T5817] usb 3-1: Product: syz [ 200.185374][ T5817] usb 3-1: Manufacturer: syz [ 200.191284][ T5817] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 200.262842][ T189] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.391164][ T5817] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 200.392170][ T5817] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 200.392216][ T5817] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 200.413324][ T189] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.413503][ T984] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 200.415271][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.420932][ T5817] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 200.462904][ T189] usb 5-1: config 0 descriptor?? [ 200.472571][ T5817] usb 3-1: USB disconnect, device number 6 [ 200.480539][ T189] cp210x 5-1:0.0: cp210x converter detected [ 200.481060][ T31] audit: type=1400 audit(1791222858.272:671): avc: denied { bind } for pid=8616 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.614537][ T984] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 200.617342][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 200.617369][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 200.617400][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.623380][ T8612] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 200.623475][ T8612] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 200.698166][ T4927] Bluetooth: hci5: Can't claim NULL iso interface [ 200.725582][ T5608] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 200.863031][ T9] usb 1-1: USB disconnect, device number 12 [ 200.864193][ T4927] Bluetooth: hci5: Failed to get device id (-71) [ 200.864211][ T4927] Bluetooth: hci5: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 200.871047][ T189] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 200.908008][ T189] usb 5-1: cp210x converter now attached to ttyUSB0 [ 200.992159][ T8640] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 201.085822][ T5817] usb 5-1: USB disconnect, device number 11 [ 201.298010][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.362379][ T5817] cp210x 5-1:0.0: device disconnected [ 201.621319][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.122024][ T31] audit: type=1400 audit(1791222859.912:672): avc: denied { read } for pid=8650 comm="syz.4.788" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.148162][ T8652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.789'. [ 202.231274][ T31] audit: type=1400 audit(1791222860.022:673): avc: denied { wake_alarm } for pid=8650 comm="syz.4.788" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.426377][ T31] audit: type=1400 audit(1791222861.222:674): avc: denied { ioctl } for pid=8668 comm="syz.4.796" path="socket:[36953]" dev="sockfs" ino=36953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.919720][ T31] audit: type=1400 audit(1791222861.712:675): avc: denied { bind } for pid=8677 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 203.921132][ T31] audit: type=1400 audit(1791222861.712:676): avc: denied { listen } for pid=8677 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.084059][ T7462] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 204.262869][ T4939] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.395603][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.414076][ T4939] usb 1-1: Using ep0 maxpacket: 8 [ 204.414555][ T4939] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 204.415018][ T4939] usb 1-1: config 0 has no interfaces? [ 204.419551][ T4939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.419573][ T4939] usb 1-1: Product: syz [ 204.419587][ T4939] usb 1-1: Manufacturer: syz [ 204.419601][ T4939] usb 1-1: SerialNumber: syz [ 204.435671][ T4939] usb 1-1: config 0 descriptor?? [ 204.549388][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 204.551254][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 204.563061][ T10] usb 2-1: string descriptor 0 read error: -22 [ 204.563162][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.796710][ T9] usb 1-1: USB disconnect, device number 13 [ 204.938291][ T8708] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 204.980940][ T31] audit: type=1400 audit(1791222862.772:677): avc: denied { write } for pid=8694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.036697][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.037126][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.089547][ T31] audit: type=1400 audit(1791222862.882:678): avc: denied { write } for pid=8716 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.141594][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141622][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141643][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141664][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141684][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141705][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141725][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.141747][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.203355][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.203391][ T10] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 205.267623][ T10] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID vff.7f Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 205.411230][ T8732] loop4: detected capacity change from 0 to 7 [ 205.440250][ T9] usb 2-1: USB disconnect, device number 5 [ 205.502497][ T8722] fido_id[8722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 205.562040][ T8732] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 205.562068][ T8732] loop4: partition table partially beyond EOD, truncated [ 205.582735][ T8732] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 205.818685][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 205.819094][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 205.942900][ T10] usb 1-1: device descriptor read/64, error -32 [ 206.221260][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 206.374058][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.374535][ T10] usb 1-1: config 0 has no interfaces? [ 206.378507][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.378532][ T10] usb 1-1: Product: syz [ 206.378546][ T10] usb 1-1: Manufacturer: syz [ 206.378560][ T10] usb 1-1: SerialNumber: syz [ 206.402043][ T8744] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 206.434078][ T31] audit: type=1400 audit(1791222864.212:679): avc: denied { mount } for pid=8745 comm="syz.4.810" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.434867][ T10] usb 1-1: config 0 descriptor?? [ 206.446426][ T31] audit: type=1400 audit(1791222864.242:680): avc: denied { write } for pid=8718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.460856][ T31] audit: type=1400 audit(1791222864.242:681): avc: denied { mounton } for pid=8745 comm="syz.4.810" path="/152/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 206.606273][ T31] audit: type=1400 audit(1791222864.402:682): avc: denied { write } for pid=8751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.751871][ T4939] usb 1-1: USB disconnect, device number 15 [ 206.841431][ T8744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.952069][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.953261][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.042636][ T8757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.069040][ T8757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.205380][ T31] audit: type=1400 audit(1791222864.992:683): avc: denied { create } for pid=8774 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 207.209705][ T31] audit: type=1400 audit(1791222865.002:684): avc: denied { write } for pid=8774 comm="syz.1.815" path="socket:[37115]" dev="sockfs" ino=37115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 207.325306][ T8750] vlan2: entered allmulticast mode [ 207.325326][ T8750] bond3: entered allmulticast mode [ 207.348906][ T8753] bond3: (slave geneve2): making interface the new active one [ 207.348928][ T8753] geneve2: entered allmulticast mode [ 207.351642][ T8753] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 207.385456][ T6488] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.385497][ T6488] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.385522][ T6488] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.385540][ T6488] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.479730][ T8794] jffs2: notice: (8794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 208.541104][ T8797] syzkaller0: entered promiscuous mode [ 208.541126][ T8797] syzkaller0: entered allmulticast mode [ 208.876913][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.822'. [ 209.332561][ T31] audit: type=1400 audit(1791222867.122:685): avc: denied { setopt } for pid=8810 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.245249][ T31] audit: type=1400 audit(1791222869.042:686): avc: denied { read } for pid=8833 comm="syz.2.837" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 211.246121][ T31] audit: type=1400 audit(1791222869.042:687): avc: denied { ioctl } for pid=8833 comm="syz.2.837" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 211.373428][ T31] audit: type=1400 audit(1791222869.172:688): avc: denied { write } for pid=8837 comm="syz.2.839" name="functions" dev="configfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.376040][ T31] audit: type=1400 audit(1791222869.172:689): avc: denied { write } for pid=8837 comm="syz.2.839" name="target" dev="configfs" ino=3510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.416265][ T31] audit: type=1400 audit(1791222869.212:690): avc: denied { write } for pid=8837 comm="syz.2.839" name="usb_gadget" dev="configfs" ino=35665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.566247][ T31] audit: type=1400 audit(1791222869.362:691): avc: denied { write } for pid=8837 comm="syz.2.839" name="naa.6001405c935d7912" dev="configfs" ino=35667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.572350][ T31] audit: type=1400 audit(1791222869.362:692): avc: denied { write } for pid=8837 comm="syz.2.839" name="lun" dev="configfs" ino=35672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.585281][ T31] audit: type=1400 audit(1791222869.382:693): avc: denied { write } for pid=8837 comm="syz.2.839" name="lun_0" dev="configfs" ino=35678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.684258][ T31] audit: type=1400 audit(1791222870.482:694): avc: denied { map } for pid=8850 comm="syz.1.841" path="socket:[35733]" dev="sockfs" ino=35733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.721004][ T31] audit: type=1400 audit(1791222871.512:695): avc: denied { write } for pid=8878 comm="syz.2.847" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.450058][ T4927] Bluetooth: hci2: Dropping invalid advertising data [ 214.450078][ T4927] Bluetooth: hci2: Malformed LE Event: 0x02 [ 214.587676][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 214.765385][ T8891] syzkaller0: entered promiscuous mode [ 214.765405][ T8891] syzkaller0: entered allmulticast mode [ 214.791051][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 215.383071][ T8773] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.410979][ T8913] IPVS: rr: FWM 3 0x00000003 - no destination available [ 215.616943][ T8773] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 215.650626][ T8773] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 215.650917][ T8773] usb 1-1: config 1 has no interface number 0 [ 215.871936][ T8773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.872255][ T8773] usb 1-1: Product: syz [ 215.872324][ T8773] usb 1-1: Manufacturer: syz [ 215.872458][ T8773] usb 1-1: SerialNumber: syz [ 215.999015][ T8773] usb 1-1: 3:0 : does not exist [ 215.999036][ T8773] usb 1-1: 3:0 : does not exist [ 216.379178][ T30] usb 1-1: USB disconnect, device number 16 [ 217.638811][ T8955] syzkaller0: entered promiscuous mode [ 217.638832][ T8955] syzkaller0: entered allmulticast mode [ 217.895941][ T8965] netlink: 76 bytes leftover after parsing attributes in process `syz.2.875'. [ 217.977004][ T8970] FAULT_INJECTION: forcing a failure. [ 217.977004][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 217.977029][ T8970] CPU: 1 UID: 0 PID: 8970 Comm: syz.0.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.977046][ T8970] Tainted: [L]=SOFTLOCKUP [ 217.977050][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.977058][ T8970] Call Trace: [ 217.977062][ T8970] [ 217.977067][ T8970] dump_stack_lvl+0x100/0x190 [ 217.977088][ T8970] should_fail_ex.cold+0x5/0xa [ 217.977106][ T8970] should_failslab+0xc2/0x120 [ 217.977123][ T8970] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 217.977140][ T8970] ? hashlimit_mt_check_common+0x947/0x1420 [ 217.977156][ T8970] kstrdup+0x51/0xe0 [ 217.977168][ T8970] hashlimit_mt_check_common+0x947/0x1420 [ 217.977184][ T8970] hashlimit_mt_check+0x71/0x90 [ 217.977195][ T8970] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 217.977206][ T8970] xt_check_match+0x117/0x1c0 [ 217.977223][ T8970] find_check_entry.isra.0+0x323/0x990 [ 217.977245][ T8970] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 217.977264][ T8970] ? kasan_quarantine_put+0x104/0x240 [ 217.977279][ T8970] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.977294][ T8970] ? translate_table+0xa20/0x1630 [ 217.977307][ T8970] ? translate_table+0xaf2/0x1630 [ 217.977320][ T8970] ? kfree+0x22b/0x6d0 [ 217.977330][ T8970] ? xt_check_table_hooks+0x206/0x330 [ 217.977351][ T8970] translate_table+0xbcd/0x1630 [ 217.977370][ T8970] ? __pfx_translate_table+0x10/0x10 [ 217.977387][ T8970] do_ipt_set_ctl+0x689/0xcf0 [ 217.977399][ T8970] ? nf_sockopt_find.isra.0+0x222/0x290 [ 217.977420][ T8970] ? nf_sockopt_find.isra.0+0x222/0x290 [ 217.977438][ T8970] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 217.977451][ T8970] ? __mutex_unlock_slowpath+0x35d/0x930 [ 217.977465][ T8970] ? sockopt_release_sock+0x5c/0x70 [ 217.977482][ T8970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.977501][ T8970] ? nf_sockopt_find.isra.0+0x222/0x290 [ 217.977520][ T8970] nf_setsockopt+0x8d/0xf0 [ 217.977539][ T8970] ip_setsockopt+0xcb/0xf0 [ 217.977555][ T8970] udp_setsockopt+0x64/0xb0 [ 217.977566][ T8970] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 217.977579][ T8970] do_sock_setsockopt+0xf3/0x1d0 [ 217.977598][ T8970] __sys_setsockopt+0x195/0x220 [ 217.977616][ T8970] __x64_sys_setsockopt+0xbd/0x160 [ 217.977631][ T8970] ? do_syscall_64+0xae/0x790 [ 217.977644][ T8970] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.977656][ T8970] do_syscall_64+0x123/0x790 [ 217.977669][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.977683][ T8970] RIP: 0033:0x7f29d6d9e199 [ 217.977693][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.977705][ T8970] RSP: 002b:00007f29d7cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.977717][ T8970] RAX: ffffffffffffffda RBX: 00007f29d7025fa0 RCX: 00007f29d6d9e199 [ 217.977727][ T8970] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 217.977734][ T8970] RBP: 00007f29d6e350b8 R08: 00000000000003d0 R09: 0000000000000000 [ 217.977742][ T8970] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 217.977750][ T8970] R13: 00007f29d7026038 R14: 00007f29d7025fa0 R15: 00007ffc9f641188 [ 217.977766][ T8970] [ 218.033841][ T8975] comedi comedi3: comedi_config --init_data is deprecated [ 219.116508][ T8987] fuse: fd is not a fuse device [ 219.952932][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 220.007714][ T8998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.556656][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 220.556675][ T31] audit: type=1326 audit(1791222878.352:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.556797][ T31] audit: type=1326 audit(1791222878.352:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.593466][ T31] audit: type=1326 audit(1791222878.392:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.593508][ T31] audit: type=1326 audit(1791222878.392:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.593657][ T31] audit: type=1326 audit(1791222878.392:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.624130][ T31] audit: type=1326 audit(1791222878.422:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.624171][ T31] audit: type=1326 audit(1791222878.422:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.624308][ T31] audit: type=1326 audit(1791222878.422:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.645703][ T31] audit: type=1326 audit(1791222878.442:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 220.645744][ T31] audit: type=1326 audit(1791222878.442:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.892" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x7ffc0000 [ 221.112186][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 223.450840][ T9071] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 223.483542][ T9071] team0: Cannot enslave team device to itself [ 227.204940][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 227.204958][ T31] audit: type=1326 audit(1791222885.002:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.4.928" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75af9e199 code=0x0 [ 227.269989][ T9153] FAULT_INJECTION: forcing a failure. [ 227.269989][ T9153] name failslab, interval 1, probability 0, space 0, times 0 [ 227.270011][ T9153] CPU: 1 UID: 0 PID: 9153 Comm: syz.1.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.270028][ T9153] Tainted: [L]=SOFTLOCKUP [ 227.270032][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.270039][ T9153] Call Trace: [ 227.270044][ T9153] [ 227.270049][ T9153] dump_stack_lvl+0x100/0x190 [ 227.270068][ T9153] should_fail_ex.cold+0x5/0xa [ 227.270085][ T9153] should_failslab+0xc2/0x120 [ 227.270103][ T9153] kmem_cache_alloc_noprof+0x92/0x6a0 [ 227.270117][ T9153] ? fdb_create+0x22f/0x1920 [ 227.270140][ T9153] fdb_create+0x22f/0x1920 [ 227.270158][ T9153] ? br_fdb_find+0x77/0x240 [ 227.270175][ T9153] ? __pfx_fdb_create+0x10/0x10 [ 227.270193][ T9153] fdb_add_local+0x155/0x1c0 [ 227.270210][ T9153] br_fdb_changeaddr+0x19b/0x520 [ 227.270229][ T9153] br_device_event+0x866/0xa00 [ 227.270243][ T9153] ? __pfx_br_device_event+0x10/0x10 [ 227.270259][ T9153] ? lockdep_rtnl_is_held+0x26/0x40 [ 227.270277][ T9153] notifier_call_chain+0x99/0x3f0 [ 227.270295][ T9153] call_netdevice_notifiers_info+0xbe/0x110 [ 227.270309][ T9153] call_netdevice_notifiers+0x7c/0xb0 [ 227.270321][ T9153] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 227.270337][ T9153] dev_ifsioc+0x12d9/0x1f80 [ 227.270354][ T9153] ? __pfx_dev_ifsioc+0x10/0x10 [ 227.270369][ T9153] ? __pfx___mutex_lock+0x10/0x10 [ 227.270386][ T9153] ? lock_acquire+0x1d1/0x380 [ 227.270401][ T9153] ? dev_load+0x8e/0x240 [ 227.270416][ T9153] ? dev_load+0x8e/0x240 [ 227.270434][ T9153] dev_ioctl+0x342/0x10e0 [ 227.270451][ T9153] sock_do_ioctl+0x1a0/0x280 [ 227.270464][ T9153] ? __pfx_sock_do_ioctl+0x10/0x10 [ 227.270475][ T9153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.270492][ T9153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.270504][ T9153] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 227.270522][ T9153] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.270540][ T9153] sock_ioctl+0x599/0x6b0 [ 227.270554][ T9153] ? __pfx_sock_ioctl+0x10/0x10 [ 227.270570][ T9153] ? selinux_file_ioctl+0x13b/0x290 [ 227.270584][ T9153] ? selinux_file_ioctl+0xb6/0x290 [ 227.270599][ T9153] ? __pfx_sock_ioctl+0x10/0x10 [ 227.270613][ T9153] __x64_sys_ioctl+0x18e/0x210 [ 227.270627][ T9153] do_syscall_64+0x123/0x790 [ 227.270644][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.270656][ T9153] RIP: 0033:0x7fb39079e199 [ 227.270666][ T9153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.270677][ T9153] RSP: 002b:00007fb3916c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.270689][ T9153] RAX: ffffffffffffffda RBX: 00007fb390a25fa0 RCX: 00007fb39079e199 [ 227.270697][ T9153] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005 [ 227.270704][ T9153] RBP: 00007fb3908350b8 R08: 0000000000000000 R09: 0000000000000000 [ 227.270711][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.270718][ T9153] R13: 00007fb390a26038 R14: 00007fb390a25fa0 R15: 00007ffdc4d5f258 [ 227.270732][ T9153] [ 227.423067][ T31] audit: type=1400 audit(1791222885.212:724): avc: denied { append } for pid=9148 comm="syz.4.928" name="file0" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.425682][ T31] audit: type=1400 audit(1791222885.222:725): avc: denied { open } for pid=9148 comm="syz.4.928" path="/173/file0" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.652595][ T9160] FAULT_INJECTION: forcing a failure. [ 227.652595][ T9160] name failslab, interval 1, probability 0, space 0, times 0 [ 227.652630][ T9160] CPU: 1 UID: 0 PID: 9160 Comm: syz.1.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.652655][ T9160] Tainted: [L]=SOFTLOCKUP [ 227.652662][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.652673][ T9160] Call Trace: [ 227.652679][ T9160] [ 227.652686][ T9160] dump_stack_lvl+0x100/0x190 [ 227.652715][ T9160] should_fail_ex.cold+0x5/0xa [ 227.652741][ T9160] should_failslab+0xc2/0x120 [ 227.652765][ T9160] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.652784][ T9160] ? __mmu_notifier_register+0x4a3/0x780 [ 227.652811][ T9160] __mmu_notifier_register+0x4a3/0x780 [ 227.652833][ T9160] mmu_notifier_register+0x74/0x1c0 [ 227.652856][ T9160] kvm_dev_ioctl+0xe9f/0x1b50 [ 227.652884][ T9160] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 227.652908][ T9160] ? selinux_file_ioctl+0x13b/0x290 [ 227.652929][ T9160] ? selinux_file_ioctl+0xb6/0x290 [ 227.652952][ T9160] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 227.652974][ T9160] __x64_sys_ioctl+0x18e/0x210 [ 227.652995][ T9160] do_syscall_64+0x123/0x790 [ 227.653017][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.653034][ T9160] RIP: 0033:0x7fb39079e199 [ 227.653048][ T9160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.653064][ T9160] RSP: 002b:00007fb3916c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.653081][ T9160] RAX: ffffffffffffffda RBX: 00007fb390a25fa0 RCX: 00007fb39079e199 [ 227.653093][ T9160] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 227.653103][ T9160] RBP: 00007fb3908350b8 R08: 0000000000000000 R09: 0000000000000000 [ 227.653114][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.653124][ T9160] R13: 00007fb390a26038 R14: 00007fb390a25fa0 R15: 00007ffdc4d5f258 [ 227.653147][ T9160] [ 228.430613][ T31] audit: type=1400 audit(1791222886.222:726): avc: denied { create } for pid=9184 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.442362][ T31] audit: type=1400 audit(1791222886.232:727): avc: denied { write } for pid=9184 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.234858][ T9211] ceph: No mds server is up or the cluster is laggy [ 231.248647][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 231.259423][ T8762] libceph: connect (1)[c::]:6789 error -101 [ 231.261002][ T8762] libceph: mon0 (1)[c::]:6789 connect error [ 231.531132][ T30] libceph: connect (1)[c::]:6789 error -101 [ 231.531285][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 232.678452][ T9233] capability: warning: `syz.4.948' uses 32-bit capabilities (legacy support in use) [ 233.136155][ T31] audit: type=1400 audit(1791222890.932:728): avc: denied { ioctl } for pid=9243 comm="syz.3.951" path="socket:[40213]" dev="sockfs" ino=40213 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.287186][ T9247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.658540][ T9252] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.682450][ T9255] netlink: 27 bytes leftover after parsing attributes in process `syz.4.956'. [ 233.966526][ T9252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.981353][ T9252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.999500][ T9252] bond3: entered allmulticast mode [ 233.999517][ T9252] bridge2: entered allmulticast mode [ 234.002121][ T9252] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 234.603221][ T31] audit: type=1400 audit(1791222892.322:729): avc: denied { name_connect } for pid=9262 comm="syz.4.959" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 234.903966][ T31] audit: type=1400 audit(1791222892.702:730): avc: denied { mount } for pid=9270 comm="syz.3.962" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 235.302319][ T9282] SELinux: policydb version 0 does not match my version range 15-35 [ 235.302480][ T9282] SELinux: failed to load policy [ 236.051374][ T9288] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 236.056787][ T9289] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.162667][ T31] audit: type=1400 audit(1791222893.952:731): avc: denied { write } for pid=9296 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.283275][ T9301] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 236.318597][ T9298] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.382284][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 237.511247][ T9313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9313 comm=syz.2.974 [ 238.229159][ T9321] input: syz0 as /devices/virtual/input/input8 [ 238.250511][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 239.052823][ T8773] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.204651][ T8773] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 239.207376][ T8773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.207400][ T8773] usb 2-1: Product: syz [ 239.207414][ T8773] usb 2-1: Manufacturer: syz [ 239.207428][ T8773] usb 2-1: SerialNumber: syz [ 239.688745][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 239.688800][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 239.850568][ T31] audit: type=1400 audit(1791222897.642:732): avc: denied { getopt } for pid=9355 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.901015][ T9368] netlink: 'syz.2.989': attribute type 3 has an invalid length. [ 241.194682][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 241.700927][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 241.746612][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 241.746663][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 242.122661][ T8773] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 242.144756][ T8773] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 242.150903][ T8773] usb 2-1: USB disconnect, device number 6 [ 242.207230][ T31] audit: type=1400 audit(1791222900.002:733): avc: denied { relabelfrom } for pid=9392 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 242.208602][ T31] audit: type=1400 audit(1791222900.002:734): avc: denied { relabelto } for pid=9392 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 242.409842][ T9392] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 242.693012][ T8773] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 242.722937][ T9418] binder: BINDER_SET_CONTEXT_MGR already set [ 242.722951][ T9418] binder: 9417:9418 ioctl 4018620d 200000000100 returned -16 [ 242.727771][ T9418] binder: BINDER_SET_CONTEXT_MGR already set [ 242.727781][ T9418] binder: 9417:9418 ioctl 4018620d 2000000002c0 returned -16 [ 242.843840][ T8773] usb 3-1: not running at top speed; connect to a high speed hub [ 242.843870][ T8773] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 242.844728][ T8773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.844768][ T8773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.852264][ T8773] hub 3-1:1.0: bad descriptor, ignoring hub [ 242.852288][ T8773] hub 3-1:1.0: probe with driver hub failed with error -5 [ 242.858889][ T8773] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 242.859061][ T8773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 242.859115][ T8773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 242.861267][ T8773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 242.861323][ T8773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 242.871453][ T8773] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 242.877668][ T8773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 242.877728][ T8773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 242.883101][ T8773] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 243.041586][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 243.093465][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.093763][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.314131][ T31] audit: type=1400 audit(1791222901.022:735): avc: denied { create } for pid=9423 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 243.314317][ T31] audit: type=1326 audit(1791222901.102:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.3.1008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd9e199 code=0x0 [ 244.060635][ T9431] ceph: No mds server is up or the cluster is laggy [ 244.070171][ T9433] ceph: No mds server is up or the cluster is laggy [ 244.345157][ T30] usb 3-1: USB disconnect, device number 7 [ 244.350736][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 244.382820][ T8773] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 244.402189][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 244.402697][ T30] keyspan 3-1:1.0: device disconnected [ 244.668909][ T8773] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 244.683580][ T8773] usb 1-1: config 0 has no interfaces? [ 244.683610][ T8773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.686689][ T8773] usb 1-1: config 0 descriptor?? [ 244.790886][ T9452] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 244.790955][ T9452] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 244.791008][ T9452] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 244.806930][ T9452] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 244.853301][ T9452] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.591446][ T8773] usb 1-1: USB disconnect, device number 17 [ 245.689789][ T9463] syzkaller0: entered promiscuous mode [ 245.689811][ T9463] syzkaller0: entered allmulticast mode [ 245.708729][ T9463] tipc: Enabled bearer , priority 0 [ 245.711027][ T9462] tipc: Resetting bearer [ 245.750233][ T9462] tipc: Disabling bearer [ 245.850789][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 246.733158][ T9493] netlink: 'syz.3.1029': attribute type 4 has an invalid length. [ 246.736696][ T9493] netlink: 'syz.3.1029': attribute type 4 has an invalid length. [ 246.977668][ T9500] FAULT_INJECTION: forcing a failure. [ 246.977668][ T9500] name failslab, interval 1, probability 0, space 0, times 0 [ 246.977702][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.2.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.977730][ T9500] Tainted: [L]=SOFTLOCKUP [ 246.977737][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 246.977749][ T9500] Call Trace: [ 246.977756][ T9500] [ 246.977764][ T9500] dump_stack_lvl+0x100/0x190 [ 246.977797][ T9500] should_fail_ex.cold+0x5/0xa [ 246.977825][ T9500] should_failslab+0xc2/0x120 [ 246.977854][ T9500] __kmalloc_noprof+0xfc/0x840 [ 246.977879][ T9500] ? cfg80211_connect+0x163f/0x2000 [ 246.977909][ T9500] cfg80211_connect+0x163f/0x2000 [ 246.977941][ T9500] ? __pfx_cfg80211_connect+0x10/0x10 [ 246.977975][ T9500] cfg80211_mgd_wext_connect+0x57d/0x6d0 [ 246.978009][ T9500] cfg80211_mgd_wext_siwessid+0x36e/0x750 [ 246.978044][ T9500] cfg80211_wext_siwessid+0xd2/0x140 [ 246.978075][ T9500] ioctl_standard_iw_point+0x5b4/0xc90 [ 246.978096][ T9500] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 246.978127][ T9500] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 246.978150][ T9500] ? dev_load+0x2a/0x240 [ 246.978180][ T9500] ? dev_load+0x8e/0x240 [ 246.978207][ T9500] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 246.978234][ T9500] ioctl_standard_call+0x167/0x1d0 [ 246.978256][ T9500] ? __pfx_ioctl_standard_call+0x10/0x10 [ 246.978274][ T9500] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 246.978301][ T9500] wext_ioctl_dispatch.constprop.0+0x30f/0x3d0 [ 246.978326][ T9500] wext_handle_ioctl+0x105/0x1b0 [ 246.978347][ T9500] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 246.978368][ T9500] ? do_vfs_ioctl+0x226/0x13e0 [ 246.978392][ T9500] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.978413][ T9500] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 246.978442][ T9500] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 246.978474][ T9500] sock_ioctl+0x2d4/0x6b0 [ 246.978496][ T9500] ? __pfx_sock_ioctl+0x10/0x10 [ 246.978530][ T9500] ? selinux_file_ioctl+0x13b/0x290 [ 246.978556][ T9500] ? selinux_file_ioctl+0xb6/0x290 [ 246.978583][ T9500] ? __pfx_sock_ioctl+0x10/0x10 [ 246.978607][ T9500] __x64_sys_ioctl+0x18e/0x210 [ 246.978632][ T9500] do_syscall_64+0x123/0x790 [ 246.978657][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.978679][ T9500] RIP: 0033:0x7f840219e199 [ 246.978696][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.978716][ T9500] RSP: 002b:00007f84030d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.978739][ T9500] RAX: ffffffffffffffda RBX: 00007f8402425fa0 RCX: 00007f840219e199 [ 246.978752][ T9500] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004 [ 246.978765][ T9500] RBP: 00007f84022350b8 R08: 0000000000000000 R09: 0000000000000000 [ 246.978777][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.978789][ T9500] R13: 00007f8402426038 R14: 00007f8402425fa0 R15: 00007ffc4ad95578 [ 246.978817][ T9500] [ 247.076373][ T9505] xt_HMARK: spi-set and port-set can't be combined [ 247.195247][ T31] audit: type=1326 audit(1791222904.962:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.4.1034" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75af9e199 code=0x0 [ 248.548103][ T9523] kvm: pic: non byte write [ 248.882806][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.154656][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.154698][ T25] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 249.155606][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 249.157588][ T4927] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 249.157848][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.157869][ T25] usb 2-1: Product: syz [ 249.157890][ T25] usb 2-1: Manufacturer: syz [ 249.157904][ T25] usb 2-1: SerialNumber: syz [ 249.930561][ T25] usb 2-1: USB disconnect, device number 7 [ 250.183539][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.183605][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.642886][ T8762] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 250.795266][ T8762] usb 3-1: Using ep0 maxpacket: 8 [ 250.795910][ T8762] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 250.798628][ T8762] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 250.798650][ T8762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.798667][ T8762] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 250.798684][ T8762] usb 3-1: config 0 has no interface number 0 [ 250.798713][ T8762] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.808248][ T8762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.808270][ T8762] usb 3-1: Product: syz [ 250.808284][ T8762] usb 3-1: Manufacturer: syz [ 250.808298][ T8762] usb 3-1: SerialNumber: syz [ 250.889076][ T8762] usb 3-1: config 0 descriptor?? [ 250.901703][ T8762] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.948507][ T8762] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 251.005809][ T9389] udevd[9389]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.184641][ T8762] usb 3-1: USB disconnect, device number 8 [ 251.346292][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 251.346334][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 252.221789][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 252.236161][ T31] audit: type=1400 audit(1791222910.032:738): avc: denied { mounton } for pid=9591 comm="syz.0.1062" path="mnt:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.472851][ T4939] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 252.594970][ T9599] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 252.623260][ T4939] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 252.624146][ T4939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.624183][ T4939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.624205][ T4939] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.624227][ T4939] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.624260][ T4939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.858865][ T9592] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.864388][ T9592] tipc: Enabling of bearer rejected, failed to enable media [ 252.867437][ T4939] gud 1-1:1.0: probe with driver gud failed with error -22 [ 252.968644][ T31] audit: type=1400 audit(1791222910.762:739): avc: denied { append } for pid=9606 comm="syz.2.1067" name="uprobe_events" dev="tracefs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 253.071354][ T4939] usb 1-1: USB disconnect, device number 18 [ 253.641625][ T31] audit: type=1400 audit(1791222911.432:740): avc: denied { write } for pid=9642 comm="syz.1.1074" path="socket:[42096]" dev="sockfs" ino=42096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.759119][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'. [ 253.759151][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'. [ 254.041353][ T6475] IPVS: starting estimator thread 0... [ 254.132998][ T9673] IPVS: using max 42 ests per chain, 100800 per kthread [ 254.435732][ T31] audit: type=1400 audit(1791222912.232:741): avc: denied { create } for pid=9684 comm="syz.3.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.933486][ T8762] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 255.023821][ T9700] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 255.103615][ T8762] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 255.104466][ T8762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.104485][ T8762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.104497][ T8762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.104518][ T8762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.108033][ T8762] usb 3-1: config 0 descriptor?? [ 255.195420][ T9700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.198750][ T9700] bond3: (slave bond4): making interface the new active one [ 255.199245][ T9700] bond3: (slave bond4): Enslaving as an active interface with an up link [ 255.284838][ T9705] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 255.297307][ T9700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.520132][ T8762] hid_parser_main: 4005 callbacks suppressed [ 255.520155][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.520180][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.520208][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521367][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521401][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521420][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521438][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521457][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521476][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.521495][ T8762] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 255.624520][ T8762] lua 0003:1E7D:2C2E.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 255.797813][ T9693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1088'. [ 255.797835][ T9693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1088'. [ 255.809018][ T8762] usb 3-1: USB disconnect, device number 9 [ 256.032225][ T9713] v: renamed from veth0_vlan [ 256.080637][ T31] audit: type=1400 audit(1791222913.872:742): avc: denied { read } for pid=5273 comm="dhcpcd" name="n53" dev="tmpfs" ino=2806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.080874][ T31] audit: type=1400 audit(1791222913.872:743): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n53" dev="tmpfs" ino=2806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.104715][ T31] audit: type=1400 audit(1791222913.872:744): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n53" dev="tmpfs" ino=2806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.480450][ T9728] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 256.496197][ T9729] binder: BINDER_SET_CONTEXT_MGR already set [ 256.496210][ T9729] binder: 9726:9729 ioctl 4018620d 200000000100 returned -16 [ 256.537037][ T9729] binder: BINDER_SET_CONTEXT_MGR already set [ 256.537052][ T9729] binder: 9726:9729 ioctl 4018620d 2000000002c0 returned -16 [ 256.580550][ T9728] bond4: entered promiscuous mode [ 256.580736][ T9728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.675769][ T31] audit: type=1400 audit(1791222914.472:745): avc: denied { write } for pid=9718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.675966][ T31] audit: type=1400 audit(1791222914.472:746): avc: denied { create } for pid=9718 comm="dhcpcd-run-hook" name="resolv.conf.v.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.676234][ T31] audit: type=1400 audit(1791222914.472:747): avc: denied { write } for pid=9718 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.v.link" dev="tmpfs" ino=2807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.707937][ T9728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.708100][ T9728] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 256.708110][ T9728] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 256.792202][ T9728] bond4: (slave wireguard0): making interface the new active one [ 256.792222][ T9728] wireguard0: entered promiscuous mode [ 256.809243][ T9728] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 257.259672][ T5273] v: left promiscuous mode [ 257.294581][ T25] v: entered promiscuous mode [ 257.409229][ T9749] audit_log_lost: 3 callbacks suppressed [ 257.409249][ T9749] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 257.409264][ T9749] audit: out of memory in audit_log_start [ 257.688706][ T9763] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1106'. [ 258.300650][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 258.336474][ T31] audit: type=1400 audit(1791222916.132:751): avc: denied { create } for pid=9773 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 258.340764][ T31] audit: type=1400 audit(1791222916.132:752): avc: denied { write } for pid=9773 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 258.341187][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 258.457872][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 258.531924][ T9775] bond5: entered promiscuous mode [ 258.531946][ T9775] bond5: entered allmulticast mode [ 258.533004][ T6475] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.533330][ T6469] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.533363][ T6469] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.533391][ T6469] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.803081][ T31] audit: type=1400 audit(1791222916.522:753): avc: denied { write } for pid=9753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.856169][ T31] audit: type=1400 audit(1791222916.652:754): avc: denied { write } for pid=9792 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.465585][ T9810] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 260.710876][ T9817] raw_sendmsg: syz.4.1118 forgot to set AF_INET. Fix it! [ 261.468819][ T31] audit: type=1800 audit(1791222919.262:755): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1123" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 261.653998][ T4927] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 263.308208][ T9841] tipc: Resetting bearer [ 263.329285][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 263.883052][ T9859] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 263.884551][ T9859] Error validating options; rc = [-22] [ 264.737206][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 264.769263][ T9871] SET target dimension over the limit! [ 264.824705][ T6474] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.832470][ T6474] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.832505][ T6474] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.832531][ T6474] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.788622][ T31] audit: type=1400 audit(1791222923.582:756): avc: denied { unlink } for pid=5616 comm="syz-executor" name="tap82" dev="devtmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.464313][ T4927] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 266.752862][ T8762] page_pool_release_retry() stalled pool shutdown: id 31, 34 inflight 60 sec [ 267.075819][ T9894] netlink: 'syz.2.1143': attribute type 4 has an invalid length. [ 268.480127][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.487269][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.491418][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.505650][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.506146][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.318803][ T9918] ref_ctr increment failed for inode: 0x4c5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807d0eb100 [ 269.612401][ T9926] netlink: 'syz.0.1154': attribute type 3 has an invalid length. [ 269.612421][ T9926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1154'. [ 269.997602][ T31] audit: type=1400 audit(1791222927.772:757): avc: denied { bind } for pid=9930 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 269.997651][ T31] audit: type=1400 audit(1791222927.772:758): avc: denied { bind } for pid=9930 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 270.605173][ T4927] Bluetooth: hci3: command tx timeout [ 271.030112][ T9951] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 271.072518][ T9951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.153439][ T9951] bond5: (slave geneve2): making interface the new active one [ 271.154643][ T9951] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 271.226741][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.226876][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.226984][ T9904] bridge_slave_0: entered allmulticast mode [ 271.228402][ T9904] bridge_slave_0: entered promiscuous mode [ 271.257035][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.257160][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.257268][ T9904] bridge_slave_1: entered allmulticast mode [ 271.258617][ T9904] bridge_slave_1: entered promiscuous mode [ 271.406180][ T9904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.408988][ T9904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.568050][ T9904] team0: Port device team_slave_0 added [ 272.572491][ T9904] team0: Port device team_slave_1 added [ 272.682828][ T4927] Bluetooth: hci3: command tx timeout [ 273.016922][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.016938][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.016961][ T9904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.065048][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.065064][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.065091][ T9904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.234101][ T4927] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 273.234165][ T4927] Bluetooth: hci2: Injecting HCI hardware error event [ 273.235435][ T5608] Bluetooth: hci2: hardware error 0x00 [ 273.318088][ T9904] hsr_slave_0: entered promiscuous mode [ 273.320347][ T9904] hsr_slave_1: entered promiscuous mode [ 273.322155][ T9904] debugfs: 'hsr0' already exists in 'hsr' [ 273.322174][ T9904] Cannot create hsr debugfs directory [ 273.674845][ T31] audit: type=1800 audit(1791222931.472:759): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1171" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 273.721117][ T31] audit: type=1400 audit(1791222931.512:760): avc: denied { ioctl } for pid=9986 comm="syz.2.1170" path="socket:[42665]" dev="sockfs" ino=42665 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.797316][ T31] audit: type=1400 audit(1791222931.592:761): avc: denied { write } for pid=9972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.912487][ T9989] infiniband syz2: set down [ 273.912509][ T9989] infiniband syz2: added bond0 [ 273.938270][ T9989] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 273.938305][ T9989] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 273.938342][ T9989] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 274.003538][ T9989] RDS/IB: syz2: added [ 274.004041][ T9989] smc: adding ib device syz2 with port count 1 [ 274.004155][ T9989] smc: ib device syz2 port 1 has no pnetid [ 274.185402][ T31] audit: type=1400 audit(1791222931.982:762): avc: denied { write } for pid=10001 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.246447][ T31] audit: type=1800 audit(1791222932.042:763): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1167" name="nullb0" dev="tmpfs" ino=1426 res=0 errno=0 [ 274.359834][ T9904] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.420074][ T9904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.420787][ T9904] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.442979][ T9904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.772810][ T4927] Bluetooth: hci3: command tx timeout [ 274.796179][ T9904] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.928057][ T9904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.104550][ T9904] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.113842][ T9904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.248526][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.273878][ T9904] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.282687][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.282803][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.315141][ T5608] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 275.319049][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.319135][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.846819][ T5608] Bluetooth: hci3: command tx timeout [ 277.045046][ T9904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.730751][T10075] fuse: fd is not a fuse device [ 277.864386][ T9904] veth0_vlan: entered promiscuous mode [ 277.896069][ T9904] veth1_vlan: entered promiscuous mode [ 278.057550][ T9904] veth0_macvtap: entered promiscuous mode [ 278.075942][ T9904] veth1_macvtap: entered promiscuous mode [ 278.130347][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.157600][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.195849][ T6469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.198486][ T6516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.198578][ T6516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.198607][ T6516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.492311][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.492330][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.600021][ T6488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.600041][ T6488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.784624][ T31] audit: type=1400 audit(1791222936.552:764): avc: denied { mounton } for pid=9904 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 278.920516][ T31] audit: type=1400 audit(1791222936.712:765): avc: denied { bind } for pid=10090 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.932919][ T31] audit: type=1400 audit(1791222936.722:766): avc: denied { write } for pid=10090 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.296135][ T31] audit: type=1400 audit(1791222937.092:767): avc: denied { read } for pid=10101 comm="syz.5.1148" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 279.296182][ T31] audit: type=1400 audit(1791222937.092:768): avc: denied { open } for pid=10101 comm="syz.5.1148" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 280.052403][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.052650][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.351136][T10114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.366688][ T31] audit: type=1400 audit(1791222939.162:769): avc: denied { read } for pid=10123 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.369997][T10114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.633398][ T6485] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.634208][ T6485] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.634283][ T6485] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.634314][ T6485] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.423488][ T8773] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 282.596141][ T8773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.596187][ T8773] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 282.596932][ T8773] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 282.596965][ T8773] usb 3-1: can't read configurations, error -71 [ 283.233048][ T31] audit: type=1400 audit(1791222941.032:770): avc: denied { watch watch_reads } for pid=10160 comm="syz.0.1211" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 285.063010][T10187] fuse: Bad value for 'fd' [ 286.844181][T10217] fuse: fd is not a fuse device [ 286.903607][ T8773] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 287.002533][T10225] capability: warning: `syz.3.1229' uses deprecated v2 capabilities in a way that may be insecure [ 287.053475][ T8773] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 287.057969][ T8773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.057993][ T8773] usb 3-1: Product: syz [ 287.058008][ T8773] usb 3-1: Manufacturer: syz [ 287.058021][ T8773] usb 3-1: SerialNumber: syz [ 287.097675][ T8773] usb 3-1: config 0 descriptor?? [ 287.109713][ T8773] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 287.331167][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 287.541275][ T8773] gspca_stk1135: reg_w 0x0 err -71 [ 287.542322][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542335][ T8773] gspca_stk1135: Sensor write failed [ 287.542365][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542373][ T8773] gspca_stk1135: Sensor write failed [ 287.542404][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542413][ T8773] gspca_stk1135: Sensor read failed [ 287.542443][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542452][ T8773] gspca_stk1135: Sensor read failed [ 287.542458][ T8773] gspca_stk1135: Detected sensor type unknown (0x0) [ 287.542490][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542497][ T8773] gspca_stk1135: Sensor read failed [ 287.542525][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542534][ T8773] gspca_stk1135: Sensor read failed [ 287.542563][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542570][ T8773] gspca_stk1135: Sensor write failed [ 287.542600][ T8773] gspca_stk1135: serial bus timeout: status=0x00 [ 287.542608][ T8773] gspca_stk1135: Sensor write failed [ 287.621803][ T8773] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 287.661939][ T8773] usb 3-1: USB disconnect, device number 12 [ 287.879487][ T31] audit: type=1401 audit(1791222945.672:771): op=fscreate invalid_context=CF [ 287.891977][T10252] overlayfs: failed to clone upperpath [ 289.913873][T10276] bridge0: port 1(syz_tun) entered blocking state [ 289.913957][T10276] bridge0: port 1(syz_tun) entered disabled state [ 289.915654][T10276] syz_tun: entered promiscuous mode [ 289.948629][T10276] bridge0: port 1(syz_tun) entered blocking state [ 289.948722][T10276] bridge0: port 1(syz_tun) entered forwarding state [ 291.088277][T10300] fuse: fd is not a fuse device [ 291.252899][ T8773] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 291.424632][ T8773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.424698][ T8773] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 291.426532][ T8773] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 148, changing to 7 [ 291.428393][ T8773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.428416][ T8773] usb 3-1: Product: syz [ 291.428430][ T8773] usb 3-1: Manufacturer: syz [ 291.428445][ T8773] usb 3-1: SerialNumber: syz [ 291.652090][T10314] tipc: Started in network mode [ 291.652117][T10314] tipc: Node identity ac1414aa, cluster identity 4711 [ 291.673664][T10314] tipc: Enabled bearer , priority 10 [ 291.680010][T10314] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 291.681259][T10314] tipc: Enabled bearer , priority 10 [ 291.825352][ T8773] snd-ua101 3-1:1.1: sample format descriptor not found [ 291.825374][ T8773] snd-ua101 3-1:1.0: invalid num_altsetting [ 291.848714][ T8773] usb 3-1: USB disconnect, device number 13 [ 293.090438][ T8773] tipc: Node number set to 2886997162 [ 293.265585][T10341] macsec1: entered promiscuous mode [ 293.265608][T10341] virt_wifi0: entered promiscuous mode [ 293.635117][T10348] tipc: Enabling of bearer rejected, failed to enable media [ 293.897136][ T31] audit: type=1400 audit(1791222951.692:772): avc: denied { mounton } for pid=10358 comm="syz.2.1269" path="/file0" dev="autofs" ino=45078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 294.575485][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1273'. [ 295.074510][T10381] v: left promiscuous mode [ 296.117095][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 297.643188][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'. [ 297.643448][T10411] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1280'. [ 300.663310][T10442] ip_tables: iptables: counters copy to user failed while replacing table [ 302.103531][T10455] Invalid source name [ 302.839510][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 302.904912][T10459] bond6: entered promiscuous mode [ 302.904936][T10459] bond6: entered allmulticast mode [ 303.631228][ T31] audit: type=1804 audit(1791222961.422:773): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1302" name="bus" dev="ramfs" ino=45230 res=1 errno=0 [ 303.631278][ T31] audit: type=1804 audit(1791222961.422:774): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1302" name="bus" dev="ramfs" ino=45230 res=1 errno=0 [ 303.892267][ T31] audit: type=1400 audit(1791222961.682:775): avc: denied { getopt } for pid=10482 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 303.893829][ T31] audit: type=1400 audit(1791222961.682:776): avc: denied { write } for pid=10482 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 303.977312][ T31] audit: type=1400 audit(1791222961.772:777): avc: denied { listen } for pid=10490 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.979457][ T31] audit: type=1400 audit(1791222961.772:778): avc: denied { read } for pid=10490 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.092271][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 304.121296][ T31] audit: type=1326 audit(1791222961.912:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.1304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c19e199 code=0x7ffc0000 [ 304.121444][ T31] audit: type=1326 audit(1791222961.912:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.1304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c19e199 code=0x7ffc0000 [ 304.123442][ T31] audit: type=1326 audit(1791222961.912:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.1304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c19e199 code=0x7ffc0000 [ 304.123490][ T31] audit: type=1326 audit(1791222961.912:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.1304" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4c19e199 code=0x7ffc0000 [ 304.248994][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 304.981199][T10528] futex_wake_op: syz.2.1317 tries to shift op by 144; fix this program [ 305.257352][T10537] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1319'. [ 306.651629][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 306.664866][T10556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.979167][T10570] vxlan0: entered allmulticast mode [ 306.993359][ T6484] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.993444][ T6484] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.993477][ T6484] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.993507][ T6484] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.301365][T10614] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 308.302046][T10614] syzkaller0: entered promiscuous mode [ 308.302072][T10614] syzkaller0: entered allmulticast mode [ 308.901493][T10619] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 309.069779][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 309.401899][T10633] input: syz0 as /devices/virtual/input/input9 [ 310.449683][T10659] fuse: fd is not a fuse device [ 311.558172][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.575726][T10678] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `ݗb"^6C2W [ 311.575726][T10678] 7 [ 311.752002][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 311.752019][ T31] audit: type=1400 audit(1791222969.542:801): avc: denied { map } for pid=10676 comm="syz.2.1363" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 314.661259][ T31] audit: type=1400 audit(1791222972.452:802): avc: denied { bind } for pid=10709 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.707586][ T31] audit: type=1400 audit(1791222972.502:803): avc: denied { setopt } for pid=10709 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 317.584325][T10738] fuse: fd is not a fuse device [ 320.337541][ T31] audit: type=1400 audit(1791222978.132:804): avc: denied { connect } for pid=10781 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.182805][ T8769] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 321.594070][ T8769] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 321.613671][ T8769] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 321.613749][ T8769] usb 3-1: Product: syz [ 321.613921][ T8769] usb 3-1: SerialNumber: syz [ 321.763911][ T8769] usb 3-1: config 0 descriptor?? [ 323.081006][ T31] audit: type=1400 audit(1791222980.872:805): avc: denied { read } for pid=10808 comm="syz.5.1404" name="usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.081049][ T31] audit: type=1400 audit(1791222980.872:806): avc: denied { open } for pid=10808 comm="syz.5.1404" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.192828][ T31] audit: type=1400 audit(1791222980.962:807): avc: denied { map } for pid=10808 comm="syz.5.1404" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.235288][ T5718] usb 3-1: USB disconnect, device number 14 [ 323.466267][ T31] audit: type=1400 audit(1791222981.262:808): avc: denied { getopt } for pid=10825 comm="syz.5.1408" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.629059][ T31] audit: type=1400 audit(1791222984.372:809): avc: denied { connect } for pid=10852 comm="syz.2.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.629089][ T31] audit: type=1400 audit(1791222984.372:810): avc: denied { write } for pid=10852 comm="syz.2.1415" lport=28312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 327.753723][ T31] audit: type=1400 audit(1791222985.542:811): avc: denied { write } for pid=10866 comm="syz.2.1419" name="functions" dev="configfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.813869][T10868] file system registered [ 327.860958][ T31] audit: type=1400 audit(1791222985.652:812): avc: denied { mount } for pid=10866 comm="syz.2.1419" name="/" dev="functionfs" ino=46516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 327.869050][ T31] audit: type=1400 audit(1791222985.662:813): avc: denied { write } for pid=10866 comm="syz.2.1419" name="functions" dev ** replaying previous printk message ** [ 327.869050][ T31] audit: type=1400 audit(1791222985.662:813): avc: denied { write } for pid=10866 comm="syz.2.1419" name="functions" dev="configfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.886173][ T31] audit: type=1400 audit(1791222985.662:814): avc: denied { remove_name } for pid=10866 comm="syz.2.1419" name="ffs.usb0" dev="configfs" ino=46512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.891339][ T31] audit: type=1400 audit(1791222985.682:815): avc: denied { rmdir } for pid=10866 comm="syz.2.1419" name="ffs.usb0" dev="configfs" ino=46512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.897310][T10868] [ 327.972843][T10868] ====================================================== [ 327.979852][T10868] WARNING: possible circular locking dependency detected [ 327.986841][T10868] syzkaller #0 Tainted: G L [ 327.992798][T10868] ------------------------------------------------------ [ 327.999792][T10868] syz.2.1419/10868 is trying to acquire lock: [ 328.005823][T10868] ffffffff903fec68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 328.015534][T10868] [ 328.015534][T10868] but task is already holding lock: [ 328.022891][T10868] ffff88804c3d5dc0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 328.032550][T10868] [ 328.032550][T10868] which lock already depends on the new lock. [ 328.032550][T10868] [ 328.042934][T10868] [ 328.042934][T10868] the existing dependency chain (in reverse order) is: [ 328.051918][T10868] [ 328.051918][T10868] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 328.060580][T10868] lock_acquire+0x1d1/0x380 [ 328.065581][T10868] down_write+0x8b/0x1f0 [ 328.070325][T10868] configfs_depend_item_unlocked+0xf3/0x6a0 [ 328.076723][T10868] usbg_make_tpg+0x251/0x610 [ 328.081813][T10868] target_fabric_make_tpg+0xab/0x8c0 [ 328.087601][T10868] configfs_mkdir+0x525/0xd40 [ 328.092778][T10868] vfs_mkdir+0x364/0x850 [ 328.097517][T10868] filename_mkdirat+0x48b/0x5e0 [ 328.102865][T10868] __x64_sys_mkdirat+0x89/0xc0 [ 328.108139][T10868] do_syscall_64+0x123/0x790 [ 328.113232][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.119618][T10868] [ 328.119618][T10868] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 328.127490][T10868] lock_acquire+0x1d1/0x380 [ 328.132499][T10868] __mutex_lock+0x1a4/0x1bd0 [ 328.137584][T10868] tcm_alloc_inst+0x5f/0x1e0 [ 328.142669][T10868] try_get_usb_function_instance+0x136/0x1f0 [ 328.149140][T10868] usb_get_function_instance+0x16/0x70 [ 328.155092][T10868] function_make+0x18c/0x3f0 [ 328.160171][T10868] configfs_mkdir+0x525/0xd40 [ 328.165339][T10868] vfs_mkdir+0x364/0x850 [ 328.170082][T10868] filename_mkdirat+0x48b/0x5e0 [ 328.175430][T10868] __x64_sys_mkdirat+0x89/0xc0 [ 328.180689][T10868] do_syscall_64+0x123/0x790 [ 328.185773][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.192166][T10868] [ 328.192166][T10868] -> #1 (func_lock){+.+.}-{4:4}: [ 328.199253][T10868] lock_acquire+0x1d1/0x380 [ 328.204248][T10868] __mutex_lock+0x1a4/0x1bd0 [ 328.209331][T10868] try_get_usb_function_instance+0x26/0x1f0 [ 328.215736][T10868] usb_get_function_instance+0x16/0x70 [ 328.221692][T10868] function_make+0x18c/0x3f0 [ 328.226783][T10868] configfs_mkdir+0x525/0xd40 [ 328.231952][T10868] vfs_mkdir+0x364/0x850 [ 328.236685][T10868] filename_mkdirat+0x48b/0x5e0 [ 328.242040][T10868] __x64_sys_mkdirat+0x89/0xc0 [ 328.247310][T10868] do_syscall_64+0x123/0x790 [ 328.252391][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.258778][T10868] [ 328.258778][T10868] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 328.266994][T10868] check_prev_add+0xeb/0xe60 [ 328.272077][T10868] __lock_acquire+0x1528/0x1f40 [ 328.277420][T10868] lock_acquire+0x1d1/0x380 [ 328.282414][T10868] __mutex_lock+0x1a4/0x1bd0 [ 328.287494][T10868] configfs_rmdir+0x5ae/0x950 [ 328.292663][T10868] vfs_rmdir+0x328/0x8a0 [ 328.297398][T10868] filename_rmdir+0x31a/0x5c0 [ 328.302570][T10868] __x64_sys_rmdir+0x46/0x70 [ 328.307665][T10868] do_syscall_64+0x123/0x790 [ 328.312746][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.319131][T10868] [ 328.319131][T10868] other info that might help us debug this: [ 328.319131][T10868] [ 328.329336][T10868] Chain exists of: [ 328.329336][T10868] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 328.329336][T10868] [ 328.344243][T10868] Possible unsafe locking scenario: [ 328.344243][T10868] [ 328.351662][T10868] CPU0 CPU1 [ 328.356994][T10868] ---- ---- [ 328.362326][T10868] lock(&sb->s_type->i_mutex_key#25); [ 328.367757][T10868] lock(tpg_instances_lock); [ 328.374926][T10868] lock(&sb->s_type->i_mutex_key#25); [ 328.382876][T10868] lock(gadget_subsys.su_mutex); [ 328.387869][T10868] [ 328.387869][T10868] *** DEADLOCK *** [ 328.387869][T10868] [ 328.395980][T10868] locks held by syz.2.1419/10868: 3, last CPU#1: [ 328.402274][T10868] #0: ffff88801cf62460 (sb_writers#14){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 328.411649][T10868] #1: ffff888077231440 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 328.422929][T10868] #2: ffff88804c3d5dc0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 328.432981][T10868] [ 328.432981][T10868] stack backtrace: [ 328.438851][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.2.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.449768][T10868] Tainted: [L]=SOFTLOCKUP [ 328.454061][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.464086][T10868] Call Trace: [ 328.467337][T10868] [ 328.470240][T10868] dump_stack_lvl+0x100/0x190 [ 328.474893][T10868] print_circular_bug.cold+0x178/0x1be [ 328.480329][T10868] check_noncircular+0x146/0x160 [ 328.485240][T10868] check_prev_add+0xeb/0xe60 [ 328.489801][T10868] ? __bfs+0x150/0x2a0 [ 328.493840][T10868] __lock_acquire+0x1528/0x1f40 [ 328.498666][T10868] lock_acquire+0x1d1/0x380 [ 328.503141][T10868] ? configfs_rmdir+0x5ae/0x950 [ 328.507964][T10868] ? __pfx___might_resched+0x10/0x10 [ 328.513218][T10868] ? __lock_acquire+0x5c0/0x1f40 [ 328.518128][T10868] __mutex_lock+0x1a4/0x1bd0 [ 328.522690][T10868] ? configfs_rmdir+0x5ae/0x950 [ 328.527528][T10868] ? configfs_rmdir+0x5ae/0x950 [ 328.532375][T10868] ? reacquire_held_locks+0xdd/0x1f0 [ 328.537639][T10868] ? __pfx___mutex_lock+0x10/0x10 [ 328.542647][T10868] ? do_raw_spin_lock+0x128/0x260 [ 328.547655][T10868] ? find_held_lock+0x2b/0x80 [ 328.552321][T10868] ? fast_dput+0x2fe/0x6f0 [ 328.556716][T10868] ? do_raw_spin_unlock+0x145/0x1e0 [ 328.561894][T10868] ? _raw_spin_unlock+0x28/0x50 [ 328.566729][T10868] ? fast_dput+0x168/0x6f0 [ 328.571119][T10868] ? configfs_rmdir+0x5ae/0x950 [ 328.575943][T10868] configfs_rmdir+0x5ae/0x950 [ 328.580597][T10868] ? __pfx_configfs_rmdir+0x10/0x10 [ 328.585768][T10868] ? __pfx_down_write+0x10/0x10 [ 328.590601][T10868] vfs_rmdir+0x328/0x8a0 [ 328.594817][T10868] filename_rmdir+0x31a/0x5c0 [ 328.599472][T10868] ? __pfx_filename_rmdir+0x10/0x10 [ 328.604650][T10868] ? do_getname+0x191/0x390 [ 328.609125][T10868] __x64_sys_rmdir+0x46/0x70 [ 328.613689][T10868] do_syscall_64+0x123/0x790 [ 328.618266][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.624131][T10868] RIP: 0033:0x7f840219e199 [ 328.628523][T10868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.648112][T10868] RSP: 002b:00007f84030d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 328.656493][T10868] RAX: ffffffffffffffda RBX: 00007f8402425fa0 RCX: 00007f840219e199 [ 328.664436][T10868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 328.672378][T10868] RBP: 00007f84022350b8 R08: 0000000000000000 R09: 0000000000000000 [ 328.680319][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.688270][T10868] R13: 00007f8402426038 R14: 00007f8402425fa0 R15: 00007ffc4ad95578 [ 328.696215][T10868] [ 328.784720][T10876] ffs_data_put(): freeing [ 328.883848][T10868] unloading