last executing test programs: 10.724239491s ago: executing program 1 (id=253): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) ptrace(0x4208, r1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) fsmount(r0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0xfb3bdc61155d168b, 0xa) 10.65816628s ago: executing program 2 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x48d, 0x0, 0x800}]}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(0xffffffffffffffff, 0x3) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024800011a0080000904000010020600000624120000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 10.005103545s ago: executing program 1 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d600e744", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010101010000060098000a0000000a00c8008d0590e45c090000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='exofs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x8}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0007020000000000000000000000d23b8ffca8c5bcbebb9d546eead39553bc2ee8af176b980be108d9efe5fd4ce47538e7cc9b5ede6fed16f8afc4800d16abb021ec7b8a93a955375c0e9f5777942bfcb17c676f3b8e2f23fdcbbe62278dc0cb657251bc"], 0x10}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYRES8=r2], &(0x7f0000000440)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x9e89bdb1c2e60452, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0xfffffefd, 0x0, 0x0, 0x6, 0x9}, 0x50) creat(&(0x7f0000000000)='./file0\x00', 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x200000, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="f2", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 7.321765475s ago: executing program 4 (id=268): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.313444153s ago: executing program 2 (id=269): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2c, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x10, 0x7, 0x3f, 0xaf, 0x8, @private1, @mcast2, 0x8000, 0x48, 0x44d, 0x7}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) 7.270187734s ago: executing program 4 (id=270): mknodat$null(0xffffffffffffff9c, 0x0, 0x200, 0x103) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0xfffffffffffffffe, {0x4, 0x3, 0x663e, 0x8000, 0x9, 0x7, {0x3, 0x80004, 0x3, 0x42a, 0x1, 0xfe, 0x5368, 0x5, 0x3, 0x2000, 0x11ac2fcb, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x7fc}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_pidfd_open(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 6.884091849s ago: executing program 1 (id=271): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpgrp(0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/nf_conntrack_expect\x00') sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="34000000180000012abd7000ffdbdf251d01070008000900", @ANYRES32=r0, @ANYBLOB="1500010000000080030000000f532c222b3c3fe3c20000001272c0e12f4b80f0f8396ece0092758627bd9e31afc0eb50b01c2b9af506596f313fe1f9ac"], 0x34}}, 0x4044898) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="0017040000000e7289f0bed1567ff0a1f587b7b1c02583c0746f81f6fc8b77e5ca02e92cec571744d2a8d7bab7a2f4897b4bbe032278503265bebc80ba8b1702bf17969813b233fcddf655e942b7b170b8941b81beb96439666c660774bd0342f870ccfd64c79e83ed082328"], 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3a8, 0x0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7f, 0xb, 0x9}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffff, 0xffffffff, 0x3, 0xa, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0xff]}}, 0xc075, 0xfc1, 0x3, 0xfbff, 0x9, 0x1, 'ipvlan0\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2, @tid=r4}, 0x0) ioprio_get$pid(0x2, r4) sched_getscheduler(r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000780)={'bond_slave_0\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r7, &(0x7f00000005c0)="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", 0x681aafad) write(r7, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe) close(r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000500)={'bond0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) 6.489650694s ago: executing program 4 (id=275): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfcdfc612c00000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0xbc, 0x2c, 0x601, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0x300, 0x9702fd4b6861288c}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x7, 0xb6, 0x3, 0xa, 0x1, 0x1, 0x9cea, 0x8, [{0x3, 0x7, 0x7ff, 0x401}, {0x8001, 0x8, 0x9, 0xfffff800}, {0x4, 0x9, 0x6, 0xb2ee}, {0x5, 0x0, 0x6, 0x1}, {0x2, 0xcd, 0x4, 0x3}, {0x7, 0x0, 0x86, 0x4}, {0x97, 0x5, 0x14}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0xbc}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100900}, 0xc, &(0x7f0000001000)={&(0x7f0000000d40)={0x290, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) nanosleep(&(0x7f0000000300)={0x0, 0x20000000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000080)='\x00\x00') r8 = syz_usb_connect$uac2(0x6, 0xfc, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x8, 0xd0, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0xf9, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x9, 0x3c, 0x3}, [@sample_rate={0xb, 0x24, 0xd, 0x1, 0x2, 0x3, [0x1, 0x0]}, @processing_unit={0x11, 0x24, 0x8, 0x4, 0x1, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @selector_unit={0x8, 0x24, 0xb, 0x5, 0x3, "0b9efa"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x2, [0x0, 0xa, 0x8, 0x4, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x9c, "c2b7dda9"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xff, 0x1, 0x8, 0xcf, "0e", "2fa08f"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3, 0x6, "45bd4d75"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xfff, 0xf8, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x9, "c57dd347bda0b09d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0xe3, {0x8, 0x25, 0x1, 0x1c2, 0x3f, 0x11, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x1, 0xee, 0x3, 0x3, 0x3, 0xa96, 0xf7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x3, 0x10, {0x8, 0x25, 0x1, 0x2, 0xd, 0x4, 0x3}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x3, 0x9, 0x40}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "2ddfea7fa0968f8042afb3c9e349b10e"}]}, 0x7, [{0x81, &(0x7f00000002c0)=@string={0x81, 0x3, "8e9cccb39b6a4c7139b097801345e52ebd820663fe55bbca4d3cb973ec47b1c78416d4f3292e519b6f033069a33c5c9fd7adab645066b40f2ea1b94cd4de5b9c17fcf3d6d88ff165104504a122829b3af19b9ec787631bb663c9be11ebdfdfcfd911cb14501b039c63bc013dc69b6688a890db22f595e112d9b0a5ac3cadb5"}}, {0x28, &(0x7f0000000380)=@string={0x28, 0x3, "49ef7b86b0a0afd2548d4a9d64e7f84222597cbc6a3220ea7bb87e6a939016cfd803d2583bc9"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2410}}, {0xbc, &(0x7f0000000500)=@string={0xbc, 0x3, "52871d1924306f269ab9cf57f6ebaa706eb8b73c6ae5a10989ad7801e0ee8f736b5a165e7833acfd27a38587944451ff5c9c0022002100649797ee4b80e02ec13bf256483147cb43e574ad679327307621b774d32f21d54df3b9e15a6fb570f08c4e80b4c07ddf57ae44d0a9827a0ecd45f83b70c4ce04e887f805bb272c5ef2f665bd61452cfed29495cd0e99aa8fadd64257224c848fbf269d708aaf4ebdf2d4203e6d12a850519feed2e8dfbe7e539d520146e22e65368dd9"}}]}) syz_usb_control_io$uac2(r8, &(0x7f00000007c0)={0x14, &(0x7f0000000640)={0x40, 0x3, 0x2e, {0x2e, 0x8, "6b2d6f3d0ffc74171b47bb5c514ff99c217e840aa3ce345e4cf9f66ec425265b41d3e0b17bc5fa73b9aa04e2"}}, &(0x7f0000000680)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x20, 0x15, 0x8b, "57ba0a7ccf4a12f80d713c7eb4d5f935f158de6bd825712b2af8a84e0d0d670b02cde297fb5efb0e84918409cb615de60fd60fa6584f55fc91f5f03a4225aac3ad4965f99bcf5aeeddc1c14ccfcb3ca72b75818aa4ef7d597cfa46f5d2f1824cabbd7bc4163291fc8085b2c636b8467d65e726515ade66b6a0af7cae9d7a568e9d8f027dcc68953d328a74"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000940)={0x20, 0x81, 0x1, 'y'}, &(0x7f0000000980)={0x20, 0x82, 0x1, 'W'}, &(0x7f00000009c0)={0x20, 0x83, 0x1, "fb"}, &(0x7f0000000a00)={0x20, 0x84, 0x3, "ecf8ae"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "fa6705"}}) 6.444264418s ago: executing program 0 (id=276): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200001004000000fa000000000000000000000000009c009850ad96"], 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f61657020686173683d626c616b6532732d3232342d67655765726963000200"/76], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0b080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200a590783deda491877067da71320c02390bed7e3b7ada78cf2b756f7ac63ff551d4cace5bf69c1f7b0189db444dece2a0178afd5efd0665703c25c27c4d8e3ebba91c3ea64393122841673563eb06f3eb2eeca7b065980fc4a49dfe08e0c6b15ca70c14142685798bbad67fa324131c69487abe9dc806e9d0a36761df527eb70ba3411ebbdd07ae73c0f5eef3f62afa34bf4073835d23680ee8df"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5.543260386s ago: executing program 3 (id=277): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 5.412972677s ago: executing program 3 (id=278): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) fsmount(r0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0xfb3bdc61155d168b, 0xa) 5.269713581s ago: executing program 2 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x48d, 0x0, 0x800}]}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(0xffffffffffffffff, 0x3) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024800011a0080000904000010020600000624120000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) 5.235977259s ago: executing program 3 (id=280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) accept$unix(r2, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e) r4 = signalfd(r1, &(0x7f0000000680)={[0x3]}, 0x8) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80800) close_range(r5, r4, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) 5.16104557s ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d600e744", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010101010000060098000a0000000a00c8008d0590e45c090000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='exofs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x8}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0007020000000000000000000000d23b8ffca8c5bcbebb9d546eead39553bc2ee8af176b980be108d9efe5fd4ce47538e7cc9b5ede6fed16f8afc4800d16abb021ec7b8a93a955375c0e9f5777942bfcb17c676f3b8e2f23fdcbbe62278dc0cb657251bc"], 0x10}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYRES8=r2], &(0x7f0000000440)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x9e89bdb1c2e60452, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0xfffffefd, 0x0, 0x0, 0x6, 0x9}, 0x50) creat(&(0x7f0000000000)='./file0\x00', 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x200000, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="f2", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 5.021258581s ago: executing program 0 (id=282): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (fail_nth: 3) 4.956615546s ago: executing program 0 (id=283): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) unlinkat(r3, &(0x7f0000000040)='./bus\x00', 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xfd99) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x6001) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$unix(r6, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r7 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r7, 0x0, 0x0, 0x1000f4) sendfile(r7, r7, 0x0, 0x40000000800) 4.824988933s ago: executing program 0 (id=284): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0xfdef}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}], 0x18}}], 0x2, 0x20044000) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) accept4(r1, 0x0, 0x0, 0x0) 4.803659123s ago: executing program 0 (id=285): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xcc0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) setns(0xc9, 0x0) r7 = socket(0x1f, 0x5, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_control_io(r6, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20110c0000000c4845"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1, 0x0) write(r8, &(0x7f0000000100)='1', 0x1) 3.641303265s ago: executing program 1 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x5, 0x3, 0x2e, 0x0, '\x00', 0x9, 0xffffffffffffff7f}) write(r0, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f00000004c0)=@nullb, &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 3.207082153s ago: executing program 3 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x11d, &(0x7f0000000800)={@local, @random="42238e910adb", @void, {@ipv4={0x800, @generic={{0x2c, 0x4, 0x2, 0x7, 0x10f, 0x65, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, {[@lsrr={0x83, 0x13, 0x94, [@local, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @remote]}, @cipso={0x86, 0x15, 0x1, [{0x2, 0xf, "52e12b94e1c3a21700ed268994"}]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0x2}, {0x2, 0xd, "afcbd7a85f016a8f87cb1c"}]}, @timestamp_prespec={0x44, 0x4c, 0xc1, 0x3, 0x1, [{@rand_addr=0x64010102}, {@local, 0xfffffb5e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8508}, {@multicast2, 0x2}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x200}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x13, 0x4d, [@multicast2, @multicast2, @multicast1, @multicast2]}]}}, "6b719cdf9c9884af0f8bbc68ca6bcfc852206c8f5973c705ec9cdecaf110ecd4f05435b7d18ac0d2f84cb86b47a6a70ce838eb8f8e8af74beb8adfd53e7bf2ecf3767ccbc85ba83a1aea0125911eaaa9c125c69c3c827452fa5e7ba08c2bcf"}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001680)={0x18, {"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", 0x1000}}, 0x1006) sendmsg$nl_crypto(r6, 0x0, 0x40000) sendmsg$nl_route(r5, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3c1369d70000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c0001800800010001000000"], 0x3c}}, 0x0) 3.133029276s ago: executing program 1 (id=288): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioprio_get$pid(0x2, 0x0) 2.532373391s ago: executing program 1 (id=289): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r2 = syz_usb_connect(0x2, 0x4b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010303ff6e00000705010240ca929e76a956192f4d43cb4dde2c5a60da013b99e4169ccac9e425947c722782204133714b039467e158dc9537378dfa06dd15c652113663e0bb1c9fd3b91c3e997c47198fb4a11bf10dfc90bae9fbdbf62fdee726f33980857bded77a237199b6d85bcdeb25df365188857559b3573f32d6e9fc0560945bf6ec8ef62a3d17a322cc4e9a10e3c9512614479f557d877450d5fd178a9f3ac08991cd7ef3eb113787294fc7a3d8765c03918762e0b9ede5cc338a3e6347366323"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='+p', 0x2) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_usb_connect$uac1(0x5, 0xef, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x8, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x26eb, 0x42}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x3, 0x52}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x4, "efc1"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x4, 0x2, 0x4}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x0, 0x5a, "da"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x0, 0x3, 0x8, 0x0, 0xf8, 0xdb}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x3, "4d2f81bcf578"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7, 0xc2, "d97d", "75ba"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x47, 0xdd, 0xc0}]}, {{0x9, 0x5, 0x1, 0x9, 0x7bf, 0x0, 0xff, 0xa, {0x7, 0x25, 0x1, 0x0, 0x9, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0x6a, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0xd, "cfd6", ':X'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xe1, 0x0, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0x96, "8fa3db1922b7e8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7f, 0x2, 0x8, {0x7, 0x25, 0x1, 0x8, 0x9, 0xc}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x5, 0x73, 0x81, 0x8, 0xfc}, 0x71, &(0x7f0000000500)={0x5, 0xf, 0x71, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa8578019e480036c, 0xd, 0xe}, @generic={0x48, 0x10, 0xa, "9425f039a8a07017e58a7cd2490dc323ce1a6c415b951085c4323269d6769f8de11b358cbf55da32efd810eaa3324a2d1fc9e53a911ab5aad15fea3e9a340ac0b9e586375f"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x98, 0x2, 0x1, 0x3, 0x83}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0xf0, 0x5, 0x1, 0x3, 0x5}]}, 0x6, [{0xef, &(0x7f0000000580)=@string={0xef, 0x3, "1e0b24dae0e6f202de12db474a92e68ddcc08dc85d90040ade66bc7ad1ee1f3551ab0cc9509abdc4457604099b7421a95593a3e59336ea059cd92d8b5e7889140cf92880271320018657ee9d776e92702f544c93af5a697668773f254fc082670e5943aba3b48d823e281da16861fa8f8c65d3a2f47fb0f35d011790ef6882050a9907fb07b3469083ea6d659f672aaf420279167dfbfe7a680d1918cba4e5f114c5536bd0d9a013d6fca59a0e5d15d24666b7dc6e86fe06e3feeaaf08e57c2af9f7e1f544967717cc3b0786a00abfceeb37c8229ede5ea69624e8142d1bc512cc45ff5a333b56352c8b4b7cc1"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2479}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x443}}, {0xdd, &(0x7f0000000700)=@string={0xdd, 0x3, "970332fa23c9e9304ffa927c72d62f328906868b2d4d6b993d24c4f58726eb0883f99740615f3c482c36f82554a855f7177d83e63282f7b95d4efbee967da22d486df3c022a5c9dc40d7ec1dd6eb7352525bb228e4c0fb110e2613d2318faadc18a8e0b533ccbbbf778617fe711e2959b856bfb68531cefc6b59fbda559ca673ccbeedd3325a3a191e55124c4d0cdf48408b0e8dfd52c16b14fcd79f4226b5dd9dc4e1f168e6f6a46d9a97799820b2e5268ce7ff33776e5ebfae1ad207cb9976e0a53796214117bac06aa04b2107bcd3e81f5f7cab2074c107ef4c"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x480a}}, {0x3f, &(0x7f0000000840)=@string={0x3f, 0x3, "f694d19aa891c14c187762c519e3d5d282638a052fcc2b2b86b3d721518dd4c14179e115426149490519ab89bdd0a442b239fc2d9db11bc9bfb5eeee59"}}]}) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20008810) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r7, 0x100004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) sendmmsg(r8, &(0x7f0000004d40)=[{{&(0x7f0000000080)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x34}}, 0x80, 0x0}}], 0x1, 0x24008010) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="438801ffffffff02000100", 0xb}}, 0x0) 2.463653653s ago: executing program 3 (id=290): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) fsmount(r0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0xfb3bdc61155d168b, 0xa) 2.366870663s ago: executing program 4 (id=291): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007680)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xf, 0x5}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './debug\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e643000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b00000100", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r7, 0x4}, 0x38) 1.416620723s ago: executing program 0 (id=292): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2c, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x10, 0x7, 0x3f, 0xaf, 0x8, @private1, @mcast2, 0x8000, 0x48, 0x44d, 0x7}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) fsopen(&(0x7f0000000040)='v7\x00', 0x0) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) 1.357696936s ago: executing program 2 (id=293): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 1.312312995s ago: executing program 4 (id=294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001600), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b04000000993b0004000000008000aa115ca642", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x50a80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400ef0cd33e1f63ff1c0c4f53f726284ba29203c13e7ebfe96b0fced0179b9c208f90f248291bc59a96bc1e8421cd257158bec5ff7adcd2d593fa3cb5199a4337f24a81cbb09372b9c482d33bb2"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@RTM_DELMDB={0x138, 0x55, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x21}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x7e2593c7ea566198, 0x1, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xb}}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.000762747s ago: executing program 2 (id=295): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0xfdef}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}], 0x18}}], 0x2, 0x20044000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 36.873665ms ago: executing program 4 (id=296): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getresgid(0x0, 0xfffffffffffffffd, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 0s ago: executing program 2 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r0, &(0x7f0000000140), 0x0) write(r0, &(0x7f0000000180)='on', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 60.127275][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 60.127290][ T31] audit: type=1400 audit(1790850438.878:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.128320][ T31] audit: type=1400 audit(1790850438.878:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.129840][ T5585] cgroup: Unknown subsys name 'net' [ 60.130871][ T31] audit: type=1400 audit(1790850438.878:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.284281][ T5585] cgroup: Unknown subsys name 'cpuset' [ 60.286161][ T5585] cgroup: Unknown subsys name 'rlimit' [ 60.420794][ T31] audit: type=1400 audit(1790850439.168:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.421141][ T31] audit: type=1400 audit(1790850439.168:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.421327][ T31] audit: type=1400 audit(1790850439.168:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.421545][ T31] audit: type=1400 audit(1790850439.168:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.439476][ T31] audit: type=1400 audit(1790850439.188:136): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.439513][ T31] audit: type=1400 audit(1790850439.188:137): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.570691][ T5588] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.571264][ T31] audit: type=1400 audit(1790850439.318:138): avc: denied { relabelto } for pid=5588 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.498241][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.608757][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.610411][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.611247][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.612270][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.627047][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.627558][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.627832][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.635164][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.643128][ T4918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.643503][ T4918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.688757][ T4918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.691101][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.703410][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.714110][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.714419][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.715689][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.715876][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.716183][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.716858][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.717223][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.728367][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.735664][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.742614][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.750543][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.751092][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.944317][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.944688][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.944784][ T5597] bridge_slave_0: entered allmulticast mode [ 64.946036][ T5597] bridge_slave_0: entered promiscuous mode [ 64.948238][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.948302][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.948379][ T5597] bridge_slave_1: entered allmulticast mode [ 64.949730][ T5597] bridge_slave_1: entered promiscuous mode [ 65.037335][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.069794][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.089109][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.089230][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.089319][ T5607] bridge_slave_0: entered allmulticast mode [ 65.090469][ T5607] bridge_slave_0: entered promiscuous mode [ 65.126593][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.126667][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.126720][ T5596] bridge_slave_0: entered allmulticast mode [ 65.127413][ T5596] bridge_slave_0: entered promiscuous mode [ 65.128653][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.128717][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.128962][ T5607] bridge_slave_1: entered allmulticast mode [ 65.130655][ T5607] bridge_slave_1: entered promiscuous mode [ 65.149058][ T5597] team0: Port device team_slave_0 added [ 65.150987][ T5597] team0: Port device team_slave_1 added [ 65.197213][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.197273][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.197342][ T5596] bridge_slave_1: entered allmulticast mode [ 65.198358][ T5596] bridge_slave_1: entered promiscuous mode [ 65.256196][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.256206][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.256223][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.256865][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.256986][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.257223][ T5602] bridge_slave_0: entered allmulticast mode [ 65.258275][ T5602] bridge_slave_0: entered promiscuous mode [ 65.259812][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259884][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.259969][ T5599] bridge_slave_0: entered allmulticast mode [ 65.261115][ T5599] bridge_slave_0: entered promiscuous mode [ 65.273988][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.276514][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.278983][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.299207][ T5607] team0: Port device team_slave_0 added [ 65.301088][ T5607] team0: Port device team_slave_1 added [ 65.321171][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.321182][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.321200][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.323668][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.323678][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.323696][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.324079][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.324144][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.324220][ T5602] bridge_slave_1: entered allmulticast mode [ 65.325399][ T5602] bridge_slave_1: entered promiscuous mode [ 65.329212][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.347435][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.347493][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.347565][ T5599] bridge_slave_1: entered allmulticast mode [ 65.348634][ T5599] bridge_slave_1: entered promiscuous mode [ 65.370571][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.370581][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.370599][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.398853][ T5596] team0: Port device team_slave_0 added [ 65.426621][ T5596] team0: Port device team_slave_1 added [ 65.429593][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.469561][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.471865][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.528217][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.533841][ T5597] hsr_slave_0: entered promiscuous mode [ 65.534625][ T5597] hsr_slave_1: entered promiscuous mode [ 65.535858][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.535869][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.535887][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.542009][ T5607] hsr_slave_0: entered promiscuous mode [ 65.543171][ T5607] hsr_slave_1: entered promiscuous mode [ 65.543813][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 65.543857][ T5607] Cannot create hsr debugfs directory [ 65.565239][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.565249][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.565267][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.568471][ T5602] team0: Port device team_slave_0 added [ 65.665179][ T5602] team0: Port device team_slave_1 added [ 65.678500][ T5599] team0: Port device team_slave_0 added [ 65.705513][ T5611] Bluetooth: hci0: command tx timeout [ 65.705605][ T5611] Bluetooth: hci1: command tx timeout [ 65.788233][ T4918] Bluetooth: hci2: command tx timeout [ 65.788329][ T4918] Bluetooth: hci3: command tx timeout [ 65.788405][ T5611] Bluetooth: hci4: command tx timeout [ 65.788916][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.788968][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.817015][ T5599] team0: Port device team_slave_1 added [ 65.845815][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.845825][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.845841][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.863532][ T5596] hsr_slave_0: entered promiscuous mode [ 65.864198][ T5596] hsr_slave_1: entered promiscuous mode [ 65.864684][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 65.864698][ T5596] Cannot create hsr debugfs directory [ 65.880864][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.880875][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.880892][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.890140][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.890151][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.890168][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.922966][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.922976][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.922994][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.990472][ T5602] hsr_slave_0: entered promiscuous mode [ 65.991125][ T5602] hsr_slave_1: entered promiscuous mode [ 65.991590][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 65.991603][ T5602] Cannot create hsr debugfs directory [ 66.063416][ T5599] hsr_slave_0: entered promiscuous mode [ 66.064111][ T5599] hsr_slave_1: entered promiscuous mode [ 66.064937][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 66.064951][ T5599] Cannot create hsr debugfs directory [ 66.313531][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.317905][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.318806][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.323772][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.342282][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.347234][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.347768][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.354190][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.414229][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.418325][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.419653][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.426046][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.427214][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.433296][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.452093][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.460575][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.527182][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.529527][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.530006][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.533513][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.558111][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.566073][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.566603][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.570554][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.608466][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.636446][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.648846][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.658844][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.659650][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.661666][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.688216][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.690048][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.690581][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.693298][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.704648][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.741536][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.741617][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.749047][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.790374][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.790444][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.791419][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.791461][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.824317][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.826136][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.827210][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.829236][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.829761][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.833940][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.878956][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.880875][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.884176][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.884301][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.957027][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.998999][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.024906][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.024987][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.069239][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.070993][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.071072][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.168023][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.203403][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.203488][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.237069][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.237188][ T1401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.241454][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.306710][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.356366][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.356451][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.394111][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.394194][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.782976][ T5611] Bluetooth: hci1: command tx timeout [ 67.783006][ T5611] Bluetooth: hci0: command tx timeout [ 67.816960][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.847785][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.866238][ T4918] Bluetooth: hci4: command tx timeout [ 67.866262][ T4918] Bluetooth: hci2: command tx timeout [ 67.866277][ T4918] Bluetooth: hci3: command tx timeout [ 67.988237][ T5607] veth0_vlan: entered promiscuous mode [ 67.996638][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.013765][ T5607] veth1_vlan: entered promiscuous mode [ 68.108187][ T5607] veth0_macvtap: entered promiscuous mode [ 68.127919][ T5607] veth1_macvtap: entered promiscuous mode [ 68.131810][ T5602] veth0_vlan: entered promiscuous mode [ 68.166691][ T5602] veth1_vlan: entered promiscuous mode [ 68.179725][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.204912][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.300592][ T5602] veth0_macvtap: entered promiscuous mode [ 68.338246][ T5602] veth1_macvtap: entered promiscuous mode [ 68.341421][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 68.341433][ T31] audit: type=1400 audit(1790850447.088:152): avc: denied { sys_module } for pid=5599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.422665][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.425362][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.425384][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.428594][ T5597] veth0_vlan: entered promiscuous mode [ 68.438230][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.466312][ T5596] veth0_vlan: entered promiscuous mode [ 68.471890][ T5596] veth1_vlan: entered promiscuous mode [ 68.506857][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.510377][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.511603][ T5596] veth0_macvtap: entered promiscuous mode [ 68.527216][ T5597] veth1_vlan: entered promiscuous mode [ 68.557781][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.557796][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.560315][ T5596] veth1_macvtap: entered promiscuous mode [ 68.596438][ T31] audit: type=1400 audit(1790850447.348:153): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.WY5laG/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.598785][ T31] audit: type=1400 audit(1790850447.348:154): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.600512][ T31] audit: type=1400 audit(1790850447.348:155): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.WY5laG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.607217][ T31] audit: type=1400 audit(1790850447.358:156): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.609831][ T31] audit: type=1400 audit(1790850447.358:157): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.WY5laG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.610925][ T31] audit: type=1400 audit(1790850447.358:158): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.WY5laG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.625450][ T31] audit: type=1400 audit(1790850447.378:159): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.631753][ T31] audit: type=1400 audit(1790850447.378:160): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.635468][ T31] audit: type=1400 audit(1790850447.388:161): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.669161][ T5597] veth0_macvtap: entered promiscuous mode [ 68.679704][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.688386][ T5597] veth1_macvtap: entered promiscuous mode [ 68.699665][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.743679][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.743930][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.743959][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.743985][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744012][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744038][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744063][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744089][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.757161][ T1401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.757176][ T1401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.806338][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.818523][ T5599] veth0_vlan: entered promiscuous mode [ 68.877126][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.894622][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.894638][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.906932][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.907652][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.908236][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.908805][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.959066][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.968724][ T5599] veth1_vlan: entered promiscuous mode [ 69.101337][ T5791] ip_tables: iptables: counters copy to user failed while replacing table [ 69.120500][ T5599] veth0_macvtap: entered promiscuous mode [ 69.161616][ T5599] veth1_macvtap: entered promiscuous mode [ 69.191180][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.191192][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.292856][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.294101][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.312489][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.705655][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862342][ T5611] Bluetooth: hci0: command tx timeout [ 69.862376][ T5611] Bluetooth: hci1: command tx timeout [ 69.899490][ T1401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.899631][ T1401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.942506][ T4918] Bluetooth: hci3: command tx timeout [ 69.942532][ T4918] Bluetooth: hci2: command tx timeout [ 69.942550][ T4918] Bluetooth: hci4: command tx timeout [ 70.217144][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.441952][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.461412][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.461428][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.523775][ T1401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.523813][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.523826][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.562968][ T185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.563006][ T185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.901300][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.673038][ T1401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.673062][ T1401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.942194][ T5611] Bluetooth: hci1: command tx timeout [ 71.942458][ T5611] Bluetooth: hci0: command tx timeout [ 72.022263][ T4918] Bluetooth: hci4: command tx timeout [ 72.022295][ T4918] Bluetooth: hci2: command tx timeout [ 72.022314][ T4918] Bluetooth: hci3: command tx timeout [ 72.506286][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.506300][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.735027][ T5810] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 72.945622][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.114248][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 73.153721][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.155084][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.155101][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.155113][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.155134][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.237707][ T25] usb 5-1: config 0 descriptor?? [ 73.478618][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 73.478651][ T31] audit: type=1400 audit(1790850452.218:179): avc: denied { create } for pid=5812 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.478786][ T31] audit: type=1400 audit(1790850452.218:180): avc: denied { create } for pid=5812 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.478887][ T31] audit: type=1400 audit(1790850452.228:181): avc: denied { write } for pid=5812 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.065980][ T5823] mmap: syz.1.2 (5823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.090805][ T31] audit: type=1400 audit(1790850452.838:182): avc: denied { map_create } for pid=5824 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.092581][ T31] audit: type=1400 audit(1790850452.848:183): avc: denied { perfmon } for pid=5824 comm="syz.3.10" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.094264][ T31] audit: type=1400 audit(1790850452.848:184): avc: denied { map_read map_write } for pid=5824 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.286245][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289353][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289378][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289397][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289415][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289434][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289452][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289471][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289488][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.289561][ T25] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 74.305707][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5 [ 74.315415][ T31] audit: type=1400 audit(1790850453.068:185): avc: denied { ioctl } for pid=5824 comm="syz.3.10" path="socket:[9556]" dev="sockfs" ino=9556 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.512170][ T31] audit: type=1400 audit(1790850453.138:186): avc: denied { read } for pid=5824 comm="syz.3.10" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.512347][ T31] audit: type=1400 audit(1790850453.138:187): avc: denied { open } for pid=5824 comm="syz.3.10" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.512463][ T31] audit: type=1400 audit(1790850453.198:188): avc: denied { ioctl } for pid=5824 comm="syz.3.10" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.814535][ T25] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 74.927343][ T3211] usb 5-1: USB disconnect, device number 2 [ 75.071099][ T5832] fido_id[5832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 75.150575][ T5831] batman_adv: batadv0: Adding interface: syzkaller0 [ 75.150589][ T5831] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.150614][ T5831] batman_adv: batadv0: Interface activated: syzkaller0 [ 75.347875][ T5838] netlink: 'syz.0.11': attribute type 3 has an invalid length. [ 75.347960][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 75.823705][ T5821] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 75.831465][ T5821] batman_adv: batadv0: Removing interface: syzkaller0 [ 75.876656][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 76.746012][ T30] cfg80211: failed to load regulatory.db [ 79.643549][ T3211] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.822559][ T3211] usb 3-1: Using ep0 maxpacket: 16 [ 79.833977][ T3211] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.925620][ T3211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.925681][ T3211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.925730][ T3211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.925825][ T3211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.390420][ T3211] usb 3-1: config 0 descriptor?? [ 82.085489][ T3211] usbhid 3-1:0.0: can't add hid device: -71 [ 82.085573][ T3211] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.120175][ T3211] usb 3-1: USB disconnect, device number 2 [ 82.339044][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 82.339062][ T31] audit: type=1400 audit(1790850461.088:206): avc: denied { create } for pid=5889 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.548993][ T31] audit: type=1400 audit(1790850461.298:207): avc: denied { read } for pid=5886 comm="syz.2.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.554037][ T31] audit: type=1400 audit(1790850461.298:208): avc: denied { open } for pid=5886 comm="syz.2.27" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.615389][ T31] audit: type=1400 audit(1790850461.368:209): avc: denied { setopt } for pid=5886 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.665577][ T31] audit: type=1400 audit(1790850461.418:210): avc: denied { bind } for pid=5886 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.951030][ T31] audit: type=1400 audit(1790850461.698:211): avc: denied { write } for pid=5889 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.052125][ T31] audit: type=1400 audit(1790850461.738:212): avc: denied { create } for pid=5889 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.152627][ T31] audit: type=1400 audit(1790850461.908:213): avc: denied { ioctl } for pid=5895 comm="syz.3.29" path="socket:[9663]" dev="sockfs" ino=9663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.153297][ T31] audit: type=1400 audit(1790850461.908:214): avc: denied { bind } for pid=5895 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.154122][ T31] audit: type=1400 audit(1790850461.908:215): avc: denied { write } for pid=5895 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.371356][ T5923] mtrr: base(0x105001e00000020000) is not aligned on a size(0x70bd2b000) boundary [ 85.374863][ T5923] netlink: 'syz.0.36': attribute type 3 has an invalid length. [ 86.792128][ T5720] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.813071][ T5715] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 86.942937][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 86.943680][ T5720] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.944577][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.944601][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.944620][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.944653][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.010590][ T5715] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 87.011996][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.031074][ T5720] usb 4-1: config 0 descriptor?? [ 87.045900][ T5723] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 87.046999][ T5715] usb 1-1: config 0 descriptor?? [ 87.070078][ T5715] pwc: Samsung MPC-C10 USB webcam detected. [ 87.212619][ T5723] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 87.213446][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.217984][ T5723] usb 2-1: config 0 descriptor?? [ 87.231265][ T5723] pwc: Samsung MPC-C10 USB webcam detected. [ 87.392597][ T5715] pwc: send_video_command error -71 [ 87.392638][ T5715] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 87.393432][ T5715] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 87.535739][ T5715] usb 1-1: USB disconnect, device number 2 [ 87.897720][ T5720] hid_parser_main: 5 callbacks suppressed [ 87.897753][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.898747][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.984466][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.023193][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.023231][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.290340][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.290438][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.290529][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.290599][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.290650][ T5720] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 88.968727][ T5723] pwc: send_video_command error -71 [ 88.968795][ T5723] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 88.969101][ T5723] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 89.474086][ T5723] usb 2-1: USB disconnect, device number 2 [ 90.505643][ T5720] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 90.573638][ T5720] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 90.606397][ T5720] usb 4-1: USB disconnect, device number 2 [ 90.678620][ T5958] fido_id[5958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 93.093275][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 93.093334][ T31] audit: type=1400 audit(1790850471.848:243): avc: denied { prog_run } for pid=5977 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.256520][ T31] audit: type=1400 audit(1790850472.008:244): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 93.599381][ T31] audit: type=1400 audit(1790850472.338:245): avc: denied { unlink } for pid=5607 comm="syz-executor" name="file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.702717][ T5702] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.875573][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 93.877297][ T5702] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.880652][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.880711][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.880740][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.880832][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.029791][ T5702] usb 2-1: config 0 descriptor?? [ 94.739394][ T5702] hid_parser_main: 5 callbacks suppressed [ 94.739515][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.739893][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.739915][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.740316][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.740515][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.740880][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.741062][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.741345][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.741432][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.741940][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 94.986770][ T5702] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input7 [ 95.260286][ T6000] mtrr: base(0x105001e00000020000) is not aligned on a size(0x70bd2b000) boundary [ 95.260606][ T6000] netlink: 'syz.0.59': attribute type 3 has an invalid length. [ 95.369233][ T5702] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 95.377234][ T5702] usb 2-1: USB disconnect, device number 3 [ 96.811628][ T6003] fido_id[6003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.130765][ T31] audit: type=1400 audit(1790850475.878:246): avc: denied { mount } for pid=6018 comm="syz.1.65" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.137083][ T6020] FAULT_INJECTION: forcing a failure. [ 97.137083][ T6020] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.137107][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 97.137125][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 97.137134][ T6020] Call Trace: [ 97.137139][ T6020] [ 97.137145][ T6020] dump_stack_lvl+0x100/0x190 [ 97.137172][ T6020] should_fail_ex.cold+0x5/0xa [ 97.137197][ T6020] _copy_to_user+0x32/0xd0 [ 97.137218][ T6020] simple_read_from_buffer+0xcb/0x170 [ 97.137242][ T6020] proc_fail_nth_read+0x1af/0x230 [ 97.137264][ T6020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.137286][ T6020] ? rw_verify_area+0xce/0x6d0 [ 97.137302][ T6020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.137322][ T6020] vfs_read+0x1e4/0xb40 [ 97.137340][ T6020] ? lock_acquire+0x1d1/0x380 [ 97.137357][ T6020] ? __fget_files+0x34/0x3d0 [ 97.137377][ T6020] ? __pfx_vfs_read+0x10/0x10 [ 97.137393][ T6020] ? find_held_lock+0x2b/0x80 [ 97.137416][ T6020] ? __fget_files+0x215/0x3d0 [ 97.137440][ T6020] ? __fget_files+0x21f/0x3d0 [ 97.137466][ T6020] ksys_read+0x12a/0x250 [ 97.137482][ T6020] ? __pfx_ksys_read+0x10/0x10 [ 97.137506][ T6020] do_syscall_64+0x123/0x790 [ 97.137525][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.137541][ T6020] RIP: 0033:0x7fe70a35e98e [ 97.137554][ T6020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.137567][ T6020] RSP: 002b:00007fe70b2a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.137583][ T6020] RAX: ffffffffffffffda RBX: 00007fe70b2a16c0 RCX: 00007fe70a35e98e [ 97.137593][ T6020] RDX: 000000000000000f RSI: 00007fe70b2a10a0 RDI: 0000000000000004 [ 97.137603][ T6020] RBP: 00007fe70b2a1090 R08: 0000000000000000 R09: 0000000000000000 [ 97.137612][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.137621][ T6020] R13: 00007fe70a626038 R14: 00007fe70a625fa0 R15: 00007ffe8104d828 [ 97.137642][ T6020] [ 97.176009][ T6010] Could not find key with description: [syz] [ 97.176019][ T6010] process_request_key_err: No key [ 97.176026][ T6010] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 97.176034][ T6010] One or more global auth toks could not properly register; rc = [-2] [ 97.176060][ T6010] Error validating options; rc = [-2] [ 97.183115][ T31] audit: type=1400 audit(1790850475.928:247): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.371634][ T31] audit: type=1400 audit(1790850477.118:248): avc: denied { shutdown } for pid=6038 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.482383][ T31] audit: type=1400 audit(1790850477.238:249): avc: denied { getopt } for pid=6038 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.483803][ T31] audit: type=1400 audit(1790850477.238:250): avc: denied { connect } for pid=6038 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.486019][ T31] audit: type=1400 audit(1790850477.238:251): avc: denied { name_connect } for pid=6038 comm="syz.1.73" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.593447][ T31] audit: type=1400 audit(1790850477.248:252): avc: denied { kexec_image_load } for pid=6038 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 98.952137][ T3211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.060477][ T31] audit: type=1400 audit(1790850477.808:253): avc: denied { setopt } for pid=6038 comm="syz.1.73" lport=46111 faddr=::ffff:100.1.0.252 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.097222][ T31] audit: type=1400 audit(1790850477.848:254): avc: denied { ioctl } for pid=6038 comm="syz.1.73" path="socket:[8662]" dev="sockfs" ino=8662 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.172642][ T3211] usb 4-1: Using ep0 maxpacket: 16 [ 99.177896][ T3211] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.200825][ T3211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.200851][ T3211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.200870][ T3211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.200902][ T3211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.250624][ T3211] usb 4-1: config 0 descriptor?? [ 99.366302][ T31] audit: type=1400 audit(1790850478.118:255): avc: denied { lock } for pid=6052 comm="syz.2.78" path="socket:[9991]" dev="sockfs" ino=9991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.407870][ T31] audit: type=1400 audit(1790850478.158:256): avc: denied { create } for pid=6052 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.472290][ T6060] FAULT_INJECTION: forcing a failure. [ 99.472290][ T6060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.472319][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 99.472338][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 99.472347][ T6060] Call Trace: [ 99.472353][ T6060] [ 99.472359][ T6060] dump_stack_lvl+0x100/0x190 [ 99.472386][ T6060] should_fail_ex.cold+0x5/0xa [ 99.472402][ T6060] _copy_from_user+0x2e/0xd0 [ 99.472417][ T6060] __do_sys_add_key+0x278/0x460 [ 99.472428][ T6060] ? __pfx___do_sys_add_key+0x10/0x10 [ 99.472438][ T6060] ? ksys_write+0x1ac/0x250 [ 99.472455][ T6060] do_syscall_64+0x123/0x790 [ 99.472468][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.472479][ T6060] RIP: 0033:0x7fe70a39e159 [ 99.472488][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.472498][ T6060] RSP: 002b:00007fe70b2a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 99.472510][ T6060] RAX: ffffffffffffffda RBX: 00007fe70a625fa0 RCX: 00007fe70a39e159 [ 99.472517][ T6060] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 99.472523][ T6060] RBP: 00007fe70b2a1090 R08: 000000003f9e68d5 R09: 0000000000000000 [ 99.472530][ T6060] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 99.472536][ T6060] R13: 00007fe70a626038 R14: 00007fe70a625fa0 R15: 00007ffe8104d828 [ 99.472552][ T6060] [ 99.765009][ T3211] hid_parser_main: 5 callbacks suppressed [ 99.765029][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765061][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765079][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765097][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765114][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765131][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765147][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765164][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765182][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765199][ T3211] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 99.765368][ T6063] bridge0: port 3(ip6gretap0) entered blocking state [ 99.768606][ T6063] bridge0: port 3(ip6gretap0) entered disabled state [ 99.768782][ T6063] ip6gretap0: entered allmulticast mode [ 99.774712][ T6063] ip6gretap0: entered promiscuous mode [ 99.776641][ T6063] bridge0: port 3(ip6gretap0) entered blocking state [ 99.776724][ T6063] bridge0: port 3(ip6gretap0) entered forwarding state [ 99.868582][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.889788][ T3211] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8 [ 99.924434][ T3211] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 99.993577][ T3211] usb 4-1: USB disconnect, device number 3 [ 99.998195][ T31] audit: type=1400 audit(1790850478.748:257): avc: denied { create } for pid=6065 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.028713][ T6066] fido_id[6066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 100.608137][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 100.645532][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 100.649868][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 100.649890][ T30] usb 3-1: Product: syz [ 100.649905][ T30] usb 3-1: Manufacturer: syz [ 100.694261][ T6079] FAULT_INJECTION: forcing a failure. [ 100.694261][ T6079] name failslab, interval 1, probability 0, space 0, times 1 [ 100.694294][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(full) [ 100.694316][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 100.694328][ T6079] Call Trace: [ 100.694335][ T6079] [ 100.694342][ T6079] dump_stack_lvl+0x100/0x190 [ 100.694377][ T6079] should_fail_ex.cold+0x5/0xa [ 100.694406][ T6079] should_failslab+0xc2/0x120 [ 100.694435][ T6079] __kmalloc_noprof+0xfc/0x840 [ 100.694459][ T6079] ? mpi_alloc_limb_space+0x31/0x60 [ 100.694489][ T6079] mpi_alloc_limb_space+0x31/0x60 [ 100.694513][ T6079] mpi_powm+0x436/0x1e50 [ 100.694549][ T6079] ? __pfx_mpi_powm+0x10/0x10 [ 100.694572][ T6079] ? mpi_free+0xc0/0x150 [ 100.694594][ T6079] ? mpi_free+0xe1/0x150 [ 100.694616][ T6079] ? kfree+0x22b/0x6d0 [ 100.694639][ T6079] ? mpi_free+0xe6/0x150 [ 100.694666][ T6079] rsa_enc+0x1fe/0x3b0 [ 100.694694][ T6079] ? __pfx_rsa_enc+0x10/0x10 [ 100.694718][ T6079] ? __virt_addr_valid+0x239/0x430 [ 100.694739][ T6079] ? sg_init_one+0xf5/0x1b0 [ 100.694760][ T6079] rsassa_pkcs1_verify+0x4eb/0xc20 [ 100.694795][ T6079] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 100.694835][ T6079] ? rsa_max_size+0xd/0x70 [ 100.694858][ T6079] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 100.694889][ T6079] public_key_verify_signature+0x5ee/0x910 [ 100.694915][ T6079] ? __pfx_public_key_verify_signature+0x10/0x10 [ 100.694950][ T6079] ? asymmetric_key_generate_id+0x7e/0x180 [ 100.694991][ T6079] x509_check_for_self_signed+0x325/0x510 [ 100.695020][ T6079] x509_cert_parse+0x60c/0x910 [ 100.695057][ T6079] x509_key_preparse+0x65/0x9c0 [ 100.695088][ T6079] asymmetric_key_preparse+0xce/0x1d0 [ 100.695107][ T6079] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 100.695128][ T6079] __key_create_or_update+0x463/0xe30 [ 100.695160][ T6079] ? __pfx___key_create_or_update+0x10/0x10 [ 100.695189][ T6079] ? lookup_user_key+0x3f3/0x1300 [ 100.695225][ T6079] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 100.695250][ T6079] ? __pfx_keyring_search_iterator+0x10/0x10 [ 100.695283][ T6079] key_create_or_update+0x42/0x60 [ 100.695314][ T6079] __do_sys_add_key+0x2e8/0x460 [ 100.695336][ T6079] ? __pfx___do_sys_add_key+0x10/0x10 [ 100.695366][ T6079] do_syscall_64+0x123/0x790 [ 100.695390][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.695410][ T6079] RIP: 0033:0x7fedf5b9e159 [ 100.695425][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.695442][ T6079] RSP: 002b:00007fedf6ab5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 100.695461][ T6079] RAX: ffffffffffffffda RBX: 00007fedf5e25fa0 RCX: 00007fedf5b9e159 [ 100.695474][ T6079] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 100.695486][ T6079] RBP: 00007fedf5c3506b R08: 000000000e9f5afd R09: 0000000000000000 [ 100.695498][ T6079] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 100.695510][ T6079] R13: 00007fedf5e26038 R14: 00007fedf5e25fa0 R15: 00007ffe4e507a78 [ 100.695536][ T6079] [ 100.781637][ T6081] FAULT_INJECTION: forcing a failure. [ 100.781637][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 100.781663][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT(full) [ 100.781681][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 100.781690][ T6081] Call Trace: [ 100.781695][ T6081] [ 100.781701][ T6081] dump_stack_lvl+0x100/0x190 [ 100.781727][ T6081] should_fail_ex.cold+0x5/0xa [ 100.781750][ T6081] should_failslab+0xc2/0x120 [ 100.781774][ T6081] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.781794][ T6081] ? fuse_request_alloc+0x22/0x200 [ 100.781821][ T6081] fuse_request_alloc+0x22/0x200 [ 100.781844][ T6081] fuse_get_req+0x20a/0x400 [ 100.781857][ T6081] ? kernel_text_address+0x8d/0x100 [ 100.781882][ T6081] ? __pfx_fuse_get_req+0x10/0x10 [ 100.781898][ T6081] ? from_kgid+0x8f/0xd0 [ 100.781916][ T6081] ? __pfx_from_kgid+0x10/0x10 [ 100.781940][ T6081] fuse_chan_send+0x259/0x9c0 [ 100.781962][ T6081] __fuse_simple_request+0x18e/0x1e0 [ 100.781981][ T6081] fuse_do_setattr+0xe79/0x1c70 [ 100.782009][ T6081] ? __pfx_fuse_do_setattr+0x10/0x10 [ 100.782031][ T6081] ? find_held_lock+0x2b/0x80 [ 100.782053][ T6081] ? avc_has_perm_noaudit+0x11e/0x470 [ 100.782083][ T6081] ? avc_has_perm_noaudit+0x145/0x470 [ 100.782120][ T6081] ? find_held_lock+0x2b/0x80 [ 100.782153][ T6081] ? __pfx_selinux_inode_setattr+0x10/0x10 [ 100.782181][ T6081] fuse_setattr+0x2d9/0x630 [ 100.782206][ T6081] ? __pfx_fuse_setattr+0x10/0x10 [ 100.782227][ T6081] notify_change+0xb25/0x1330 [ 100.782253][ T6081] vfs_utimes+0x42e/0x880 [ 100.782272][ T6081] ? __pfx_vfs_utimes+0x10/0x10 [ 100.782302][ T6081] do_utimes_path+0x109/0x1b0 [ 100.782319][ T6081] ? __pfx_do_utimes_path+0x10/0x10 [ 100.782334][ T6081] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.782352][ T6081] ? __fget_files+0x21f/0x3d0 [ 100.782377][ T6081] __x64_sys_utime+0x17d/0x1f0 [ 100.782393][ T6081] ? __pfx___x64_sys_utime+0x10/0x10 [ 100.782419][ T6081] do_syscall_64+0x123/0x790 [ 100.782438][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.782454][ T6081] RIP: 0033:0x7fedf5b9e159 [ 100.782467][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.782481][ T6081] RSP: 002b:00007fedf6ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 100.782496][ T6081] RAX: ffffffffffffffda RBX: 00007fedf5e25fa0 RCX: 00007fedf5b9e159 [ 100.782506][ T6081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 100.782515][ T6081] RBP: 00007fedf6ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 100.782529][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.782538][ T6081] R13: 00007fedf5e26038 R14: 00007fedf5e25fa0 R15: 00007ffe4e507a78 [ 100.782560][ T6081] [ 101.415799][ T30] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 101.449456][ T30] usb 3-1: USB disconnect, device number 3 [ 101.492422][ T5720] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.643326][ T5720] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 101.644194][ T5720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.644218][ T5720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 101.644233][ T5720] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 101.644252][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.879196][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 101.928604][ T6106] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 101.929007][ T6106] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 102.064948][ T5720] usb 2-1: USB disconnect, device number 4 [ 102.382095][ T5715] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 102.453203][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.453564][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.453928][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.454386][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.454932][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.455358][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.456076][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.456446][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.456812][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.457144][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.457446][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.458208][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.458584][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.458931][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.459274][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.459610][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.459732][ T6135] syz.4.103 uses obsolete (PF_INET,SOCK_PACKET) [ 102.459943][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.460296][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.460629][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.502275][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.535440][ T5715] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 102.535878][ T5789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.537166][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 102.537193][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 4772, setting to 64 [ 102.542225][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.542242][ T5715] usb 3-1: Product: syz [ 102.542255][ T5715] usb 3-1: Manufacturer: syz [ 102.542266][ T5715] usb 3-1: SerialNumber: syz [ 102.546109][ T5715] usb 3-1: config 0 descriptor?? [ 102.546701][ T6113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.550035][ T5715] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0206 [ 102.631665][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.648700][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.660273][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.667860][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.682607][ T5789] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 102.683498][ T5789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 102.685058][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.685076][ T5789] usb 4-1: Product: syz [ 102.685089][ T5789] usb 4-1: Manufacturer: syz [ 102.699417][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.704364][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.711738][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.718983][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.732611][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.733667][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.743196][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.754779][ T6132] overlay: filesystem on ./file0 not supported as upperdir [ 102.762726][ T30] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 102.942987][ T30] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.946837][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.946858][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.946896][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.949017][ T30] usb 1-1: config 0 descriptor?? [ 103.707367][ T30] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.715685][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 104.007059][ T30] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.013837][ T30] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.013875][ T30] usb 1-1: media controller created [ 104.020367][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.082236][ T5789] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 104.102575][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 104.102658][ T30] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.128215][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 104.146761][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 104.146789][ T30] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.163281][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 104.163295][ T31] audit: type=1400 audit(1790850482.908:286): avc: denied { read } for pid=6153 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.281460][ T5789] usb 4-1: USB disconnect, device number 4 [ 104.306097][ T30] usb 1-1: USB disconnect, device number 3 [ 104.313837][ T3211] dvb-usb: bulk message failed: -22 (1/0) [ 104.313869][ T3211] dvb-usb: error while querying for an remote control event. [ 104.373971][ T30] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.886857][ T6170] No source specified [ 105.265652][ T31] audit: type=1400 audit(1790850484.018:287): avc: denied { write } for pid=6163 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.396492][ T5789] usb 3-1: USB disconnect, device number 4 [ 105.878636][ T31] audit: type=1400 audit(1790850484.608:288): avc: denied { connect } for pid=6163 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.893103][ T31] audit: type=1400 audit(1790850484.648:289): avc: denied { prog_load } for pid=6176 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.894974][ T31] audit: type=1400 audit(1790850484.648:290): avc: denied { prog_run } for pid=6176 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.984238][ T6184] Zero length message leads to an empty skb [ 106.395428][ T31] audit: type=1400 audit(1790850485.138:291): avc: denied { map_create } for pid=6186 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.395456][ T31] audit: type=1400 audit(1790850485.148:292): avc: denied { map_read map_write } for pid=6186 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.530342][ T5789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.508066][ T31] audit: type=1400 audit(1790850486.258:293): avc: denied { ioctl } for pid=6192 comm="syz.4.120" path="socket:[8980]" dev="sockfs" ino=8980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.508624][ T31] audit: type=1400 audit(1790850486.258:294): avc: denied { setopt } for pid=6192 comm="syz.4.120" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.571576][ T5789] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 107.581728][ T5789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.581752][ T5789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 107.581766][ T5789] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 107.581786][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.885736][ T5789] cxacru 3-1:1.0: invalid response length to cm 0x90: 32 [ 108.089182][ T30] usb 3-1: USB disconnect, device number 5 [ 108.138814][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 108.138828][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 108.513744][ T5715] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.733723][ T5715] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 108.734811][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.734836][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.749166][ T5715] mdc800 1-1:1.0: probe fails -> Wrong Endpoints. [ 108.999846][ T3213] usb 1-1: USB disconnect, device number 4 [ 109.794427][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 109.794449][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 109.834604][ T6240] ip_tables: iptables: counters copy to user failed while replacing table [ 110.406982][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.152094][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.270472][ T6299] FAULT_INJECTION: forcing a failure. [ 115.270472][ T6299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.270504][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.1.148 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.270528][ T6299] Tainted: [L]=SOFTLOCKUP [ 115.270534][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 115.270544][ T6299] Call Trace: [ 115.270551][ T6299] [ 115.270558][ T6299] dump_stack_lvl+0x100/0x190 [ 115.270587][ T6299] should_fail_ex.cold+0x5/0xa [ 115.270613][ T6299] _copy_from_user+0x2e/0xd0 [ 115.270637][ T6299] kstrtouint_from_user+0xd6/0x1d0 [ 115.270665][ T6299] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 115.270698][ T6299] ? lock_acquire+0x1d1/0x380 [ 115.270725][ T6299] proc_fail_nth_write+0x83/0x220 [ 115.270754][ T6299] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 115.270787][ T6299] vfs_write+0x2aa/0x1050 [ 115.270809][ T6299] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 115.270834][ T6299] ? lock_acquire+0x1d1/0x380 [ 115.270853][ T6299] ? __fget_files+0x34/0x3d0 [ 115.270877][ T6299] ? __pfx_vfs_write+0x10/0x10 [ 115.270896][ T6299] ? find_held_lock+0x2b/0x80 [ 115.270923][ T6299] ? __fget_files+0x215/0x3d0 [ 115.270951][ T6299] ? __fget_files+0x21f/0x3d0 [ 115.270983][ T6299] ksys_write+0x12a/0x250 [ 115.271005][ T6299] ? __pfx_ksys_write+0x10/0x10 [ 115.271033][ T6299] do_syscall_64+0x123/0x790 [ 115.271056][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.271076][ T6299] RIP: 0033:0x7fe70a35e98e [ 115.271091][ T6299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.271108][ T6299] RSP: 002b:00007fe70b23dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.271126][ T6299] RAX: ffffffffffffffda RBX: 00007fe70b23e6c0 RCX: 00007fe70a35e98e [ 115.271138][ T6299] RDX: 0000000000000001 RSI: 00007fe70b23e0a0 RDI: 0000000000000006 [ 115.271148][ T6299] RBP: 00007fe70b23e090 R08: 0000000000000000 R09: 0000000000000000 [ 115.271159][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.271169][ T6299] R13: 00007fe70a626308 R14: 00007fe70a626270 R15: 00007ffe8104d828 [ 115.271194][ T6299] [ 115.605818][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 115.794068][ T9] usb 4-1: New USB device found, idVendor=2724, idProduct=c737, bcdDevice=5e.af [ 115.794108][ T9] usb 4-1: too many configurations: 44, using maximum allowed: 8 [ 116.129919][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 116.129941][ T9] usb 4-1: can't read configurations, error -61 [ 116.442070][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.592215][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 116.593150][ T9] usb 4-1: New USB device found, idVendor=2724, idProduct=c737, bcdDevice=5e.af [ 116.593181][ T9] usb 4-1: too many configurations: 44, using maximum allowed: 8 [ 116.594477][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 116.594504][ T9] usb 4-1: can't read configurations, error -61 [ 116.594647][ T9] usb usb4-port1: attempt power cycle [ 117.735630][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.824597][ T9] usb 4-1: device descriptor read/8, error -71 [ 118.625262][ T6335] syzkaller0: entered promiscuous mode [ 118.625283][ T6335] syzkaller0: entered allmulticast mode [ 118.985078][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 118.985094][ T31] audit: type=1400 audit(1790850497.738:302): avc: denied { read write } for pid=6336 comm="syz.3.159" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.985533][ T31] audit: type=1400 audit(1790850497.738:303): avc: denied { open } for pid=6336 comm="syz.3.159" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.625053][ T31] audit: type=1400 audit(1790850498.358:304): avc: denied { connect } for pid=6356 comm="syz.3.163" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.151056][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 120.904236][ T6368] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6369] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6368] [ 121.172280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.307996][ T31] audit: type=1400 audit(1790850499.678:305): avc: denied { connect } for pid=6365 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.308040][ T31] audit: type=1400 audit(1790850499.678:306): avc: denied { write } for pid=6365 comm="syz.4.167" path="socket:[12427]" dev="sockfs" ino=12427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.543284][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.692069][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 121.694453][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.694481][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 121.695289][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 121.696893][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.696905][ T9] usb 5-1: Product: syz [ 121.696913][ T9] usb 5-1: Manufacturer: syz [ 121.696924][ T9] usb 5-1: SerialNumber: syz [ 121.744243][ T5702] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 122.234532][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 122.319085][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 122.324436][ T9] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 122.325136][ T9] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 122.330614][ T9] usb 5-1: USB disconnect, device number 3 [ 122.371692][ T5702] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 122.379163][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.397656][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.399725][ T5702] usb 1-1: config 0 descriptor?? [ 122.423664][ T5702] pwc: Samsung MPC-C10 USB webcam detected. [ 122.711157][ T31] audit: type=1400 audit(1790850501.458:307): avc: denied { create } for pid=6375 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.741252][ T31] audit: type=1400 audit(1790850501.488:308): avc: denied { write } for pid=6375 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.838436][ T5702] pwc: send_video_command error -71 [ 122.838453][ T5702] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 122.838525][ T5702] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 123.437399][ T5702] usb 1-1: USB disconnect, device number 5 [ 124.214764][ T31] audit: type=1400 audit(1790850502.968:309): avc: denied { append } for pid=6399 comm="syz.2.175" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.221116][ T6401] FAULT_INJECTION: forcing a failure. [ 124.221116][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 124.221137][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.2.175 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.221151][ T6401] Tainted: [L]=SOFTLOCKUP [ 124.221155][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 124.221161][ T6401] Call Trace: [ 124.221165][ T6401] [ 124.221170][ T6401] dump_stack_lvl+0x100/0x190 [ 124.221190][ T6401] should_fail_ex.cold+0x5/0xa [ 124.221206][ T6401] should_failslab+0xc2/0x120 [ 124.221221][ T6401] __kmalloc_noprof+0xfc/0x840 [ 124.221233][ T6401] ? rcu_is_watching+0x13/0xc0 [ 124.221254][ T6401] ? tomoyo_realpath_from_path+0xb6/0x690 [ 124.221279][ T6401] tomoyo_realpath_from_path+0xb6/0x690 [ 124.221300][ T6401] tomoyo_path_number_perm+0x23c/0x580 [ 124.221312][ T6401] ? tomoyo_path_number_perm+0x22e/0x580 [ 124.221326][ T6401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.221344][ T6401] ? __lock_acquire+0x5c0/0x1f40 [ 124.221363][ T6401] ? __fget_files+0x34/0x3d0 [ 124.221378][ T6401] ? find_held_lock+0x2b/0x80 [ 124.221394][ T6401] ? hook_file_ioctl_common+0x140/0x440 [ 124.221414][ T6401] ? __fget_files+0x21f/0x3d0 [ 124.221431][ T6401] security_file_ioctl+0xd3/0x230 [ 124.221446][ T6401] __x64_sys_ioctl+0xb7/0x210 [ 124.221459][ T6401] do_syscall_64+0x123/0x790 [ 124.221472][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.221484][ T6401] RIP: 0033:0x7f214379e159 [ 124.221493][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.221503][ T6401] RSP: 002b:00007f2144672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.221515][ T6401] RAX: ffffffffffffffda RBX: 00007f2143a25fa0 RCX: 00007f214379e159 [ 124.221522][ T6401] RDX: 0000200000022a00 RSI: 000000008028640c RDI: 0000000000000003 [ 124.221528][ T6401] RBP: 00007f2144672090 R08: 0000000000000000 R09: 0000000000000000 [ 124.221534][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.221541][ T6401] R13: 00007f2143a26038 R14: 00007f2143a25fa0 R15: 00007ffee78c7a68 [ 124.221554][ T6401] [ 124.221559][ T6401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.354402][ T31] audit: type=1400 audit(1790850503.108:310): avc: denied { write } for pid=6402 comm="syz.3.176" name="usb_gadget" dev="configfs" ino=2654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.361263][ T31] audit: type=1400 audit(1790850503.108:311): avc: denied { add_name } for pid=6402 comm="syz.3.176" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.361588][ T31] audit: type=1400 audit(1790850503.108:312): avc: denied { create } for pid=6402 comm="syz.3.176" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 124.399174][ T31] audit: type=1400 audit(1790850503.148:313): avc: denied { write } for pid=6402 comm="syz.3.176" name="configs" dev="configfs" ino=12676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.399691][ T31] audit: type=1400 audit(1790850503.148:314): avc: denied { write } for pid=6402 comm="syz.3.176" name="functions" dev="configfs" ino=12675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.424512][ T31] audit: type=1400 audit(1790850503.178:315): avc: denied { write } for pid=6402 comm="syz.3.176" name="c.1" dev="configfs" ino=12680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.441231][ T31] audit: type=1400 audit(1790850503.188:316): avc: denied { create } for pid=6402 comm="syz.3.176" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 124.444419][ T31] audit: type=1400 audit(1790850503.198:317): avc: denied { write } for pid=6402 comm="syz.3.176" name="c.1" dev="configfs" ino=12680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.461522][ T31] audit: type=1400 audit(1790850503.208:318): avc: denied { write } for pid=6402 comm="syz.3.176" name="UDC" dev="configfs" ino=12684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 124.473128][ T6403] FAULT_INJECTION: forcing a failure. [ 124.473128][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 124.473153][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.3.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.473177][ T6403] Tainted: [L]=SOFTLOCKUP [ 124.473182][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 124.473191][ T6403] Call Trace: [ 124.473197][ T6403] [ 124.473203][ T6403] dump_stack_lvl+0x100/0x190 [ 124.473232][ T6403] should_fail_ex.cold+0x5/0xa [ 124.473255][ T6403] should_failslab+0xc2/0x120 [ 124.473276][ T6403] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 124.473298][ T6403] ? gadget_dev_desc_UDC_store+0x51/0x2e0 [ 124.473326][ T6403] kstrdup+0x51/0xe0 [ 124.473344][ T6403] gadget_dev_desc_UDC_store+0x51/0x2e0 [ 124.473369][ T6403] configfs_write_iter+0x302/0x4e0 [ 124.473390][ T6403] vfs_write+0x6af/0x1050 [ 124.473408][ T6403] ? __pfx_configfs_write_iter+0x10/0x10 [ 124.473426][ T6403] ? __pfx_vfs_write+0x10/0x10 [ 124.473442][ T6403] ? find_held_lock+0x2b/0x80 [ 124.473480][ T6403] ksys_write+0x12a/0x250 [ 124.473498][ T6403] ? __pfx_ksys_write+0x10/0x10 [ 124.473522][ T6403] do_syscall_64+0x123/0x790 [ 124.473541][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.473557][ T6403] RIP: 0033:0x7f5f88d9e159 [ 124.473571][ T6403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.473585][ T6403] RSP: 002b:00007f5f89cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.473601][ T6403] RAX: ffffffffffffffda RBX: 00007f5f89025fa0 RCX: 00007f5f88d9e159 [ 124.473612][ T6403] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 124.473621][ T6403] RBP: 00007f5f89cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 124.473630][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.473639][ T6403] R13: 00007f5f89026038 R14: 00007f5f89025fa0 R15: 00007ffcca67e288 [ 124.473662][ T6403] [ 124.680574][ T6405] cramfs: Unknown parameter '&)\({}/'}' [ 125.775295][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.013063][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 126.036520][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 126.040781][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 126.040804][ T9] usb 1-1: Product: syz [ 126.040817][ T9] usb 1-1: Manufacturer: syz [ 126.812033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 127.442744][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.442792][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.579209][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 127.637940][ T9] usb 1-1: USB disconnect, device number 6 [ 127.824614][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.187'. [ 127.890287][ T6442] syz_tun: entered allmulticast mode [ 128.490273][ T6439] syz_tun: left allmulticast mode [ 128.693708][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 128.694177][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 129.176913][ T6461] ======================================================= [ 129.176913][ T6461] WARNING: The mand mount option has been deprecated and [ 129.176913][ T6461] and is ignored by this kernel. Remove the mand [ 129.176913][ T6461] option from the mount to silence this warning. [ 129.176913][ T6461] ======================================================= [ 129.820994][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 129.821012][ T31] audit: type=1400 audit(1790850508.448:338): avc: denied { listen } for pid=6460 comm="syz.2.196" lport=57830 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.821048][ T31] audit: type=1400 audit(1790850508.448:339): avc: denied { accept } for pid=6460 comm="syz.2.196" lport=57830 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.150788][ T31] audit: type=1400 audit(1790850508.898:340): avc: denied { allowed } for pid=6457 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.190428][ T31] audit: type=1326 audit(1790850508.938:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.195" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6719e159 code=0x7ffc0000 [ 130.190474][ T31] audit: type=1326 audit(1790850508.938:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.195" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6719e159 code=0x7ffc0000 [ 130.232775][ T31] audit: type=1326 audit(1790850508.978:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.195" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5f6719e159 code=0x7ffc0000 [ 130.541301][ T31] audit: type=1326 audit(1790850509.288:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.195" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6719e159 code=0x7ffc0000 [ 130.545167][ T31] audit: type=1326 audit(1790850509.298:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.195" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6719e159 code=0x7ffc0000 [ 130.608589][ T6469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.199'. [ 130.642785][ T5715] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.783156][ T5715] usb 5-1: device descriptor read/64, error -71 [ 131.104682][ T5715] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.227985][ T31] audit: type=1400 audit(1790850509.938:346): avc: denied { create } for pid=6473 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.503946][ T5715] usb 5-1: device descriptor read/64, error -71 [ 131.599536][ T31] audit: type=1400 audit(1790850510.348:347): avc: denied { mounton } for pid=6478 comm="syz.3.188" path="/43/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 131.625174][ T5715] usb usb5-port1: attempt power cycle [ 132.022230][ T5715] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.043270][ T5715] usb 5-1: device descriptor read/8, error -71 [ 132.848623][ T5715] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.862743][ T5715] usb 5-1: device descriptor read/8, error -71 [ 132.972248][ T5715] usb usb5-port1: unable to enumerate USB device [ 133.432825][ T6499] FAULT_INJECTION: forcing a failure. [ 133.432825][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.432864][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.2.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.432889][ T6499] Tainted: [L]=SOFTLOCKUP [ 133.432895][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 133.432905][ T6499] Call Trace: [ 133.432912][ T6499] [ 133.432919][ T6499] dump_stack_lvl+0x100/0x190 [ 133.432949][ T6499] should_fail_ex.cold+0x5/0xa [ 133.432975][ T6499] _copy_from_user+0x2e/0xd0 [ 133.432998][ T6499] kstrtouint_from_user+0xd6/0x1d0 [ 133.433025][ T6499] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 133.433056][ T6499] ? lock_acquire+0x1d1/0x380 [ 133.433082][ T6499] proc_fail_nth_write+0x83/0x220 [ 133.433107][ T6499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.433139][ T6499] vfs_write+0x2aa/0x1050 [ 133.433160][ T6499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.433183][ T6499] ? lock_acquire+0x1d1/0x380 [ 133.433208][ T6499] ? __fget_files+0x34/0x3d0 [ 133.433231][ T6499] ? __pfx_vfs_write+0x10/0x10 [ 133.433250][ T6499] ? find_held_lock+0x2b/0x80 [ 133.433277][ T6499] ? __fget_files+0x215/0x3d0 [ 133.433306][ T6499] ? __fget_files+0x21f/0x3d0 [ 133.433338][ T6499] ksys_write+0x12a/0x250 [ 133.433358][ T6499] ? __pfx_ksys_write+0x10/0x10 [ 133.433386][ T6499] do_syscall_64+0x123/0x790 [ 133.433407][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.433426][ T6499] RIP: 0033:0x7f214375e98e [ 133.433441][ T6499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.433457][ T6499] RSP: 002b:00007f2144671fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.433475][ T6499] RAX: ffffffffffffffda RBX: 00007f21446726c0 RCX: 00007f214375e98e [ 133.433487][ T6499] RDX: 0000000000000001 RSI: 00007f21446720a0 RDI: 0000000000000005 [ 133.433497][ T6499] RBP: 00007f2144672090 R08: 0000000000000000 R09: 0000000000000000 [ 133.433508][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.433518][ T6499] R13: 00007f2143a26038 R14: 00007f2143a25fa0 R15: 00007ffee78c7a68 [ 133.433544][ T6499] [ 134.822131][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 134.822162][ T31] audit: type=1400 audit(1790850513.468:354): avc: denied { ioctl } for pid=6504 comm="syz.3.207" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.289577][ T31] audit: type=1400 audit(1790850514.038:355): avc: denied { bind } for pid=6513 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.314074][ T6221] IPVS: starting estimator thread 0... [ 135.330109][ T31] audit: type=1400 audit(1790850514.078:356): avc: denied { write } for pid=6513 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.354132][ T31] audit: type=1400 audit(1790850514.108:357): avc: denied { nlmsg_write } for pid=6513 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.354251][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz.4.211'. [ 135.363727][ T6520] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 135.412109][ T6519] IPVS: using max 76 ests per chain, 182400 per kthread [ 135.415743][ T31] audit: type=1400 audit(1790850514.168:358): avc: denied { read } for pid=6513 comm="syz.4.211" dev="sockfs" ino=13028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.418378][ T31] audit: type=1400 audit(1790850514.168:359): avc: denied { read write } for pid=6513 comm="syz.4.211" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.418402][ T31] audit: type=1400 audit(1790850514.168:360): avc: denied { open } for pid=6513 comm="syz.4.211" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.608469][ T31] audit: type=1400 audit(1790850515.358:361): avc: denied { create } for pid=6529 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.731585][ T6535] batman_adv: batadv0: Adding interface: syzkaller0 [ 136.731600][ T6535] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.731616][ T6535] batman_adv: batadv0: Interface activated: syzkaller0 [ 137.125732][ T31] audit: type=1400 audit(1790850515.828:362): avc: denied { map } for pid=6529 comm="syz.4.215" path="/dev/tty4" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 137.281083][ T31] audit: type=1400 audit(1790850516.028:363): avc: denied { create } for pid=6537 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.358956][ T6535] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 137.370623][ T6535] batman_adv: batadv0: Removing interface: syzkaller0 [ 137.829324][ T6552] batman_adv: batadv0: Adding interface: syzkaller0 [ 137.829340][ T6552] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.829364][ T6552] batman_adv: batadv0: Interface activated: syzkaller0 [ 138.367837][ T6539] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 138.384562][ T6539] batman_adv: batadv0: Removing interface: syzkaller0 [ 138.582248][ T3213] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.733951][ T3213] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 138.734864][ T3213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 138.735924][ T3213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.735945][ T3213] usb 4-1: Product: syz [ 138.735953][ T3213] usb 4-1: Manufacturer: syz [ 148.425887][ T3213] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 148.564126][ T9] usb 4-1: USB disconnect, device number 9 [ 148.685054][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 148.685071][ T31] audit: type=1400 audit(1790850527.438:365): avc: denied { create } for pid=6572 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.687503][ T31] audit: type=1400 audit(1790850527.438:366): avc: denied { ioctl } for pid=6572 comm="syz.2.225" path="socket:[12039]" dev="sockfs" ino=12039 ioctlcmd=0x8991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.696086][ T6575] bond0: (slave bond_slave_1): Releasing backup interface [ 150.753040][ T6571] Could not find key with description: [syz] [ 150.753055][ T6571] process_request_key_err: No key [ 150.753062][ T6571] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 150.753071][ T6571] One or more global auth toks could not properly register; rc = [-2] [ 150.753097][ T6571] Error validating options; rc = [-2] [ 150.841050][ T6583] Could not find key with description: [syz] [ 150.841060][ T6583] process_request_key_err: No key [ 150.841065][ T6583] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 150.841069][ T6583] One or more global auth toks could not properly register; rc = [-2] [ 150.841085][ T6583] Error validating options; rc = [-2] [ 151.069543][ T6607] batman_adv: batadv0: Adding interface: syzkaller0 [ 151.069559][ T6607] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.069583][ T6607] batman_adv: batadv0: Interface activated: syzkaller0 [ 151.932318][ T6601] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 152.054574][ T6601] batman_adv: batadv0: Removing interface: syzkaller0 [ 153.438377][ T31] audit: type=1400 audit(1790850532.188:367): avc: denied { bind } for pid=6625 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.439000][ T6626] FAULT_INJECTION: forcing a failure. [ 153.439000][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.439065][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.3.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.439089][ T6626] Tainted: [L]=SOFTLOCKUP [ 153.439096][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 153.439105][ T6626] Call Trace: [ 153.439111][ T6626] [ 153.439119][ T6626] dump_stack_lvl+0x100/0x190 [ 153.439150][ T6626] should_fail_ex.cold+0x5/0xa [ 153.439175][ T6626] _copy_from_iter+0x1f4/0x1690 [ 153.439202][ T6626] ? __pfx__copy_from_iter+0x10/0x10 [ 153.439223][ T6626] ? sock_has_perm+0x25a/0x2f0 [ 153.439242][ T6626] ? __pfx_sock_has_perm+0x10/0x10 [ 153.439268][ T6626] hci_sock_sendmsg+0x4a1/0x26a0 [ 153.439298][ T6626] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 153.439325][ T6626] ? selinux_socket_sendmsg+0x198/0x2f0 [ 153.439350][ T6626] sock_write_iter+0x53a/0x5b0 [ 153.439369][ T6626] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 153.439394][ T6626] ? __pfx_sock_write_iter+0x10/0x10 [ 153.439419][ T6626] ? bpf_lsm_file_permission+0x9/0x10 [ 153.439443][ T6626] ? security_file_permission+0x76/0x210 [ 153.439467][ T6626] ? rw_verify_area+0xce/0x6d0 [ 153.439487][ T6626] vfs_write+0x6af/0x1050 [ 153.439508][ T6626] ? __pfx_sock_write_iter+0x10/0x10 [ 153.439528][ T6626] ? __pfx_vfs_write+0x10/0x10 [ 153.439546][ T6626] ? find_held_lock+0x2b/0x80 [ 153.439587][ T6626] ksys_write+0x1f8/0x250 [ 153.439607][ T6626] ? __pfx_ksys_write+0x10/0x10 [ 153.439635][ T6626] do_syscall_64+0x123/0x790 [ 153.439655][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.439674][ T6626] RIP: 0033:0x7f5f88d9e159 [ 153.439690][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.439706][ T6626] RSP: 002b:00007f5f89cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.439724][ T6626] RAX: ffffffffffffffda RBX: 00007f5f89025fa0 RCX: 00007f5f88d9e159 [ 153.439736][ T6626] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000004 [ 153.439747][ T6626] RBP: 00007f5f89cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 153.439757][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.439771][ T6626] R13: 00007f5f89026038 R14: 00007f5f89025fa0 R15: 00007ffcca67e288 [ 153.439819][ T6626] [ 154.664572][ T31] audit: type=1400 audit(1790850533.368:368): avc: denied { read write } for pid=6640 comm="syz.2.245" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.698245][ T31] audit: type=1400 audit(1790850533.418:369): avc: denied { open } for pid=6640 comm="syz.2.245" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.112591][ T31] audit: type=1400 audit(1790850533.608:370): avc: denied { write } for pid=6640 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.112769][ T31] audit: type=1400 audit(1790850533.608:371): avc: denied { getopt } for pid=6640 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.195536][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 155.195557][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 155.197334][ T6648] syzkaller0: entered promiscuous mode [ 155.197350][ T6648] syzkaller0: entered allmulticast mode [ 155.293892][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 156.343818][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.344703][ T9] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 156.344742][ T9] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 156.346025][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 156.346046][ T9] usb 1-1: SerialNumber: syz [ 157.221759][ T9] usb 1-1: No union descriptors [ 157.330887][ T6668] batman_adv: batadv0: Adding interface: syzkaller0 [ 157.330905][ T6668] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.330931][ T6668] batman_adv: batadv0: Interface activated: syzkaller0 [ 157.457311][ T9] usb 1-1: USB disconnect, device number 7 [ 157.835243][ T6679] FAULT_INJECTION: forcing a failure. [ 157.835243][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 157.835273][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.3.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.835297][ T6679] Tainted: [L]=SOFTLOCKUP [ 157.835303][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 157.835313][ T6679] Call Trace: [ 157.835319][ T6679] [ 157.835326][ T6679] dump_stack_lvl+0x100/0x190 [ 157.835357][ T6679] should_fail_ex.cold+0x5/0xa [ 157.835383][ T6679] should_failslab+0xc2/0x120 [ 157.835408][ T6679] kmem_cache_alloc_noprof+0x92/0x6a0 [ 157.835430][ T6679] ? __send_signal_locked+0x1d1/0x1430 [ 157.835468][ T6679] __send_signal_locked+0x1d1/0x1430 [ 157.835502][ T6679] send_signal_locked+0x15e/0xa00 [ 157.835524][ T6679] ? __pfx_send_signal_locked+0x10/0x10 [ 157.835542][ T6679] ? lock_acquire+0x1d1/0x380 [ 157.835568][ T6679] ? _raw_spin_lock_irq+0x45/0x50 [ 157.835600][ T6679] tty_signal_session_leader+0x19d/0x5b0 [ 157.835627][ T6679] __tty_hangup.part.0+0x312/0x7c0 [ 157.835657][ T6679] tty_ioctl+0x112e/0x1640 [ 157.835681][ T6679] ? __pfx_tty_ioctl+0x10/0x10 [ 157.835703][ T6679] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 157.835729][ T6679] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 157.835756][ T6679] ? __fget_files+0x34/0x3d0 [ 157.835791][ T6679] ? selinux_file_ioctl+0x13b/0x290 [ 157.835812][ T6679] ? selinux_file_ioctl+0xb6/0x290 [ 157.835835][ T6679] ? __pfx_tty_ioctl+0x10/0x10 [ 157.835859][ T6679] __x64_sys_ioctl+0x18e/0x210 [ 157.835881][ T6679] do_syscall_64+0x123/0x790 [ 157.835906][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.835924][ T6679] RIP: 0033:0x7f5f88d9e159 [ 157.835939][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.835954][ T6679] RSP: 002b:00007f5f89cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.835971][ T6679] RAX: ffffffffffffffda RBX: 00007f5f89025fa0 RCX: 00007f5f88d9e159 [ 157.835983][ T6679] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 157.835993][ T6679] RBP: 00007f5f89cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 157.836004][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.836014][ T6679] R13: 00007f5f89026038 R14: 00007f5f89025fa0 R15: 00007ffcca67e288 [ 157.836041][ T6679] [ 157.919921][ T6662] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 157.957131][ T6662] batman_adv: batadv0: Removing interface: syzkaller0 [ 158.045008][ T31] audit: type=1400 audit(1790850536.798:372): avc: denied { create } for pid=6680 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.127290][ T6687] FAULT_INJECTION: forcing a failure. [ 158.127290][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.127310][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.3.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.127325][ T6687] Tainted: [L]=SOFTLOCKUP [ 158.127329][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 158.127335][ T6687] Call Trace: [ 158.127339][ T6687] [ 158.127343][ T6687] dump_stack_lvl+0x100/0x190 [ 158.127363][ T6687] should_fail_ex.cold+0x5/0xa [ 158.127378][ T6687] _copy_from_user+0x2e/0xd0 [ 158.127393][ T6687] dma_buf_ioctl+0x57b/0x8a0 [ 158.127408][ T6687] ? __fget_files+0x34/0x3d0 [ 158.127431][ T6687] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 158.127465][ T6687] ? selinux_file_ioctl+0x13b/0x290 [ 158.127486][ T6687] ? selinux_file_ioctl+0xb6/0x290 [ 158.127507][ T6687] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 158.127523][ T6687] __x64_sys_ioctl+0x18e/0x210 [ 158.127537][ T6687] do_syscall_64+0x123/0x790 [ 158.127550][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.127562][ T6687] RIP: 0033:0x7f5f88d9e159 [ 158.127571][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.127581][ T6687] RSP: 002b:00007f5f89cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.127592][ T6687] RAX: ffffffffffffffda RBX: 00007f5f89025fa0 RCX: 00007f5f88d9e159 [ 158.127599][ T6687] RDX: 0000200000000540 RSI: 0000000040086200 RDI: 0000000000000004 [ 158.127606][ T6687] RBP: 00007f5f89cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 158.127612][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.127618][ T6687] R13: 00007f5f89026038 R14: 00007f5f89025fa0 R15: 00007ffcca67e288 [ 158.127632][ T6687] [ 158.873811][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.965503][ T31] audit: type=1400 audit(1790850537.718:373): avc: denied { search } for pid=6695 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.012554][ T6690] syz.3.260 (6690): drop_caches: 2 [ 159.032244][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 159.039870][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.060972][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.060999][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.061019][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.061053][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 syzkaller syzkaller login: [ 159.107119][ T9] usb 1-1: config 0 descriptor?? [ 159.518947][ T9] hid_parser_main: 5 callbacks suppressed [ 159.518962][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.518975][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.518988][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519000][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519012][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519024][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519037][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519049][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519061][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.519072][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.605930][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input14 [ 159.607660][ T31] audit: type=1400 audit(1790850538.358:374): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.607701][ T31] audit: type=1400 audit(1790850538.358:375): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.611057][ T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 159.672422][ T31] audit: type=1400 audit(1790850538.428:376): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2895 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.905090][ T5702] usb 1-1: USB disconnect, device number 8 [ 160.609880][ T6712] Bluetooth: MGMT ver 1.23 [ 161.050952][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 161.239491][ T6728] smpboot: CPU 1 is now offline [ 162.295619][ T6202] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 162.400656][ T6106] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 162.456575][ T6713] process 6714 (syz.2.269) no longer affine to cpu1 [ 162.618777][ T5789] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.764162][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 162.764563][ T5789] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 162.767727][ T5789] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 162.767744][ T5789] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.767760][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.768936][ T5789] usb 5-1: config 0 descriptor?? [ 162.822096][ T5720] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.972028][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 162.972459][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.973250][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.973265][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.973283][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.035495][ T6567] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 163.041895][ T5720] usb 2-1: config 0 descriptor?? [ 163.061090][ T5720] hub 2-1:0.0: USB hub found [ 163.092334][ T125] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.282526][ T6567] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.283340][ T6567] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 163.283360][ T6567] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 163.284129][ T6567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.284140][ T6567] usb 3-1: SerialNumber: syz [ 163.288961][ T6567] usb 3-1: No union descriptors [ 163.460717][ T6760] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.466043][ T31] audit: type=1400 audit(1790850542.218:377): avc: denied { read write } for pid=6758 comm="syz.0.285" name="video2" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.466089][ T31] audit: type=1400 audit(1790850542.218:378): avc: denied { open } for pid=6758 comm="syz.0.285" path="/dev/video2" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.466110][ T31] audit: type=1400 audit(1790850542.218:379): avc: denied { ioctl } for pid=6758 comm="syz.0.285" path="/dev/video2" dev="devtmpfs" ino=931 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.494308][ T125] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 163.520058][ T125] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 163.600488][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 163.600504][ T125] usb 4-1: Product: syz [ 163.600513][ T125] usb 4-1: Manufacturer: syz [ 163.663416][ T5720] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 163.677472][ T6720] bond0: no command found in slaves file - use +ifname or -ifname [ 163.698947][ T6720] bond0: (slave bond_slave_1): Releasing backup interface [ 163.717002][ T5789] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 163.740364][ T5720] usbhid 2-1:0.0: can't add hid device: -71 [ 163.740410][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 163.783621][ T5720] usb 2-1: USB disconnect, device number 5 [ 163.971536][ T5789] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -71 [ 164.022092][ T6567] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 164.056345][ T125] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 164.075062][ T125] usb 4-1: USB disconnect, device number 10 [ 164.172480][ T6567] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 164.173308][ T6567] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.173325][ T6567] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.174495][ T6567] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 164.174507][ T6567] usb 1-1: Product: syz [ 164.174515][ T6567] usb 1-1: Manufacturer: syz [ 164.178682][ T6567] hub 1-1:4.0: USB hub found [ 164.289660][ T31] audit: type=1400 audit(1790850543.038:380): avc: denied { mounton } for pid=6768 comm="syz.1.286" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 164.290169][ T6769] FAULT_INJECTION: forcing a failure. [ 164.290169][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 164.290187][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.1.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.290202][ T6769] Tainted: [L]=SOFTLOCKUP [ 164.290206][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 164.290214][ T6769] Call Trace: [ 164.290218][ T6769] [ 164.290222][ T6769] dump_stack_lvl+0x100/0x190 [ 164.290242][ T6769] should_fail_ex.cold+0x5/0xa [ 164.290258][ T6769] should_failslab+0xc2/0x120 [ 164.290273][ T6769] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.290285][ T6769] ? sget_fc+0xb19/0x1f70 [ 164.290300][ T6769] sget_fc+0xb19/0x1f70 [ 164.290311][ T6769] ? __pfx_super_s_dev_test+0x10/0x10 [ 164.290331][ T6769] ? __pfx_super_s_dev_set+0x10/0x10 [ 164.290342][ T6769] ? __pfx_sget_fc+0x10/0x10 [ 164.290353][ T6769] ? mntput+0x70/0xa0 [ 164.290367][ T6769] ? lookup_bdev+0x16b/0x2a0 [ 164.290378][ T6769] ? __pfx_lookup_bdev+0x10/0x10 [ 164.290388][ T6769] ? cred_has_capability.isra.0+0x186/0x300 [ 164.290403][ T6769] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 164.290421][ T6769] get_tree_bdev_flags+0x1ba/0x620 [ 164.290433][ T6769] ? __pfx_qnx4_fill_super+0x10/0x10 [ 164.290447][ T6769] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 164.290460][ T6769] ? cap_capable+0x107/0x430 [ 164.290472][ T6769] ? bpf_lsm_capable+0x9/0x10 [ 164.290482][ T6769] ? security_capable+0x80/0x260 [ 164.290494][ T6769] vfs_get_tree+0x92/0x320 [ 164.290504][ T6769] path_mount+0x7d0/0x24c0 [ 164.290517][ T6769] ? __pfx_path_mount+0x10/0x10 [ 164.290527][ T6769] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.290540][ T6769] ? putname+0xb1/0x110 [ 164.290554][ T6769] ? kmem_cache_free+0x127/0x6c0 [ 164.290570][ T6769] ? __x64_sys_mount+0x293/0x310 [ 164.290580][ T6769] __x64_sys_mount+0x293/0x310 [ 164.290591][ T6769] ? __pfx___x64_sys_mount+0x10/0x10 [ 164.290605][ T6769] do_syscall_64+0x123/0x790 [ 164.290618][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.290629][ T6769] RIP: 0033:0x7fe70a39e159 [ 164.290638][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.290649][ T6769] RSP: 002b:00007fe70b2a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.290659][ T6769] RAX: ffffffffffffffda RBX: 00007fe70a625fa0 RCX: 00007fe70a39e159 [ 164.290666][ T6769] RDX: 0000200000000180 RSI: 0000200000000440 RDI: 00002000000004c0 [ 164.290672][ T6769] RBP: 00007fe70a43506b R08: 0000000000000000 R09: 0000000000000000 [ 164.290679][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.290685][ T6769] R13: 00007fe70a626038 R14: 00007fe70a625fa0 R15: 00007ffe8104d828 [ 164.290699][ T6769] [ 164.444457][ T6567] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 164.634957][ T5720] usb 5-1: USB disconnect, device number 8 [ 166.423237][ T5720] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.505967][ T6567] usb 3-1: USB disconnect, device number 6 [ 166.593081][ T125] usb 1-1: USB disconnect, device number 9 [ 166.695525][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 166.695970][ T5720] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 166.697173][ T5720] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 166.697187][ T5720] usb 2-1: config 0 has no interface number 0 [ 166.698720][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.698734][ T5720] usb 2-1: Product: syz [ 166.698742][ T5720] usb 2-1: Manufacturer: syz [ 166.698750][ T5720] usb 2-1: SerialNumber: syz [ 166.760868][ T5720] usb 2-1: config 0 descriptor?? [ 166.864225][ T5720] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.712492][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.712748][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.929007][ T6797] Could not find key with description: [syz] [ 167.929014][ T6797] process_request_key_err: No key [ 167.929019][ T6797] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 167.929038][ T6797] One or more global auth toks could not properly register; rc = [-2] [ 167.929054][ T6797] Error validating options; rc = [-2] [ 208.723086][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.136134][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.021962][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.028911][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6777/1:b..l P5596/1:b..l [ 273.037928][ C0] rcu: (detected by 0, t=10502 jiffies, g=18509, q=909 ncpus=1) [ 273.045611][ C0] task:syz-executor state:R running task stack:23528 pid:5596 tgid:5596 ppid:5593 task_flags:0x400140 flags:0x00080000 [ 273.059055][ C0] Call Trace: [ 273.062308][ C0] [ 273.065219][ C0] __schedule+0x1259/0x6920 [ 273.069705][ C0] ? irqentry_exit+0x24d/0xa10 [ 273.074444][ C0] ? __pfx___schedule+0x10/0x10 [ 273.079281][ C0] ? mark_held_locks+0x40/0x70 [ 273.084018][ C0] preempt_schedule_irq+0x4e/0x90 [ 273.089020][ C0] irqentry_exit+0x205/0xa10 [ 273.093581][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.099532][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 273.104702][ C0] Code: 05 cf 9b a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de e5 5d 0f 0f 82 c9 02 00 00 8b 35 7e 17 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 9b a5 12 0f 85 09 03 00 00 48 83 c4 [ 273.124276][ C0] RSP: 0018:ffffc900040672b0 EFLAGS: 00000206 [ 273.130313][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 273.138254][ C0] RDX: 0000000000000000 RSI: ffffffff8e3684a0 RDI: ffffffff8c623980 [ 273.146205][ C0] RBP: ffffffff8edec5a0 R08: 00000000f906cbe4 R09: 0000000000000007 [ 273.154145][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 273.162087][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.170035][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 273.175209][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.181331][ C0] unwind_next_frame+0xd1/0x2090 [ 273.186243][ C0] ? unwind_next_frame+0xbd/0x2090 [ 273.191327][ C0] ? stack_trace_save+0x8e/0xc0 [ 273.196147][ C0] ? __unwind_start+0x3cd/0x7e0 [ 273.200971][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 273.206153][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.212276][ C0] arch_stack_walk+0x94/0xf0 [ 273.216841][ C0] ? stack_trace_save+0x8e/0xc0 [ 273.221664][ C0] stack_trace_save+0x8e/0xc0 [ 273.226311][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 273.231657][ C0] kasan_save_stack+0x30/0x50 [ 273.236325][ C0] kasan_save_track+0x14/0x30 [ 273.240975][ C0] __kasan_slab_alloc+0x89/0x90 [ 273.245798][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 273.251232][ C0] ? anon_vma_clone+0x2b3/0xca0 [ 273.256057][ C0] anon_vma_clone+0x2b3/0xca0 [ 273.260711][ C0] anon_vma_fork+0x1bb/0x6a0 [ 273.265279][ C0] dup_mmap+0x10e6/0x2370 [ 273.269590][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 273.274250][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.280035][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 273.285819][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 273.290750][ C0] ? lock_acquire+0x1d1/0x380 [ 273.295396][ C0] ? copy_process+0x4816/0x8380 [ 273.300221][ C0] copy_process+0x4821/0x8380 [ 273.304878][ C0] ? __pfx_copy_process+0x10/0x10 [ 273.309874][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.315231][ C0] kernel_clone+0x176/0x9d0 [ 273.319708][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 273.324708][ C0] ? __might_fault+0xc5/0x140 [ 273.329356][ C0] ? find_held_lock+0x2b/0x80 [ 273.334008][ C0] ? __might_fault+0xc5/0x140 [ 273.338656][ C0] __do_sys_clone+0xd9/0x120 [ 273.343216][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 273.348395][ C0] do_syscall_64+0x123/0x790 [ 273.352957][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.358819][ C0] RIP: 0033:0x7f21437c6bd2 [ 273.363203][ C0] RSP: 002b:00007ffee78c7c80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 273.371583][ C0] RAX: ffffffffffffffda RBX: 00007ffee78c7c80 RCX: 00007f21437c6bd2 [ 273.379534][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 273.387473][ C0] RBP: 00007ffee78c7e0c R08: 0000000000000000 R09: 0000000000000001 [ 273.395413][ C0] R10: 0000555593a767d0 R11: 0000000000000246 R12: 0000000000000001 [ 273.403354][ C0] R13: 00000000000927c0 R14: 0000000000028f90 R15: 00007ffee78c7e60 [ 273.411301][ C0] [ 273.414292][ C0] task:syz.1.289 state:R running task stack:28320 pid:6777 tgid:6776 ppid:5599 task_flags:0x400140 flags:0x00080000 [ 273.427730][ C0] Call Trace: [ 273.430991][ C0] [ 273.433898][ C0] __schedule+0x1259/0x6920 [ 273.438390][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 273.443565][ C0] ? smp_call_function_many_cond+0x944/0x18c0 [ 273.449606][ C0] ? __pfx___schedule+0x10/0x10 [ 273.454432][ C0] ? mark_held_locks+0x40/0x70 [ 273.459177][ C0] preempt_schedule_irq+0x4e/0x90 [ 273.464179][ C0] irqentry_exit+0x205/0xa10 [ 273.468741][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.474690][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 273.479859][ C0] Code: 05 cf 9b a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de e5 5d 0f 0f 82 c9 02 00 00 8b 35 7e 17 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 9b a5 12 0f 85 09 03 00 00 48 83 c4 [ 273.499433][ C0] RSP: 0018:ffffc90004b7f990 EFLAGS: 00000206 [ 273.505477][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 273.513425][ C0] RDX: 0000000000000000 RSI: ffffffff8e3684a0 RDI: ffffffff8c623980 [ 273.521365][ C0] RBP: ffffffff8edec5a0 R08: 00000000cfed65d3 R09: 0000000000000007 [ 273.529313][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 273.537262][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.545213][ C0] ? static_key_enable+0x12/0x20 [ 273.550136][ C0] jump_label_update+0x206/0x550 [ 273.555055][ C0] ? jump_label_update+0x1f5/0x550 [ 273.560138][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 273.566004][ C0] static_key_enable+0x1a/0x20 [ 273.570739][ C0] ddebug_exec_query+0xbe6/0x1650 [ 273.575754][ C0] ? __pfx_ddebug_exec_query+0x10/0x10 [ 273.581191][ C0] ? lock_acquire+0x1d1/0x380 [ 273.585840][ C0] ? __might_fault+0xc5/0x140 [ 273.590490][ C0] ddebug_exec_queries+0xc5/0x190 [ 273.595490][ C0] ddebug_proc_write+0x55/0xa0 [ 273.600231][ C0] full_proxy_write+0x135/0x1a0 [ 273.605057][ C0] vfs_write+0x2aa/0x1050 [ 273.609360][ C0] ? __pfx_full_proxy_write+0x10/0x10 [ 273.614705][ C0] ? lock_acquire+0x1d1/0x380 [ 273.619359][ C0] ? __fget_files+0x34/0x3d0 [ 273.623923][ C0] ? __pfx_vfs_write+0x10/0x10 [ 273.628665][ C0] ? find_held_lock+0x2b/0x80 [ 273.633317][ C0] ? __fget_files+0x215/0x3d0 [ 273.637968][ C0] ? __fget_files+0x21f/0x3d0 [ 273.642622][ C0] ksys_write+0x12a/0x250 [ 273.646922][ C0] ? __pfx_ksys_write+0x10/0x10 [ 273.651757][ C0] do_syscall_64+0x123/0x790 [ 273.656318][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.662190][ C0] RIP: 0033:0x7fe70a39e159 [ 273.666573][ C0] RSP: 002b:00007fe70b2a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.674954][ C0] RAX: ffffffffffffffda RBX: 00007fe70a625fa0 RCX: 00007fe70a39e159 [ 273.682905][ C0] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 273.690856][ C0] RBP: 00007fe70a43506b R08: 0000000000000000 R09: 0000000000000000 [ 273.698801][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.706743][ C0] R13: 00007fe70a626038 R14: 00007fe70a625fa0 R15: 00007ffe8104d828 [ 273.714691][ C0] [ 273.717685][ C0] rcu: rcu_preempt kthread starved for 9038 jiffies! g18509 f0x0 RCU_GP_DOING_FQS(6) ->state=R ->cpu=0 [ 273.728679][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 273.738614][ C0] rcu: RCU grace-period kthread stack dump: [ 273.744468][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 273.757915][ C0] Call Trace: [ 273.761167][ C0] [ 273.764071][ C0] __schedule+0x1259/0x6920 [ 273.768553][ C0] ? __schedule+0x126b/0x6920 [ 273.773209][ C0] ? __schedule+0x126b/0x6920 [ 273.777863][ C0] ? __pfx___schedule+0x10/0x10 [ 273.782689][ C0] ? rcu_is_watching+0x13/0xc0 [ 273.787439][ C0] preempt_schedule_irq+0x4e/0x90 [ 273.792442][ C0] irqentry_exit+0x205/0xa10 [ 273.797015][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.802976][ C0] RIP: 0010:force_qs_rnp+0x2/0x920 [ 273.808067][ C0] Code: fd ff ff e8 00 2f 8f 00 e9 9a fd ff ff e8 66 e9 e1 09 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 55 41 54 55 53 48 83 ec 60 0f b6 05 c0 04 ef 0c c6 05 b9 [ 273.827642][ C0] RSP: 0018:ffffc90000167c98 EFLAGS: 00000246 [ 273.833684][ C0] RAX: 00000000000009bd RBX: 0000000000000000 RCX: 0000000000000006 [ 273.841624][ C0] RDX: 1ffffffff1d41e50 RSI: ffffffff8e38e957 RDI: ffffffff81f065d0 [ 273.849564][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 273.857505][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8ea0f280 [ 273.865445][ C0] R13: ffffc90000167d10 R14: 0000000000000000 R15: 1ffff9200002cf96 [ 273.873393][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 273.879535][ C0] rcu_gp_fqs_loop+0x3ad/0x8f0 [ 273.884273][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 273.889531][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 273.894440][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 273.899608][ C0] ? rcu_is_watching+0x13/0xc0 [ 273.904347][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.910140][ C0] rcu_gp_kthread+0x17a/0x220 [ 273.914788][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.919963][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.925746][ C0] ? __kthread_parkme+0x18f/0x230 [ 273.930746][ C0] ? kthread+0x13a/0x450 [ 273.934970][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.940148][ C0] kthread+0x373/0x450 [ 273.944200][ C0] ? __pfx_kthread+0x10/0x10 [ 273.948772][ C0] ret_from_fork+0x730/0xd60 [ 273.953347][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 273.958429][ C0] ? __switch_to+0x800/0x10f0 [ 273.963080][ C0] ? __pfx_kthread+0x10/0x10 [ 273.967643][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.972383][ C0] [ 273.975373][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 273.981666][ C0] CPU: 0 UID: 0 PID: 6796 Comm: syz.4.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.992392][ C0] Tainted: [L]=SOFTLOCKUP [ 273.996685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 274.006710][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 274.012509][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 9a 0e 12 f6 48 89 df e8 22 65 12 f6 e8 0d 31 3f f6 fb bf 01 00 00 00 52 48 01 f6 65 48 83 3d e1 a4 b7 08 00 74 06 5b e9 11 4c 00 00 [ 274.032094][ C0] RSP: 0018:ffffc9000583fc90 EFLAGS: 00000206 [ 274.038129][ C0] RAX: 0000000009ac6be1 RBX: ffff88802c90ca00 RCX: 0000000000000000 [ 274.046070][ C0] RDX: 0000000000000001 RSI: ffffffff8e38e957 RDI: 0000000000000001 [ 274.054025][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 274.061966][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000021 [ 274.069907][ C0] R13: ffff88802c90ce00 R14: dffffc0000000000 R15: ffff88807aa44b00 [ 274.077849][ C0] FS: 00007fedf6ab56c0(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 274.086750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.093342][ C0] CR2: 0000200000000058 CR3: 000000002a401000 CR4: 00000000003526f0 [ 274.101286][ C0] Call Trace: [ 274.104541][ C0] [ 274.107455][ C0] get_signal+0x195a/0x21e0 [ 274.111942][ C0] ? restore_sigcontext+0x4d3/0x6a0 [ 274.117119][ C0] ? __pfx_get_signal+0x10/0x10 [ 274.121955][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 274.127476][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 274.133612][ C0] exit_to_user_mode_loop+0x139/0x700 [ 274.138955][ C0] ? rcu_is_watching+0x13/0xc0 [ 274.143693][ C0] do_syscall_64+0x661/0x790 [ 274.148265][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.154125][ C0] RIP: 0033:0x7fedf5b9e157 [ 274.158520][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 274.178096][ C0] RSP: 002b:00007fedf6ab50e8 EFLAGS: 00000246 [ 274.184141][ C0] RAX: 00000000000000ca RBX: 00007fedf5e25fa8 RCX: 00007fedf5b9e159 [ 274.192083][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fedf5e25fa8 [ 274.200035][ C0] RBP: 00007fedf5e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 274.207985][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.215935][ C0] R13: 00007fedf5e26038 R14: 00007ffe4e507990 R15: 00007ffe4e507a78 [ 274.223892][ C0] [ 274.302620][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.302649][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.910588][ T4968] udevd[4968]: worker [5604] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 274.970664][ T5720] usb 2-1: qt2_attach - failed to power on unit: -110 [ 274.970776][ T5720] quatech2 2-1:0.51: probe with driver quatech2 failed with error -110 [ 275.089527][ T6792] bridge0: port 3(ip6gretap0) entered disabled state [ 275.089838][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.090245][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.290485][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.291865][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.362050][ T6794] bridge0: port 3(ip6gretap0) entered blocking state [ 275.362100][ T6794] bridge0: port 3(ip6gretap0) entered forwarding state [ 275.364005][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.364551][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.366546][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.377087][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.377172][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.378281][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.378327][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.383364][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.384458][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.391670][ T6794] veth1_vlan: left promiscuous mode [ 275.393001][ T6794] veth0_vlan: left promiscuous mode [ 275.393893][ T6794] veth0_vlan: entered promiscuous mode [ 275.395329][ T6794] veth1_vlan: entered promiscuous mode [ 275.397817][ T6794] veth1_macvtap: left promiscuous mode [ 275.398220][ T6794] veth0_macvtap: left promiscuous mode [ 275.398928][ T6794] veth0_macvtap: entered promiscuous mode [ 275.399671][ T6794] veth1_macvtap: entered promiscuous mode [ 275.402507][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.403081][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.403470][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.403879][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 SYZFAIL: failed to send rpc fd=3 want=115848 sent=0 n=-1 (errno 32: Broken pipe) [ 276.425525][ T5598] Bluetooth: hci2: command 0x0406 tx timeout [ 276.425558][ T5598] Bluetooth: hci4: command 0x0406 tx timeout [ 276.469355][ T5980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.619797][ T5980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.722997][ T5980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.786729][ T5980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.001312][ T5980] bridge_slave_1: left allmulticast mode [ 277.001329][ T5980] bridge_slave_1: left promiscuous mode [ 277.002068][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.046813][ T5980] bridge_slave_0: left allmulticast mode [ 277.046823][ T5980] bridge_slave_0: left promiscuous mode [ 277.046920][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.466538][ T31] audit: type=1400 audit(1790850656.218:381): avc: denied { write } for pid=6816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.467768][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.510461][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.521763][ T5980] bond0 (unregistering): Released all slaves [ 277.641585][ T31] audit: type=1400 audit(1790850656.388:382): avc: denied { write } for pid=6827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.754924][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 277.869323][ T5980] hsr_slave_0: left promiscuous mode [ 277.869711][ T5980] hsr_slave_1: left promiscuous mode [ 277.870146][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.870161][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.870666][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.870673][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.939070][ T5980] veth1_macvtap: left promiscuous mode [ 277.939097][ T5980] veth0_macvtap: left promiscuous mode [ 277.939165][ T5980] veth1_vlan: left promiscuous mode [ 277.939203][ T5980] veth0_vlan: left promiscuous mode [ 278.116213][ T5720] usb 2-1: USB disconnect, device number 6 [ 278.277065][ T31] audit: type=1400 audit(1790850657.028:383): avc: denied { write } for pid=6830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.469728][ T31] audit: type=1400 audit(1790850657.218:384): avc: denied { write } for pid=6841 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.578198][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 278.617836][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 278.819675][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.986263][ T5980] IPVS: stop unused estimator thread 0... [ 279.057264][ T5980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.123810][ T5980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.179691][ T5980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.210755][ T31] audit: type=1400 audit(1790850657.958:385): avc: denied { write } for pid=6844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.252976][ T5980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.355669][ T31] audit: type=1400 audit(1790850658.108:386): avc: denied { write } for pid=6855 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.459962][ T5980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.483293][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 279.535615][ T5980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.579056][ T5980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.634327][ T5980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.825936][ T5980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.857911][ T31] audit: type=1400 audit(1790850658.608:387): avc: denied { write } for pid=6858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.925689][ T5980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.976118][ T31] audit: type=1400 audit(1790850658.728:388): avc: denied { write } for pid=6869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.012423][ T5980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.057936][ T5980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.089370][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.254296][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.300087][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.359655][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.418183][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.555292][ T31] audit: type=1400 audit(1790850659.308:389): avc: denied { write } for pid=6873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.603579][ T5980] ip6gretap0: left allmulticast mode [ 280.603589][ T5980] ip6gretap0: left promiscuous mode [ 280.603712][ T5980] bridge0: port 3(ip6gretap0) entered disabled state [ 280.606256][ T5980] bridge_slave_1: left allmulticast mode [ 280.606266][ T5980] bridge_slave_1: left promiscuous mode [ 280.606350][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.609516][ T5980] bridge_slave_0: left allmulticast mode [ 280.609525][ T5980] bridge_slave_0: left promiscuous mode [ 280.609624][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.683037][ T5980] bridge_slave_1: left allmulticast mode [ 280.683537][ T5980] bridge_slave_1: left promiscuous mode [ 280.683635][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.688173][ T5980] bridge_slave_0: left allmulticast mode [ 280.688183][ T5980] bridge_slave_0: left promiscuous mode [ 280.688255][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.739478][ T5980] bridge_slave_1: left allmulticast mode [ 280.739488][ T5980] bridge_slave_1: left promiscuous mode [ 280.739576][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.763506][ T5980] bridge_slave_0: left allmulticast mode [ 280.763515][ T5980] bridge_slave_0: left promiscuous mode [ 280.763599][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.808340][ T5980] bridge_slave_1: left allmulticast mode [ 280.808351][ T5980] bridge_slave_1: left promiscuous mode [ 280.808453][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.811321][ T5980] bridge_slave_0: left allmulticast mode [ 280.811330][ T5980] bridge_slave_0: left promiscuous mode [ 280.811405][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.876778][ T31] audit: type=1400 audit(1790850659.628:390): avc: denied { write } for pid=6884 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.189142][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.191221][ T5980] bond0 (unregistering): Released all slaves [ 281.336790][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.353066][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.355316][ T5980] bond0 (unregistering): Released all slaves [ 281.511053][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.523419][ T5980] bond0 (unregistering): Released all slaves [ 281.668477][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.680951][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.692178][ T5980] bond0 (unregistering): Released all slaves [ 281.715248][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 282.102005][ C0] net_ratelimit: 65 callbacks suppressed [ 282.291124][ T5980] hsr_slave_0: left promiscuous mode [ 282.291495][ T5980] hsr_slave_1: left promiscuous mode [ 282.291934][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.291944][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.321434][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.321443][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.349678][ T5980] hsr_slave_0: left promiscuous mode [ 282.350036][ T5980] hsr_slave_1: left promiscuous mode [ 282.351443][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.351452][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.380279][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.380290][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.405607][ T5980] hsr_slave_0: left promiscuous mode [ 282.406002][ T5980] hsr_slave_1: left promiscuous mode [ 282.406615][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.406625][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.408198][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.408206][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.460866][ T5980] hsr_slave_0: left promiscuous mode [ 282.461239][ T5980] hsr_slave_1: left promiscuous mode [ 282.461677][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.461686][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.490911][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.490921][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.562965][ T5980] veth1_macvtap: left promiscuous mode [ 282.562984][ T5980] veth0_macvtap: left promiscuous mode [ 282.563054][ T5980] veth1_vlan: left promiscuous mode [ 282.563092][ T5980] veth0_vlan: left promiscuous mode [ 282.571340][ T5980] veth1_macvtap: left promiscuous mode [ 282.571355][ T5980] veth0_macvtap: left promiscuous mode [ 282.571396][ T5980] veth1_vlan: left promiscuous mode [ 282.571426][ T5980] veth0_vlan: left promiscuous mode [ 282.607083][ T5980] veth1_macvtap: left promiscuous mode [ 282.607100][ T5980] veth0_macvtap: left promiscuous mode [ 282.607143][ T5980] veth1_vlan: left promiscuous mode [ 282.607174][ T5980] veth0_vlan: left promiscuous mode [ 282.642674][ T5980] veth1_macvtap: left promiscuous mode [ 282.642702][ T5980] veth0_macvtap: left promiscuous mode [ 282.642763][ T5980] veth1_vlan: left promiscuous mode [ 282.642794][ T5980] veth0_vlan: left promiscuous mode