last executing test programs: 46.867392035s ago: executing program 4 (id=366): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) getpriority(0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x8020}]}, 0x24}}, 0x0) (fail_nth: 5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) socket$kcm(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 45.888539827s ago: executing program 4 (id=368): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) (async) r1 = io_uring_setup(0x645f, &(0x7f0000000040)={0x0, 0xaf63, 0x1cc90, 0x1, 0x1f3}) (async) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x1, {0xe2, 0x0, 0x0, '\x00', {0x0, 0x62, 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x2}, {}, {}, 0x0, 0x0, 0x80001}}}}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff000000070581"], 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e00000020800074000000000100005"], 0x74}}, 0x0) (async) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl(r0, 0x3b91, &(0x7f0000000000)='_') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1fb) (async) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='incremental-fs\x00', 0x10000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000200)='./dev\x00', r4, &(0x7f0000000240)='./dev/sda1\x00') (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000380)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="00101e5738ebf7"]}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x54c, 0x3d, 0x107, 0x70bd2b, 0x0, {0xff, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @pid}]}, @nested={0x525, 0x2, 0x0, 0x1, [@generic="fc7dd59ccac87ed2455605add58c828b2cd89ab55bb5238b30176cd86e5a9c1608b54c1737c1cb39fb6d2cd39ae5832356a834677e13023c492532f8dd656c0fd37ad45e8f7f0db3fb311917387a813099df772f2816b5148b775264fc50aada8ea87da979e81252531cae5e2fbd23989c7666667369f2081cef961a9c815529f4e3c53974587fbe5ea12879b5", @nested={0x122, 0x126, 0x0, 0x1, [@generic="99d788c15e9dcc89f3f29b0bac5334910f0962e9d21b773f55a076a6c55b331caa3b8a36421604142e7aa8bc6daa983a0728c91c096be07c6430a36badb1e6b79aa0861728518237dc2da124f8333873b91bcf073740c5c43baec569937aac719128376cd1eaed56b7ae43c67889a55bdfcaed26ddd84dabf79fe3a0417644dd7676b683e3c3bb85da8998dc839a", @generic="a00474bb407e80450ce871dd859911d28efdfe752db56639aaf28c047dfea12588e949fa4a3b661371777e2ea1da34cf874b4320455a7c5ad1d6c4ec9b432ef427fc13dae074abbd306eae7b0b330c84", @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="cd5a99f5b12425c4", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x118, 0x0, 0x0, @uid=r9}, @generic="df98cd3959a3c11dccd671093990460c"]}, @nested={0x36e, 0xdc, 0x0, 0x1, [@generic="b09993b451e911915e3c622c6bc283ec552ff956233245f1d304b9e3e913b1fd9bb59cefb7e8629e7bfcab981e37908e7dc1eafb94b5f21db9b368b7d1f729faf5e3a0f07632c45f241f2a823868a170e29bbf0e6eb0aa671e350323c0f0765537e2ef21d5eb75cf7332f5fe21ffacf612bed32df7fec3e5101093c6c92e2b295dc0505b8c61a86f0f0c914cb21b6bf935c1", @nested={0x11f, 0xce, 0x0, 0x1, [@generic="760958bbcf8a35ae92e3e6825e5309bff4c1738964e1b3da2c7994b7490341f9de9f61167c5aece4271abfd056b0b3f4c1097dab305dfd2c392b13ada55d27562ba3ed2a41a32161eb87477923e30f6bfc7c90b45dc63644922da99ae7", @typed={0xf, 0x1d, 0x0, 0x0, @str='/dev/iommu\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xe9}, @generic="a85f2ceaa1d36f995ead643defc03d520e1632e16e53fe7a30870a678fc2d4c9250187dfe552056d40a815d5ec625ae1b834d57dbb92975532060d1ebddbfe1552f1", @typed={0x55, 0x8a, 0x0, 0x0, @binary="adf5cf3f166f9b41cdbed02e6d60d458d27fd352371c45c27feb363ccccdf197d18b5cf86cc64f278d28d4d8eb0b378083f68796c54de658c1e7004318ac1a99ba00190a77da4bde9823b04989767d42fc"}, @typed={0x8, 0x100, 0x0, 0x0, @pid=r8}]}, @nested={0x1b6, 0x54, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @fd=r3}, @generic="9e50165849e56388602137c9e0df24fe547f077c3a949c8aab4cac9ceb9dbe49e28f0c38a7a98eb205953a0636a595210b5f62360ab8fd1287177f16db6f8cfd0a2919e1132ce30852778d8ec03c611768f558ccca08d91b4edbcb981eda3bc926d574eb3ff59702e87d1684aa61ff6441f021f0e857ab38309253c08bb2c5d90b16b34c71cceaaf8ed3d25c3c911869f48a4bef3886baeeee3ceb79e019dcbc44245c30af7c23effeb8c9fd0a7098fa79e72aea14", @generic="0ed6ce161ee2333a81060f89734c0076fc4a8b8e366e1cb66d7b05e20f3c23b5604fa05fca7e0db29c12e36fd6d145c54e9dc80205802eceed994cf990e342903f9611fd7d96b823e0445c729a69abb3323529c11ed938e28fcbc9ab0f92e8a5823ec098df5d3910e27c99c64c9145507f6d562a471cfabc751cbb20e54c07b609303827317848b683f7e7aaaf2e9c0d7d839310ca3835c3419c57c27bfa1530b529ef5a358f550767694d144d7ddd69364ab8165d6ffb933f45742efb80ee42afb08145a93077b5a58933c94f15414c0ba02bb26df0efb59a4968c263a3ad59028c4d02e446f9a82b", @nested={0x4, 0x51}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r8}]}]}]}]}, 0x54c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) chdir(&(0x7f0000000140)='./file0\x00') 39.414461642s ago: executing program 4 (id=391): r0 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x20000000000009) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet(0x2, 0x2, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) 38.38748727s ago: executing program 4 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000007b00000095"], 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x8, 0x70bd29, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0xfeb5, &(0x7f0000000140)="259a00f20500000008fff74588a8", 0x0, 0x5, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.1120429s ago: executing program 4 (id=396): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0, 0x97}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 37.820860187s ago: executing program 4 (id=397): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) 37.460564054s ago: executing program 32 (id=397): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) 10.43439701s ago: executing program 2 (id=479): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x2, 0x1, 0xf9, 0xdd, 0x11, 0xa7, 0xe, 0x2, 0xb, 0xb5, 0xbb, 0x2, 0x68}, 0xe) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000440)={0x5, 0x2, 0x4, 0x70000, 0x7, {r2, r3/1000+10000}, {0x4, 0x2, 0x8, 0x5, 0x7, 0x1, "3ef76009"}, 0xff, 0x4, {}, 0x10001, 0x0, r4}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create1(0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r6 = io_uring_setup(0x2bef, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000340)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000001b80)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioperm(0x0, 0x62ee, 0x2000000000000006) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c608e500010902120001000000000904"], 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffff82) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000002060101000000000000e0ebf18215f9f096078008001140000000b205a6be123eb4001500000000000500010006000005050005000a0000f411e50005000400000000000900020073797a3000000000106173683a6900", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x3, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000002c0)) 9.817209311s ago: executing program 0 (id=480): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x30, 0x39, 0x30, 0x32]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f00000001c0)={'fscrypt:', @auto=[0x39, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0xc6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x33]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x37, 0x30, 0x30, 0x31, 0x61, 0x66, 0x30, 0x30, 0x61, 0x30, 0x7, 0x33, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x38, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x61]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00113c33445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000a00)={'fscrypt:', @auto=[0x37, 0x30, 0x39, 0x61, 0x39, 0x33, 0x35, 0x35, 0x36, 0x35, 0x30, 0x63, 0x38, 0x61, 0xcf3c89ec2eb98290, 0x62]}, &(0x7f0000000100)={0x0, "00118899aabbcc000000009f64000700", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 9.653548866s ago: executing program 0 (id=482): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) semget(0x3, 0x2, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) semtimedop(0x0, 0x0, 0xf401, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, r4) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) 8.647109959s ago: executing program 5 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x800002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002ab9700000000000020000000000e0ff070001"], 0x82}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/164, 0xa4}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x7}, 0x2000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x493, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x6b, @empty, 0xffff}], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl(0xffffffffffffffff, 0xc138fd06, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x8c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x3ffe, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xbf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x3, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x5, 0x401, 0x1, 0x22}, {0xda, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x8c}}, 0xc0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x2, 0x80, 0x20, 0xd, 0x10, 0x3e8, 0x1, 0xfffffffd, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 8.588371512s ago: executing program 2 (id=484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r3 = socket$inet6(0xa, 0x800, 0x7) connect$inet6(r3, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0, 0xfffffffffffffdab}, 0x28) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x10000, 0x37, 0x8}, 0x18) execveat(r9, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), &(0x7f0000000500)={[&(0x7f00000004c0)='{}-\x00']}, 0x800) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000540)) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000480)='xfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 7.624710891s ago: executing program 5 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) keyctl$revoke(0x3, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x2000}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.550693586s ago: executing program 3 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x200}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xd7b7}]}}]}, 0x150}}, 0x22044080) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r6], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r9}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xb41}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.36958994s ago: executing program 2 (id=489): ioctl(0xffffffffffffffff, 0xc4c85512, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) 7.179822974s ago: executing program 2 (id=490): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x8c, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf48961", 0x4a}) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$loop(0x0, 0x0, 0x187540) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 7.000895798s ago: executing program 2 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 6.654533219s ago: executing program 3 (id=492): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r7], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)={0x37e7}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000540)={r5, &(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x70100, 0x0, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r11 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) tkill(r11, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e1f, @private=0xa010102}}, 0x1ff, 0x86}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0xffffffa9, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r12, @ANYBLOB="02000000000000000002000400000000", @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x400c090) 5.625616575s ago: executing program 5 (id=493): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = dup(r0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0xffffffffffffff1c, 0x1000000, 0x0, 0x10}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r3, 0x7, &(0x7f0000000100)={0xffff, 0x2}, &(0x7f0000000180)) 5.520205756s ago: executing program 1 (id=494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1700000078000104020000000000000007000000640000001400018008"], 0x2c}}, 0x0) 5.350706538s ago: executing program 3 (id=495): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x2, 0x80, 0x20, 0xd, 0x10, 0x3e8, 0x1, 0xfffffffd, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 5.334496056s ago: executing program 1 (id=496): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0], 0x20}}, 0x0) 5.279576544s ago: executing program 5 (id=497): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000004b40)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/253, 0xfd}, {&(0x7f00000038c0)=""/143, 0x8f}, {&(0x7f0000003980)=""/145, 0x91}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000003b00)=""/51, 0x33}, {&(0x7f0000004c00)=""/4110, 0x100e}], 0x9, 0xfffffffb, 0x1, 0x12) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x141081) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$bind(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200), 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) getsockopt$llc_int(r4, 0x10c, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{&(0x7f0000000540)=@rc={0x1f, @fixed}, 0x80, 0x0}}], 0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x24000800) 5.060541519s ago: executing program 3 (id=498): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x1, 0x4070bd27, 0xfffffffc, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x43804}, 0x4004000) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000040)={0x20, 0x16, 0x2, "a38f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x5, 0x2, "5eb7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.984094325s ago: executing program 1 (id=499): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x87) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x5, 0x0, @val=@iter={0x0}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (fail_nth: 5) 3.446523654s ago: executing program 1 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r3 = socket$inet6(0xa, 0x800, 0x7) connect$inet6(r3, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0, 0xfffffffffffffdab}, 0x28) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x10000, 0x37, 0x8}, 0x18) execveat(r9, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), &(0x7f0000000500)={[&(0x7f00000004c0)='{}-\x00']}, 0x800) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000540)) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000480)='xfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a300000000014000780"], 0x5c}}, 0x0) 3.445983173s ago: executing program 0 (id=501): syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@random="c335f98a2c43", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x800, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "e023520b57e4c98679c7795a2aa466ddde70e5f20ba8d82d6b8d17e219edd86fb7fcf75fe803c20000004000", "5df814aa2e34e4f8a751805b993e0edbe300", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) 3.374790819s ago: executing program 5 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x19, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x2, r3}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$join(0x1, 0x0) 3.238663633s ago: executing program 0 (id=503): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0xf0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf48961", 0x4a}) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x17, 0x9, 0x0, 0x6, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x30}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 631.575424ms ago: executing program 2 (id=504): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) recvmsg$unix(r5, 0x0, 0x40000300) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x7ffe) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) syz_genetlink_get_family_id$batadv(0x0, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x48) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x901002}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 596.353808ms ago: executing program 1 (id=505): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="27a1995b794b8e14123b5b17883a026f0d1e73ea209453d52274e0ac6d62f83fe90539448b0669b734f64bbcb21cee0afd8e2e57ee4e7f04ecdb0d3e2cb8b5667e1104e87610e95f5971e149dbe3e3acf74064f151cddcea92ca", 0x5a}], 0x10000000000003b8}, 0x40004804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 586.487252ms ago: executing program 0 (id=506): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="27a1995b794b8e14123b5b17883a026f0d1e73ea209453d52274e0ac6d62f83fe90539448b0669b734f64bbcb21cee0afd8e2e57ee4e7f04ecdb0d3e2cb8b5667e1104e87610e95f5971e149dbe3e3acf74064f151cddcea92ca", 0x5a}], 0x10000000000003b8}, 0x40004804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (fail_nth: 1) 436.645605ms ago: executing program 3 (id=507): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000080)={0x6e, r3, 0xfffffffffffffe8f, 0x0, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) writev(r0, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000000203", 0x7}, {&(0x7f00000102c0)="fc", 0x1}], 0x2) (async) r4 = syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x8000) pwrite64$ublk_bdev(r4, &(0x7f0000000040)="31cca78543d49a1f75724d259b0b13706cd889fabb65ba82b705859ad9942e0f9b9112e2fa50d333914f41578b6b17826272380c85b61a9b65b576700ee8e6132c6dc7ee59fab0921713e0d2a3bf763142d82b6fa260f886f630e3a535ccd86a1a744c1504b61fcf8dce107e2b07016cd0d08c1e5a7359cc668eabd98fba994cf076b104ef16", 0x86, 0x2) 221.380231ms ago: executing program 5 (id=508): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)}, 0x40004804) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 194.332708ms ago: executing program 1 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x8407}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480"], 0xb0}}, 0x0) 146.524204ms ago: executing program 0 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000003c0)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x1000006, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(0x0, 0x0, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) 0s ago: executing program 3 (id=511): syz_open_dev$ptys(0xc, 0x3, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0) kernel console output (not intermixed with test programs): 156] lowmem_reserve[]: 0 0 0 0 0 [ 96.862313][ T6156] Node 1 Normal free:3953896kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.862419][ T6156] lowmem_reserve[]: 0 0 0 0 0 [ 96.862567][ T6156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.863072][ T6156] Node 0 DMA32: 1452*4kB (UME) 574*8kB (UM) 319*16kB (UME) 395*32kB (UME) 236*64kB (UME) 129*128kB (UM) 77*256kB (UM) 27*512kB (ME) 3*1024kB (UM) 5*2048kB (M) 247*4096kB (M) = 1118320kB [ 96.863692][ T6156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.863982][ T6156] Node 1 Normal: 2*4kB (M) 6*8kB (UM) 5*16kB (UM) 5*32kB (UM) 5*64kB (UM) 7*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 963*4096kB (M) = 3953896kB [ 96.864805][ T6156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.864827][ T6156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.864863][ T6156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.864895][ T6156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.864929][ T6156] 76651 total pagecache pages [ 96.864965][ T6156] 0 pages in swap cache [ 96.864997][ T6156] Free swap = 124996kB [ 96.865028][ T6156] Total swap = 124996kB [ 96.865060][ T6156] 2097051 pages RAM [ 96.865091][ T6156] 0 pages HighMem/MovableOnly [ 96.865122][ T6156] 432863 pages reserved [ 96.865155][ T6156] 0 pages cma reserved [ 97.504340][ T31] audit: type=1400 audit(1788715353.318:312): avc: denied { watch } for pid=6155 comm="syz.1.74" path="/14/net_prio.prioidx" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.504386][ T31] audit: type=1400 audit(1788715353.318:313): avc: denied { watch_sb watch_reads } for pid=6155 comm="syz.1.74" path="/14/net_prio.prioidx" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.762877][ T25] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, b2:6e:ed:1a:03:8b [ 99.253653][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.413300][ T6159] smpboot: CPU 1 is now offline [ 99.437391][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.437609][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.475987][ T6168] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 99.505071][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 99.512214][ T10] usb 4-1: device descriptor read/all, error -61 [ 99.538475][ T5742] usb 3-1: USB disconnect, device number 4 [ 99.575020][ T5742] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 99.645817][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.660201][ T6168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.661071][ T6168] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 99.775546][ T31] audit: type=1400 audit(1788715355.598:314): avc: denied { write } for pid=6177 comm="syz.0.77" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.798441][ T10] usb 4-1: device descriptor read/64, error -71 [ 99.805587][ T6173] netlink: 14 bytes leftover after parsing attributes in process `syz.3.71'. [ 99.827385][ T6180] netlink: 14 bytes leftover after parsing attributes in process `syz.3.71'. [ 99.908961][ T10] usb usb4-port1: attempt power cycle [ 99.927744][ T31] audit: type=1400 audit(1788715355.748:315): avc: denied { write } for pid=6137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.007843][ T5742] wwan wwan0: port wwan0qmi0 disconnected [ 100.056200][ T6173] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 100.115448][ T6173] bond0 (unregistering): Released all slaves [ 100.224978][ T6194] netlink: 44 bytes leftover after parsing attributes in process `syz.1.79'. [ 100.858178][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.887039][ T10] usb 4-1: device descriptor read/8, error -71 [ 100.898265][ T31] audit: type=1400 audit(1788715356.718:316): avc: denied { write } for pid=6192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.266259][ T31] audit: type=1400 audit(1788715357.078:317): avc: denied { write } for pid=6197 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.266302][ T31] audit: type=1400 audit(1788715357.078:318): avc: denied { nlmsg_write } for pid=6197 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.266329][ T31] audit: type=1400 audit(1788715357.088:319): avc: denied { read write } for pid=6197 comm="syz.1.82" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.266351][ T31] audit: type=1400 audit(1788715357.088:320): avc: denied { open } for pid=6197 comm="syz.1.82" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.306880][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.309876][ T5742] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 101.455017][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.530790][ T5742] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.541846][ T5742] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x6 has invalid maxpacket 12336, setting to 64 [ 101.541873][ T5742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.564473][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.564520][ T5742] usb 3-1: Product: syz [ 101.564536][ T5742] usb 3-1: Manufacturer: syz [ 101.564547][ T5742] usb 3-1: SerialNumber: syz [ 101.573584][ T10] usb usb4-port1: unable to enumerate USB device [ 101.588236][ T5742] usb 3-1: config 0 descriptor?? [ 102.005766][ T5742] usb 3-1: selecting invalid altsetting 0 [ 102.792830][ T31] audit: type=1400 audit(1788715358.608:321): avc: denied { name_connect } for pid=6204 comm="syz.3.83" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.087355][ T6225] XFS (loop4): SB validate failed with error -5. [ 105.083494][ T31] audit: type=1400 audit(1788715360.898:322): avc: denied { map_read map_write } for pid=6244 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.165043][ T713] IPVS: starting estimator thread 0... [ 105.176670][ T31] audit: type=1400 audit(1788715360.998:323): avc: denied { write } for pid=6244 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.295227][ T6249] IPVS: using max 76 ests per chain, 182400 per kthread [ 105.313881][ T31] audit: type=1400 audit(1788715361.128:324): avc: denied { write } for pid=6219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.526770][ T5742] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.576020][ T31] audit: type=1400 audit(1788715361.388:325): avc: denied { write } for pid=6256 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.684767][ T5742] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.709695][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.709720][ T5742] usb 4-1: Product: syz [ 105.709737][ T5742] usb 4-1: Manufacturer: syz [ 105.709747][ T5742] usb 4-1: SerialNumber: syz [ 105.912386][ T10] usb 3-1: USB disconnect, device number 5 [ 106.043515][ T31] audit: type=1400 audit(1788715361.858:326): avc: denied { read write } for pid=6263 comm="syz.0.91" name="sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.073491][ T31] audit: type=1400 audit(1788715361.888:327): avc: denied { open } for pid=6263 comm="syz.0.91" path="/dev/sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.265027][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 106.265067][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 107.425730][ T10] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 107.509058][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 107.509096][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 107.510371][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 107.565321][ T5742] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 107.584627][ T5742] usb 4-1: USB disconnect, device number 8 [ 107.595745][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.605733][ T10] usb 5-1: config 0 has no interfaces? [ 107.605773][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.623687][ T10] usb 5-1: config 0 descriptor?? [ 107.686200][ T31] audit: type=1400 audit(1788715363.508:328): avc: denied { write } for pid=6262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.787347][ T31] audit: type=1400 audit(1788715363.608:329): avc: denied { write } for pid=6286 comm="syz.1.95" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.906719][ T59] IPVS: starting estimator thread 0... [ 107.924064][ T31] audit: type=1400 audit(1788715363.738:330): avc: denied { create } for pid=6286 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.924100][ T31] audit: type=1400 audit(1788715363.738:331): avc: denied { ioctl } for pid=6286 comm="syz.1.95" path="socket:[10736]" dev="sockfs" ino=10736 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.983845][ T9] usb 5-1: USB disconnect, device number 2 [ 108.025240][ T6289] IPVS: using max 77 ests per chain, 184800 per kthread [ 108.657988][ T6309] program syz.4.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.449524][ T6328] FAULT_INJECTION: forcing a failure. [ 109.449524][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 109.449556][ T6328] CPU: 0 UID: 0 PID: 6328 Comm: syz.0.103 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.449572][ T6328] Tainted: [L]=SOFTLOCKUP [ 109.449577][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 109.449584][ T6328] Call Trace: [ 109.449588][ T6328] [ 109.449594][ T6328] dump_stack_lvl+0x100/0x190 [ 109.449613][ T6328] should_fail_ex.cold+0x5/0xa [ 109.449630][ T6328] should_failslab+0xc2/0x120 [ 109.449647][ T6328] __kmalloc_noprof+0xfc/0x840 [ 109.449660][ T6328] ? tomoyo_encode2+0xfb/0x3c0 [ 109.449674][ T6328] tomoyo_encode2+0xfb/0x3c0 [ 109.449687][ T6328] tomoyo_encode+0x29/0x50 [ 109.449698][ T6328] tomoyo_realpath_from_path+0x18c/0x690 [ 109.449712][ T6328] tomoyo_check_open_permission+0x2af/0x3c0 [ 109.449731][ T6328] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 109.449753][ T6328] ? hook_file_open+0x248/0x8e0 [ 109.449776][ T6328] ? path_get+0x61/0x80 [ 109.449791][ T6328] tomoyo_file_open+0x6b/0x90 [ 109.449805][ T6328] security_file_open+0xb5/0x1e0 [ 109.449818][ T6328] do_dentry_open+0x588/0x14d0 [ 109.449832][ T6328] vfs_open+0x82/0x3f0 [ 109.449847][ T6328] path_openat+0x19fa/0x2440 [ 109.449862][ T6328] ? __pfx_path_openat+0x10/0x10 [ 109.449878][ T6328] do_file_open+0x20e/0x430 [ 109.449892][ T6328] ? __pfx_do_file_open+0x10/0x10 [ 109.449914][ T6328] ? _raw_spin_unlock+0x28/0x50 [ 109.449925][ T6328] ? alloc_fd+0x471/0x7a0 [ 109.449942][ T6328] do_sys_openat2+0x10f/0x1e0 [ 109.449956][ T6328] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.449969][ T6328] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 109.449986][ T6328] __x64_sys_openat+0x12d/0x210 [ 109.450000][ T6328] ? __pfx___x64_sys_openat+0x10/0x10 [ 109.450020][ T6328] do_syscall_64+0x123/0x790 [ 109.450034][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.450047][ T6328] RIP: 0033:0x7f9b6935e98e [ 109.450057][ T6328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.450067][ T6328] RSP: 002b:00007f9b6a1dab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.450079][ T6328] RAX: ffffffffffffffda RBX: 00007f9b6a1db6c0 RCX: 00007f9b6935e98e [ 109.450086][ T6328] RDX: 0000000000000002 RSI: 00007f9b6a1dac00 RDI: ffffffffffffff9c [ 109.450092][ T6328] RBP: 00007f9b6a1dac00 R08: 0000000000000000 R09: 0000000000000000 [ 109.450098][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 109.450105][ T6328] R13: 00007f9b69626038 R14: 00007f9b69625fa0 R15: 00007ffcbff36958 [ 109.450119][ T6328] [ 109.450152][ T6328] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.639115][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 110.639137][ T31] audit: type=1400 audit(1788715366.458:338): avc: denied { read write } for pid=6322 comm="syz.1.102" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.639163][ T31] audit: type=1400 audit(1788715366.458:339): avc: denied { open } for pid=6322 comm="syz.1.102" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.715905][ T31] audit: type=1400 audit(1788715366.538:340): avc: denied { map } for pid=6322 comm="syz.1.102" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.715943][ T31] audit: type=1400 audit(1788715366.538:341): avc: denied { execute } for pid=6322 comm="syz.1.102" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.824746][ T31] audit: type=1400 audit(1788715366.648:342): avc: denied { prog_run } for pid=6343 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.862898][ T31] audit: type=1400 audit(1788715366.678:343): avc: denied { read write } for pid=6343 comm="syz.0.105" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.887894][ T31] audit: type=1400 audit(1788715366.708:344): avc: denied { open } for pid=6343 comm="syz.0.105" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.053999][ T31] audit: type=1400 audit(1788715366.868:345): avc: denied { ioctl } for pid=6343 comm="syz.0.105" path="socket:[10935]" dev="sockfs" ino=10935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.084224][ T31] audit: type=1400 audit(1788715366.908:346): avc: denied { ioctl } for pid=6347 comm="syz.3.107" path="socket:[10933]" dev="sockfs" ino=10933 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.162983][ T6355] warning: `syz.0.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.258065][ T6357] netlink: 'syz.1.108': attribute type 9 has an invalid length. [ 111.422655][ T31] audit: type=1400 audit(1788715367.238:347): avc: denied { write } for pid=6331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.506569][ T6364] FAULT_INJECTION: forcing a failure. [ 111.506569][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 111.506600][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.1.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.506615][ T6364] Tainted: [L]=SOFTLOCKUP [ 111.506619][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 111.506625][ T6364] Call Trace: [ 111.506629][ T6364] [ 111.506634][ T6364] dump_stack_lvl+0x100/0x190 [ 111.506653][ T6364] should_fail_ex.cold+0x5/0xa [ 111.506671][ T6364] should_failslab+0xc2/0x120 [ 111.506685][ T6364] __kmalloc_cache_noprof+0x91/0x6d0 [ 111.506702][ T6364] ? __io_uring_add_tctx_node+0x179/0x4f0 [ 111.506720][ T6364] __io_uring_add_tctx_node+0x179/0x4f0 [ 111.506735][ T6364] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 111.506751][ T6364] ? __fget_files+0x21f/0x3d0 [ 111.506766][ T6364] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 111.506783][ T6364] __do_sys_io_uring_enter+0x1626/0x1b10 [ 111.506795][ T6364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.506810][ T6364] ? __fget_files+0x21f/0x3d0 [ 111.506822][ T6364] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 111.506835][ T6364] ? fput+0x7c/0x100 [ 111.506849][ T6364] ? ksys_write+0x1ac/0x250 [ 111.506858][ T6364] ? __pfx_ksys_write+0x10/0x10 [ 111.506872][ T6364] do_syscall_64+0x123/0x790 [ 111.506887][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.506898][ T6364] RIP: 0033:0x7fd502b9e159 [ 111.506908][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.506917][ T6364] RSP: 002b:00007fd503b18028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 111.506928][ T6364] RAX: ffffffffffffffda RBX: 00007fd502e25fa0 RCX: 00007fd502b9e159 [ 111.506935][ T6364] RDX: 00000000fffffffd RSI: 0000000000002000 RDI: 0000000000000004 [ 111.506941][ T6364] RBP: 00007fd503b18090 R08: 0000000000000000 R09: 0000000000000000 [ 111.506947][ T6364] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 111.506953][ T6364] R13: 00007fd502e26038 R14: 00007fd502e25fa0 R15: 00007ffd847dab78 [ 111.506967][ T6364] [ 112.201145][ T6381] wg1 speed is unknown, defaulting to 1000 [ 112.243905][ T6381] wg1 speed is unknown, defaulting to 1000 [ 112.270585][ T6381] wg1 speed is unknown, defaulting to 1000 [ 112.351177][ T6389] program syz.4.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.454222][ T6391] FAULT_INJECTION: forcing a failure. [ 112.454222][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 112.454253][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.2.117 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.454268][ T6391] Tainted: [L]=SOFTLOCKUP [ 112.454274][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 112.454281][ T6391] Call Trace: [ 112.454285][ T6391] [ 112.454289][ T6391] dump_stack_lvl+0x100/0x190 [ 112.454309][ T6391] should_fail_ex.cold+0x5/0xa [ 112.454328][ T6391] ? __netlink_lookup+0x652/0x900 [ 112.454346][ T6391] should_failslab+0xc2/0x120 [ 112.454359][ T6391] kmem_cache_alloc_noprof+0x92/0x6a0 [ 112.454371][ T6391] ? skb_clone+0x190/0x400 [ 112.454385][ T6391] skb_clone+0x190/0x400 [ 112.454396][ T6391] netlink_deliver_tap+0xaed/0xcc0 [ 112.454415][ T6391] netlink_unicast+0x62b/0x850 [ 112.454434][ T6391] ? __pfx_netlink_unicast+0x10/0x10 [ 112.454454][ T6391] netlink_sendmsg+0x8b0/0xda0 [ 112.454473][ T6391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.454492][ T6391] ? selinux_socket_sendmsg+0x198/0x2f0 [ 112.454512][ T6391] ____sys_sendmsg+0xa4d/0xbe0 [ 112.454525][ T6391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.454543][ T6391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.454560][ T6391] ? lock_acquire+0x1d1/0x380 [ 112.454571][ T6391] ? get_pid_task+0x2a/0x250 [ 112.454587][ T6391] ___sys_sendmsg+0x190/0x1e0 [ 112.454603][ T6391] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.454617][ T6391] ? get_pid_task+0x106/0x250 [ 112.454637][ T6391] ? find_held_lock+0x2b/0x80 [ 112.454660][ T6391] __sys_sendmsg+0x160/0x210 [ 112.454672][ T6391] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.454690][ T6391] do_syscall_64+0x123/0x790 [ 112.454705][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.454717][ T6391] RIP: 0033:0x7f6f84d9e159 [ 112.454726][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.454736][ T6391] RSP: 002b:00007f6f85cd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.454748][ T6391] RAX: ffffffffffffffda RBX: 00007f6f85025fa0 RCX: 00007f6f84d9e159 [ 112.454754][ T6391] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 112.454761][ T6391] RBP: 00007f6f85cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 112.454767][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.454773][ T6391] R13: 00007f6f85026038 R14: 00007f6f85025fa0 R15: 00007ffee4d3e5b8 [ 112.454787][ T6391] [ 113.008354][ T6402] ======================================================= [ 113.008354][ T6402] WARNING: The mand mount option has been deprecated and [ 113.008354][ T6402] and is ignored by this kernel. Remove the mand [ 113.008354][ T6402] option from the mount to silence this warning. [ 113.008354][ T6402] ======================================================= [ 113.433701][ T10] wg1 speed is unknown, defaulting to 1000 [ 113.450982][ T6381] infiniband syz2: set active [ 113.469945][ T6381] infiniband syz2: added wg1 [ 113.496902][ T6418] FAULT_INJECTION: forcing a failure. [ 113.496902][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 113.496933][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.4.120 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.496948][ T6418] Tainted: [L]=SOFTLOCKUP [ 113.496952][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 113.496959][ T6418] Call Trace: [ 113.496963][ T6418] [ 113.496967][ T6418] dump_stack_lvl+0x100/0x190 [ 113.496987][ T6418] should_fail_ex.cold+0x5/0xa [ 113.497001][ T6418] ? __netlink_lookup+0x652/0x900 [ 113.497018][ T6418] should_failslab+0xc2/0x120 [ 113.497032][ T6418] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.497044][ T6418] ? skb_clone+0x190/0x400 [ 113.497057][ T6418] skb_clone+0x190/0x400 [ 113.497068][ T6418] netlink_deliver_tap+0xaed/0xcc0 [ 113.497089][ T6418] netlink_unicast+0x62b/0x850 [ 113.497108][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 113.497129][ T6418] netlink_sendmsg+0x8b0/0xda0 [ 113.497147][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.497165][ T6418] ? selinux_socket_sendmsg+0x198/0x2f0 [ 113.497185][ T6418] ____sys_sendmsg+0xa4d/0xbe0 [ 113.497198][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.497216][ T6418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.497233][ T6418] ? lock_acquire+0x1d1/0x380 [ 113.497248][ T6418] ? get_pid_task+0x2a/0x250 [ 113.497263][ T6418] ___sys_sendmsg+0x190/0x1e0 [ 113.497278][ T6418] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.497293][ T6418] ? get_pid_task+0x106/0x250 [ 113.497318][ T6418] ? find_held_lock+0x2b/0x80 [ 113.497341][ T6418] __sys_sendmsg+0x160/0x210 [ 113.497353][ T6418] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.497371][ T6418] do_syscall_64+0x123/0x790 [ 113.497386][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.497397][ T6418] RIP: 0033:0x7efcf879e159 [ 113.497407][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.497417][ T6418] RSP: 002b:00007efcf96f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.497428][ T6418] RAX: ffffffffffffffda RBX: 00007efcf8a25fa0 RCX: 00007efcf879e159 [ 113.497435][ T6418] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 113.497441][ T6418] RBP: 00007efcf96f1090 R08: 0000000000000000 R09: 0000000000000000 [ 113.497447][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.497453][ T6418] R13: 00007efcf8a26038 R14: 00007efcf8a25fa0 R15: 00007ffcea7ccac8 [ 113.497467][ T6418] [ 113.783013][ T6344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.870468][ T6381] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 113.873343][ T6381] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 113.873376][ T6381] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 114.113065][ T6381] RDS/IB: syz2: added [ 114.146893][ T6381] smc: adding ib device syz2 with port count 1 [ 114.154006][ T6381] smc: ib device syz2 port 1 has no pnetid [ 114.163136][ T5711] wg1 speed is unknown, defaulting to 1000 [ 114.183329][ T6381] wg1 speed is unknown, defaulting to 1000 [ 114.281688][ T6427] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 115.082687][ T6381] wg1 speed is unknown, defaulting to 1000 [ 116.278486][ T6381] wg1 speed is unknown, defaulting to 1000 [ 116.440583][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 116.499441][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 116.500280][ T6470] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 116.530484][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.530779][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.531486][ T6470] bridge0: entered allmulticast mode [ 116.593170][ T6470] bridge_slave_1: left allmulticast mode [ 116.608613][ T6470] bridge_slave_1: left promiscuous mode [ 116.610104][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.665761][ T6470] bridge_slave_0: left allmulticast mode [ 116.671596][ T6470] bridge_slave_0: left promiscuous mode [ 116.678646][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.728764][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 116.728790][ T31] audit: type=1400 audit(1788715372.548:361): avc: denied { accept } for pid=6469 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.863450][ T6381] wg1 speed is unknown, defaulting to 1000 [ 117.043876][ T6473] FAULT_INJECTION: forcing a failure. [ 117.043876][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 117.043908][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.4.132 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.043923][ T6473] Tainted: [L]=SOFTLOCKUP [ 117.043927][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 117.043934][ T6473] Call Trace: [ 117.043938][ T6473] [ 117.043942][ T6473] dump_stack_lvl+0x100/0x190 [ 117.043963][ T6473] should_fail_ex.cold+0x5/0xa [ 117.043978][ T6473] should_failslab+0xc2/0x120 [ 117.043992][ T6473] __kvmalloc_node_noprof+0x113/0x9b0 [ 117.044004][ T6473] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 117.044020][ T6473] ? percpu_ref_init+0xec/0x3f0 [ 117.044034][ T6473] ? io_alloc_cache_init+0x38/0x170 [ 117.044050][ T6473] io_alloc_cache_init+0x38/0x170 [ 117.044065][ T6473] io_uring_setup.cold+0x450/0x1cde [ 117.044076][ T6473] ? lock_acquire+0x1d1/0x380 [ 117.044088][ T6473] ? avc_has_perm_noaudit+0x56/0x3b0 [ 117.044102][ T6473] ? __pfx_io_uring_setup+0x10/0x10 [ 117.044112][ T6473] ? find_held_lock+0x2b/0x80 [ 117.044126][ T6473] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 117.044139][ T6473] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 117.044161][ T6473] ? ksys_write+0x1ac/0x250 [ 117.044171][ T6473] ? __pfx_ksys_write+0x10/0x10 [ 117.044184][ T6473] __x64_sys_io_uring_setup+0xc2/0x170 [ 117.044196][ T6473] do_syscall_64+0x123/0x790 [ 117.044211][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.044222][ T6473] RIP: 0033:0x7efcf879e159 [ 117.044235][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.044246][ T6473] RSP: 002b:00007efcf96f0ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 117.044257][ T6473] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007efcf879e159 [ 117.044264][ T6473] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 117.044276][ T6473] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 117.044283][ T6473] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 117.044289][ T6473] R13: 0000200000000b10 R14: 00007efcf96f0fd8 R15: 0000000000000000 [ 117.044303][ T6473] [ 117.369126][ T31] audit: type=1400 audit(1788715373.188:362): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 117.547592][ T31] audit: type=1400 audit(1788715373.368:363): avc: denied { bind } for pid=6474 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.613638][ T6381] wg1 speed is unknown, defaulting to 1000 [ 118.626256][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.136'. [ 119.211509][ T6500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.271065][ T6500] team0: Port device xfrm0 added [ 119.288907][ T6500] tipc: Started in network mode [ 119.299647][ T6500] tipc: Node identity 3ef1ce2f8b07, cluster identity 4711 [ 119.308258][ T6500] tipc: Enabled bearer , priority 0 [ 119.676568][ T31] audit: type=1400 audit(1788715375.498:364): avc: denied { write } for pid=6499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.788817][ T31] audit: type=1400 audit(1788715375.608:365): avc: denied { write } for pid=6529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.876220][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.022516][ T31] audit: type=1400 audit(1788715375.838:366): avc: denied { mount } for pid=6532 comm="syz.3.147" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 120.045280][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 120.047326][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 120.063539][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.073497][ T10] usb 5-1: config 0 descriptor?? [ 120.097945][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 120.113636][ T6535] 9p: Bad value for 'rfdno' [ 120.151749][ T31] audit: type=1400 audit(1788715375.968:367): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 120.383811][ T31] audit: type=1400 audit(1788715376.188:368): avc: denied { write } for pid=6552 comm="syz.3.150" name="anycast6" dev="proc" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 120.427397][ T9] tipc: Node number set to 3052850735 [ 120.527605][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.527838][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.628179][ T6560] xt_hashlimit: size too large, truncated to 1048576 [ 120.678351][ T31] audit: type=1400 audit(1788715376.498:369): avc: denied { write } for pid=6533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.767107][ T10] gspca_vc032x: reg_w err -71 [ 120.767126][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767139][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767146][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767152][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767158][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767165][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767171][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767183][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767190][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767196][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767202][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767207][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767214][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767220][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767226][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767232][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767237][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767243][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.767249][ T10] gspca_vc032x: Unknown sensor... [ 120.767283][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 120.877008][ T10] usb 5-1: USB disconnect, device number 3 [ 120.942254][ T31] audit: type=1400 audit(1788715376.758:370): avc: denied { write } for pid=6559 comm="syz.1.152" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.908900][ T6575] FAULT_INJECTION: forcing a failure. [ 121.908900][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 121.908933][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.1.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.908949][ T6575] Tainted: [L]=SOFTLOCKUP [ 121.908953][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 121.908959][ T6575] Call Trace: [ 121.908963][ T6575] [ 121.908968][ T6575] dump_stack_lvl+0x100/0x190 [ 121.908988][ T6575] should_fail_ex.cold+0x5/0xa [ 121.909004][ T6575] should_failslab+0xc2/0x120 [ 121.909018][ T6575] kmem_cache_alloc_noprof+0x92/0x6a0 [ 121.909030][ T6575] ? skb_clone+0x190/0x400 [ 121.909044][ T6575] skb_clone+0x190/0x400 [ 121.909055][ T6575] nfnetlink_rcv_batch+0x1c8/0x2880 [ 121.909070][ T6575] ? kmem_cache_free+0x127/0x6c0 [ 121.909088][ T6575] ? __lock_acquire+0x4c5/0x1ec0 [ 121.909102][ T6575] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 121.909117][ T6575] ? lock_acquire+0x1d1/0x380 [ 121.909128][ T6575] ? avc_has_perm_noaudit+0x56/0x3b0 [ 121.909146][ T6575] ? avc_has_perm_noaudit+0x145/0x3b0 [ 121.909161][ T6575] ? __asan_memset+0x23/0x50 [ 121.909177][ T6575] ? __nla_validate_parse+0x1e7/0x28b0 [ 121.909196][ T6575] ? __pfx___nla_validate_parse+0x10/0x10 [ 121.909211][ T6575] ? rcu_is_watching+0x13/0xc0 [ 121.909224][ T6575] ? cap_capable+0x107/0x430 [ 121.909242][ T6575] ? __nla_parse+0x40/0x60 [ 121.909258][ T6575] nfnetlink_rcv+0x3bd/0x440 [ 121.909271][ T6575] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 121.909287][ T6575] netlink_unicast+0x585/0x850 [ 121.909306][ T6575] ? __pfx_netlink_unicast+0x10/0x10 [ 121.909326][ T6575] netlink_sendmsg+0x8b0/0xda0 [ 121.909345][ T6575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.909370][ T6575] ? selinux_socket_sendmsg+0x198/0x2f0 [ 121.909388][ T6575] ____sys_sendmsg+0xa4d/0xbe0 [ 121.909402][ T6575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.909419][ T6575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.909436][ T6575] ? lock_acquire+0x1d1/0x380 [ 121.909447][ T6575] ? get_pid_task+0x2a/0x250 [ 121.909462][ T6575] ___sys_sendmsg+0x190/0x1e0 [ 121.909477][ T6575] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.909492][ T6575] ? get_pid_task+0x106/0x250 [ 121.909511][ T6575] ? find_held_lock+0x2b/0x80 [ 121.909533][ T6575] __sys_sendmsg+0x160/0x210 [ 121.909544][ T6575] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.909562][ T6575] do_syscall_64+0x123/0x790 [ 121.909577][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.909589][ T6575] RIP: 0033:0x7fd502b9e159 [ 121.909599][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.909608][ T6575] RSP: 002b:00007fd503b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.909619][ T6575] RAX: ffffffffffffffda RBX: 00007fd502e25fa0 RCX: 00007fd502b9e159 [ 121.909626][ T6575] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.909633][ T6575] RBP: 00007fd503b18090 R08: 0000000000000000 R09: 0000000000000000 [ 121.909639][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.909645][ T6575] R13: 00007fd502e26038 R14: 00007fd502e25fa0 R15: 00007ffd847dab78 [ 121.909658][ T6575] [ 122.918774][ T6579] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 122.961124][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 123.393600][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 123.446552][ T31] audit: type=1400 audit(1788715379.208:372): avc: denied { create } for pid=6586 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.503655][ T31] audit: type=1400 audit(1788715379.318:373): avc: denied { setopt } for pid=6586 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.759182][ T6615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.169'. [ 124.780071][ T31] audit: type=1400 audit(1788715380.598:374): avc: denied { relabelfrom } for pid=6612 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 124.780113][ T31] audit: type=1400 audit(1788715380.598:375): avc: denied { relabelto } for pid=6612 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 124.835486][ T6613] fuse: fd is not a fuse device [ 124.922275][ T6612] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 124.964568][ T5605] Bluetooth: hci5: command 0x1003 tx timeout [ 124.972399][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 125.049456][ T31] audit: type=1400 audit(1788715380.868:376): avc: denied { append } for pid=6619 comm="syz.4.171" name="frontend0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 125.192550][ T31] audit: type=1400 audit(1788715381.008:377): avc: denied { read } for pid=6623 comm="syz.3.166" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.217299][ T31] audit: type=1400 audit(1788715381.038:378): avc: denied { open } for pid=6623 comm="syz.3.166" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.245777][ T31] audit: type=1400 audit(1788715381.068:379): avc: denied { write } for pid=6623 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.267603][ T31] audit: type=1400 audit(1788715381.088:380): avc: denied { ioctl } for pid=6623 comm="syz.3.166" path="socket:[11858]" dev="sockfs" ino=11858 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.349446][ T6630] mmap: syz.3.166 (6630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.221901][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.228278][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.278547][ T31] audit: type=1400 audit(1788715382.098:381): avc: denied { ioctl } for pid=6637 comm="syz.3.176" path="socket:[11890]" dev="sockfs" ino=11890 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.515508][ T6646] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 126.515533][ T6646] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 126.550400][ T6646] overlayfs: conflicting lowerdir path [ 126.961628][ T1867] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.115234][ T1867] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 127.125834][ T1867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.125865][ T1867] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.125892][ T1867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.895945][ T9] usb 4-1: USB disconnect, device number 9 [ 129.018089][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 129.018119][ T31] audit: type=1400 audit(1788715384.838:392): avc: denied { read } for pid=6674 comm="syz.4.190" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 129.018152][ T31] audit: type=1400 audit(1788715384.838:393): avc: denied { open } for pid=6674 comm="syz.4.190" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 129.208178][ T31] audit: type=1800 audit(1788715384.978:394): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.191" name="file0" dev="overlay" ino=286 res=0 errno=0 [ 129.360667][ T31] audit: type=1400 audit(1788715385.178:395): avc: denied { listen } for pid=6674 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.382220][ T31] audit: type=1400 audit(1788715385.208:396): avc: denied { setopt } for pid=6674 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.595060][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.693508][ T6682] binder: 6681:6682 ioctl c018620c 200000000240 returned -22 [ 129.751969][ T6684] FAULT_INJECTION: forcing a failure. [ 129.751969][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 129.752001][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.1.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.752017][ T6684] Tainted: [L]=SOFTLOCKUP [ 129.752021][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 129.752027][ T6684] Call Trace: [ 129.752031][ T6684] [ 129.752036][ T6684] dump_stack_lvl+0x100/0x190 [ 129.752057][ T6684] should_fail_ex.cold+0x5/0xa [ 129.752072][ T6684] should_failslab+0xc2/0x120 [ 129.752086][ T6684] __kmalloc_noprof+0xfc/0x840 [ 129.752098][ T6684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 129.752116][ T6684] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 129.752133][ T6684] genl_family_rcv_msg_doit+0xc7/0x300 [ 129.752153][ T6684] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.752170][ T6684] ? bpf_lsm_capable+0x9/0x10 [ 129.752184][ T6684] ? security_capable+0x80/0x260 [ 129.752200][ T6684] ? ns_capable+0xd2/0xf0 [ 129.752213][ T6684] genl_rcv_msg+0x560/0x800 [ 129.752226][ T6684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.752237][ T6684] ? __lock_acquire+0x4c5/0x1ec0 [ 129.752249][ T6684] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 129.752263][ T6684] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 129.752279][ T6684] ? __pfx_nl80211_post_doit+0x10/0x10 [ 129.752298][ T6684] netlink_rcv_skb+0x159/0x420 [ 129.752314][ T6684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.752327][ T6684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.752349][ T6684] ? netlink_deliver_tap+0x1ae/0xcc0 [ 129.752367][ T6684] genl_rcv+0x28/0x40 [ 129.752377][ T6684] netlink_unicast+0x585/0x850 [ 129.752396][ T6684] ? __pfx_netlink_unicast+0x10/0x10 [ 129.752417][ T6684] netlink_sendmsg+0x8b0/0xda0 [ 129.752436][ T6684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.752454][ T6684] ? selinux_socket_sendmsg+0x198/0x2f0 [ 129.752474][ T6684] ____sys_sendmsg+0xa4d/0xbe0 [ 129.752488][ T6684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.752506][ T6684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.752523][ T6684] ? lock_acquire+0x1d1/0x380 [ 129.752534][ T6684] ? get_pid_task+0x2a/0x250 [ 129.752549][ T6684] ___sys_sendmsg+0x190/0x1e0 [ 129.752565][ T6684] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.752580][ T6684] ? get_pid_task+0x106/0x250 [ 129.752600][ T6684] ? find_held_lock+0x2b/0x80 [ 129.752623][ T6684] __sys_sendmsg+0x160/0x210 [ 129.752635][ T6684] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.752653][ T6684] do_syscall_64+0x123/0x790 [ 129.752669][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.752680][ T6684] RIP: 0033:0x7fd502b9e159 [ 129.752690][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.752700][ T6684] RSP: 002b:00007fd503b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.752711][ T6684] RAX: ffffffffffffffda RBX: 00007fd502e25fa0 RCX: 00007fd502b9e159 [ 129.752718][ T6684] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 129.752725][ T6684] RBP: 00007fd503b18090 R08: 0000000000000000 R09: 0000000000000000 [ 129.752731][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.752737][ T6684] R13: 00007fd502e26038 R14: 00007fd502e25fa0 R15: 00007ffd847dab78 [ 129.752751][ T6684] [ 130.418442][ T6691] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 131.096768][ T6699] FAULT_INJECTION: forcing a failure. [ 131.096768][ T6699] name failslab, interval 1, probability 0, space 0, times 0 [ 131.096798][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz.4.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.096814][ T6699] Tainted: [L]=SOFTLOCKUP [ 131.096818][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 131.096825][ T6699] Call Trace: [ 131.096829][ T6699] [ 131.096833][ T6699] dump_stack_lvl+0x100/0x190 [ 131.096853][ T6699] should_fail_ex.cold+0x5/0xa [ 131.096867][ T6699] ? __netlink_lookup+0x652/0x900 [ 131.096885][ T6699] should_failslab+0xc2/0x120 [ 131.096899][ T6699] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.096911][ T6699] ? skb_clone+0x190/0x400 [ 131.096924][ T6699] skb_clone+0x190/0x400 [ 131.096936][ T6699] netlink_deliver_tap+0xaed/0xcc0 [ 131.096955][ T6699] netlink_unicast+0x62b/0x850 [ 131.096974][ T6699] ? __pfx_netlink_unicast+0x10/0x10 [ 131.096994][ T6699] netlink_sendmsg+0x8b0/0xda0 [ 131.097014][ T6699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.097040][ T6699] ? selinux_socket_sendmsg+0x198/0x2f0 [ 131.097060][ T6699] ____sys_sendmsg+0xa4d/0xbe0 [ 131.097074][ T6699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.097092][ T6699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.097109][ T6699] ? lock_acquire+0x1d1/0x380 [ 131.097120][ T6699] ? get_pid_task+0x2a/0x250 [ 131.097136][ T6699] ___sys_sendmsg+0x190/0x1e0 [ 131.097155][ T6699] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.097170][ T6699] ? get_pid_task+0x106/0x250 [ 131.097189][ T6699] ? find_held_lock+0x2b/0x80 [ 131.097213][ T6699] __sys_sendmsg+0x160/0x210 [ 131.097224][ T6699] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.097243][ T6699] do_syscall_64+0x123/0x790 [ 131.097258][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.097269][ T6699] RIP: 0033:0x7efcf879e159 [ 131.097279][ T6699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.097289][ T6699] RSP: 002b:00007efcf96f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.097301][ T6699] RAX: ffffffffffffffda RBX: 00007efcf8a25fa0 RCX: 00007efcf879e159 [ 131.097307][ T6699] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 131.097314][ T6699] RBP: 00007efcf96f1090 R08: 0000000000000000 R09: 0000000000000000 [ 131.097320][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.097327][ T6699] R13: 00007efcf8a26038 R14: 00007efcf8a25fa0 R15: 00007ffcea7ccac8 [ 131.097341][ T6699] [ 131.396195][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.478379][ T6695] bond0: (slave geneve2): making interface the new active one [ 131.498561][ T6695] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 132.588218][ T6711] zram0: detected capacity change from 0 to 8 [ 132.609790][ T6711] zram: Cannot change disksize for initialized device [ 133.799170][ T31] audit: type=1400 audit(1788715389.618:397): avc: denied { listen } for pid=6717 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.866487][ T31] audit: type=1400 audit(1788715390.688:398): avc: denied { create } for pid=6739 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.153326][ T6766] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 137.169151][ T6766] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 138.122457][ T6779] FAULT_INJECTION: forcing a failure. [ 138.122457][ T6779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.141626][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.1.223 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.141648][ T6779] Tainted: [L]=SOFTLOCKUP [ 138.141652][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 138.141659][ T6779] Call Trace: [ 138.141663][ T6779] [ 138.141667][ T6779] dump_stack_lvl+0x100/0x190 [ 138.141689][ T6779] should_fail_ex.cold+0x5/0xa [ 138.141705][ T6779] _copy_to_user+0x32/0xd0 [ 138.141724][ T6779] simple_read_from_buffer+0xcb/0x170 [ 138.141738][ T6779] proc_fail_nth_read+0x1af/0x230 [ 138.141752][ T6779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.141767][ T6779] ? rw_verify_area+0xce/0x6d0 [ 138.141782][ T6779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.141795][ T6779] vfs_read+0x1e4/0xb40 [ 138.141805][ T6779] ? lock_acquire+0x1d1/0x380 [ 138.141817][ T6779] ? __fget_files+0x34/0x3d0 [ 138.141829][ T6779] ? __pfx_vfs_read+0x10/0x10 [ 138.141838][ T6779] ? find_held_lock+0x2b/0x80 [ 138.141853][ T6779] ? __fget_files+0x215/0x3d0 [ 138.141868][ T6779] ? __fget_files+0x21f/0x3d0 [ 138.141884][ T6779] ksys_read+0x12a/0x250 [ 138.141894][ T6779] ? __pfx_ksys_read+0x10/0x10 [ 138.141908][ T6779] do_syscall_64+0x123/0x790 [ 138.141924][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.141935][ T6779] RIP: 0033:0x7fd502b5e98e [ 138.141945][ T6779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.141955][ T6779] RSP: 002b:00007fd503b17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.141966][ T6779] RAX: ffffffffffffffda RBX: 00007fd503b186c0 RCX: 00007fd502b5e98e [ 138.141973][ T6779] RDX: 000000000000000f RSI: 00007fd503b180a0 RDI: 0000000000000003 [ 138.141980][ T6779] RBP: 00007fd503b18090 R08: 0000000000000000 R09: 0000000000000000 [ 138.141986][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.141992][ T6779] R13: 00007fd502e26038 R14: 00007fd502e25fa0 R15: 00007ffd847dab78 [ 138.142008][ T6779] [ 139.187621][ T6794] tipc: Started in network mode [ 139.187653][ T6794] tipc: Node identity 4, cluster identity 4711 [ 139.187667][ T6794] tipc: Node number set to 4 [ 139.846337][ T31] audit: type=1800 audit(1788715395.658:399): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.229" name="file0" dev="overlay" ino=304 res=0 errno=0 [ 140.895576][ T1867] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.958285][ T6817] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 140.985171][ T6816] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 141.174455][ T1867] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 141.254356][ T1867] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 141.254387][ T1867] usb 5-1: config 1 interface 0 has no altsetting 0 [ 141.791701][ T1867] usb 5-1: string descriptor 0 read error: -22 [ 141.791778][ T1867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.934715][ T31] audit: type=1400 audit(1788715397.758:400): avc: denied { name_bind } for pid=6819 comm="syz.3.235" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 141.974060][ T6820] fuse-io-uring is disabled by module parameter [ 141.980946][ T31] audit: type=1400 audit(1788715397.788:401): avc: denied { cmd } for pid=6819 comm="syz.3.235" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=io_uring permissive=1 [ 142.022705][ T6822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.236'. [ 142.163466][ T31] audit: type=1400 audit(1788715397.978:402): avc: denied { mounton } for pid=6824 comm="syz.1.238" path="/50/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 142.196652][ T6825] overlayfs: failed to clone lowerpath [ 142.213871][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 142.225633][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 142.225764][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 142.225775][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 142.365444][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.365671][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.393324][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.393556][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.582580][ T1867] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 142.618930][ T31] audit: type=1400 audit(1788715398.438:403): avc: denied { create } for pid=6828 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.646092][ T31] audit: type=1400 audit(1788715398.468:404): avc: denied { create } for pid=6828 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.701120][ T1867] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0001/input/input9 [ 143.561288][ T31] audit: type=1400 audit(1788715399.378:405): avc: denied { read } for pid=6828 comm="syz.3.240" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.561326][ T31] audit: type=1400 audit(1788715399.378:406): avc: denied { open } for pid=6828 comm="syz.3.240" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.723851][ T31] audit: type=1400 audit(1788715399.538:407): avc: denied { bind } for pid=6838 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.820452][ T1867] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 143.856075][ T1867] usb 5-1: USB disconnect, device number 4 [ 143.898387][ T6843] xt_hashlimit: size too large, truncated to 1048576 [ 143.922575][ T6839] wg1 speed is unknown, defaulting to 1000 [ 144.041063][ T6845] fido_id[6845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 145.067714][ T31] audit: type=1400 audit(1788715400.888:408): avc: denied { execute } for pid=6840 comm="syz.1.243" path="/52/blkio.bfq.io_wait_time" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.924345][ T1867] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.995862][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 146.074476][ T1867] usb 5-1: Using ep0 maxpacket: 8 [ 146.079984][ T1867] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 146.100660][ T1867] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 146.100685][ T1867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.100703][ T1867] usb 5-1: config 0 has no interface number 0 [ 146.133036][ T1867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.133061][ T1867] usb 5-1: Product: syz [ 146.133078][ T1867] usb 5-1: Manufacturer: syz [ 146.133087][ T1867] usb 5-1: SerialNumber: syz [ 146.156827][ T1867] usb 5-1: config 0 descriptor?? [ 146.172686][ T1867] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 146.183988][ T1867] uvcvideo 5-1:0.31: No valid video chain found. [ 146.362851][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 146.442842][ T31] audit: type=1400 audit(1788715402.258:409): avc: denied { getopt } for pid=6873 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.629877][ T6882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.638654][ T6882] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 147.702880][ T31] audit: type=1400 audit(1788715403.518:410): avc: denied { create } for pid=6885 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 147.727568][ T31] audit: type=1400 audit(1788715403.548:411): avc: denied { accept } for pid=6885 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 147.749452][ T31] audit: type=1400 audit(1788715403.568:412): avc: denied { setopt } for pid=6885 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 147.868466][ T1867] usb 5-1: USB disconnect, device number 5 [ 147.924587][ T6888] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.972144][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 147.990404][ T31] audit: type=1400 audit(1788715403.808:413): avc: denied { recv } for pid=5603 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.48 dest=54140 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 148.263378][ T6897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 148.374545][ T1867] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 148.407927][ T31] audit: type=1400 audit(1788715404.218:414): avc: denied { read write } for pid=6900 comm="syz.0.250" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.407970][ T31] audit: type=1400 audit(1788715404.218:415): avc: denied { open } for pid=6900 comm="syz.0.250" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.577742][ T1867] usb 5-1: device descriptor read/64, error -71 [ 148.585216][ T31] audit: type=1400 audit(1788715404.398:416): avc: denied { listen } for pid=6900 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.234771][ T1867] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 149.258896][ T31] audit: type=1400 audit(1788715405.078:417): avc: denied { bind } for pid=6906 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.374708][ T1867] usb 5-1: device descriptor read/64, error -71 [ 149.484875][ T1867] usb usb5-port1: attempt power cycle [ 149.827954][ T1867] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 149.855185][ T1867] usb 5-1: device descriptor read/8, error -71 [ 149.873754][ T6926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.265'. [ 150.082285][ T31] audit: type=1400 audit(1788715405.898:418): avc: denied { connect } for pid=6932 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.172581][ T1867] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 150.181237][ T6928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.266'. [ 150.195434][ T1867] usb 5-1: device descriptor read/8, error -71 [ 150.207428][ T31] audit: type=1400 audit(1788715406.028:419): avc: denied { bind } for pid=6932 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.305555][ T1867] usb usb5-port1: unable to enumerate USB device [ 153.203659][ T5742] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 153.747350][ T5742] usb 4-1: device descriptor read/64, error -71 [ 153.825265][ T6997] capability: warning: `syz.0.292' uses deprecated v2 capabilities in a way that may be insecure [ 153.846552][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 153.846577][ T31] audit: type=1400 audit(1788715409.668:426): avc: denied { read } for pid=6996 comm="syz.0.292" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.846604][ T31] audit: type=1400 audit(1788715409.668:427): avc: denied { open } for pid=6996 comm="syz.0.292" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.913779][ T31] audit: type=1400 audit(1788715409.728:428): avc: denied { ioctl } for pid=6996 comm="syz.0.292" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.025086][ T5742] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 154.137153][ T31] audit: type=1400 audit(1788715409.958:429): avc: denied { accept } for pid=7000 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.157041][ T5742] usb 4-1: device descriptor read/64, error -71 [ 154.204950][ T31] audit: type=1400 audit(1788715410.028:430): avc: denied { connect } for pid=7000 comm="syz.0.294" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.266655][ T5742] usb usb4-port1: attempt power cycle [ 154.320600][ T31] audit: type=1400 audit(1788715410.138:431): avc: denied { create } for pid=7008 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.364535][ T31] audit: type=1400 audit(1788715410.178:432): avc: denied { map } for pid=7008 comm="syz.2.281" path="socket:[13514]" dev="sockfs" ino=13514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.364575][ T31] audit: type=1400 audit(1788715410.178:433): avc: denied { read write } for pid=7008 comm="syz.2.281" path="socket:[13514]" dev="sockfs" ino=13514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.448917][ T31] audit: type=1400 audit(1788715410.268:434): avc: denied { getopt } for pid=7008 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.768813][ T5742] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 154.796313][ T5742] usb 4-1: device descriptor read/8, error -71 [ 155.035351][ T5742] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 155.084696][ T5742] usb 4-1: device descriptor read/8, error -71 [ 155.091314][ T5711] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.255353][ T5742] usb usb4-port1: unable to enumerate USB device [ 155.274482][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 155.279955][ T5711] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.816367][ T5711] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 155.816394][ T5711] usb 5-1: config 0 has no interface number 0 [ 155.816423][ T5711] usb 5-1: config 0 interface 184 has no altsetting 0 [ 155.841408][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.849940][ T5711] usb 5-1: Product: syz [ 155.849964][ T5711] usb 5-1: Manufacturer: syz [ 155.849974][ T5711] usb 5-1: SerialNumber: syz [ 155.866514][ T5711] usb 5-1: config 0 descriptor?? [ 156.008246][ T7042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.120648][ T31] audit: type=1400 audit(1788715411.858:435): avc: denied { write } for pid=7041 comm="syz.1.307" name="video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.978828][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 157.978858][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.052725][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.052759][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 158.052775][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 158.052785][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 158.053067][ T5711] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.142899][ T5711] usb 5-1: USB disconnect, device number 10 [ 158.549096][ T7065] loop2: detected capacity change from 0 to 5415 [ 158.650689][ T6267] Buffer I/O error on dev loop2, logical block 676, async page read [ 159.793664][ C0] I/O error, dev loop2, sector 5248 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 159.805783][ C0] I/O error, dev loop2, sector 5248 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.805831][ C0] Buffer I/O error on dev loop2, logical block 1312, async page read [ 159.805852][ C0] I/O error, dev loop2, sector 5252 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.805879][ C0] Buffer I/O error on dev loop2, logical block 1313, async page read [ 161.135013][ T7080] XFS (loop4): SB validate failed with error -5. [ 161.388850][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 161.388874][ T31] audit: type=1400 audit(1788715417.208:439): avc: denied { read } for pid=7100 comm="syz.0.320" path="socket:[13725]" dev="sockfs" ino=13725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.681349][ T31] audit: type=1400 audit(1788715417.498:440): avc: denied { mount } for pid=7104 comm="syz.4.322" name="/" dev="ramfs" ino=13742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.139234][ T7101] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 162.962523][ T7131] ubi0: attaching mtd0 [ 162.963682][ T7131] ubi0: scanning is finished [ 162.963723][ T7131] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 163.006514][ T7131] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 163.284622][ T5742] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.445747][ T5742] usb 5-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 163.467651][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.467676][ T5742] usb 5-1: Product: syz [ 163.467696][ T5742] usb 5-1: Manufacturer: syz [ 163.467707][ T5742] usb 5-1: SerialNumber: syz [ 163.493912][ T5742] ums-datafab 5-1:1.0: USB Mass Storage device detected [ 163.536450][ T5742] ums-datafab 5-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 163.536450][ T5742] Please send a copy of this message to and [ 163.600765][ T5742] scsi host1: usb-storage 5-1:1.0 [ 163.749468][ T10] usb 5-1: USB disconnect, device number 11 [ 164.287399][ T5742] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.295143][ T5711] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 164.434416][ T5711] usb 4-1: device descriptor read/64, error -71 [ 164.454379][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 164.460152][ T5742] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.470271][ T5742] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 164.470295][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.496265][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.496288][ T5742] usb 2-1: Product: syz [ 164.496302][ T5742] usb 2-1: Manufacturer: syz [ 164.496312][ T5742] usb 2-1: SerialNumber: syz [ 164.519856][ T5742] usb 2-1: config 0 descriptor?? [ 164.530161][ T5742] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.542504][ T5742] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 164.674717][ T5711] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 164.814335][ T5711] usb 4-1: device descriptor read/64, error -71 [ 164.924542][ T5711] usb usb4-port1: attempt power cycle [ 164.977364][ T7156] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 164.996968][ T5742] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 165.011801][ T5742] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 165.035377][ T31] audit: type=1400 audit(1788715420.858:441): avc: denied { mount } for pid=7146 comm="syz.1.330" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 165.063578][ T31] audit: type=1400 audit(1788715420.878:442): avc: denied { mounton } for pid=7146 comm="syz.1.330" path="/74/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 165.097497][ T5742] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 165.097519][ T5742] em28xx 2-1:0.0: No AC97 audio processor [ 165.158111][ T7149] bridge0: port 3(vlan2) entered blocking state [ 165.159712][ T7149] bridge0: port 3(vlan2) entered disabled state [ 165.159810][ T7149] vlan2: entered allmulticast mode [ 165.159825][ T7149] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 165.192555][ T7149] vlan2: entered promiscuous mode [ 165.192581][ T7149] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 165.199850][ T9] usb 2-1: USB disconnect, device number 3 [ 165.200528][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 165.251949][ T9] em28xx: Freeing device [ 165.264436][ T5711] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 165.287019][ T5711] usb 4-1: device descriptor read/8, error -71 [ 166.941527][ T7170] tipc: Started in network mode [ 166.941553][ T7170] tipc: Node identity 4, cluster identity 4711 [ 166.941568][ T7170] tipc: Node number set to 4 [ 166.962362][ T31] audit: type=1400 audit(1788715422.758:443): avc: denied { audit_write } for pid=7166 comm="syz.2.332" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.962399][ T31] audit: type=1400 audit(1788715422.758:444): avc: denied { watch } for pid=7166 comm="syz.2.332" path="/bus" dev="ramfs" ino=13912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 166.962425][ T31] audit: type=1400 audit(1788715422.758:445): avc: denied { watch_sb watch_reads } for pid=7166 comm="syz.2.332" path="/bus" dev="ramfs" ino=13912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 167.008743][ T5711] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 167.100424][ T5711] usb 4-1: device descriptor read/8, error -71 [ 167.119345][ T31] audit: type=1400 audit(1788715422.938:446): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 167.286257][ T5711] usb usb4-port1: unable to enumerate USB device [ 167.416152][ T31] audit: type=1800 audit(1788715423.218:447): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.337" name="file0" dev="overlay" ino=381 res=0 errno=0 [ 167.416195][ T31] audit: type=1400 audit(1788715423.238:448): avc: denied { connect } for pid=7173 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.623702][ T31] audit: type=1400 audit(1788715424.438:449): avc: denied { read write } for pid=7198 comm="syz.0.345" name="sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.651174][ T31] audit: type=1400 audit(1788715424.468:450): avc: denied { firmware_load } for pid=7190 comm="syz.1.342" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 168.651203][ T31] audit: type=1400 audit(1788715424.468:451): avc: denied { open } for pid=7198 comm="syz.0.345" path="/dev/sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.721709][ T7195] syz.1.342 (7195) used greatest stack depth: 19896 bytes left [ 168.835220][ T7200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.343'. [ 169.785976][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 169.786001][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 169.786025][ T7202] netlink: 'syz.1.346': attribute type 15 has an invalid length. [ 169.786035][ T7202] netlink: 'syz.1.346': attribute type 18 has an invalid length. [ 169.845056][ T7210] netlink: 76 bytes leftover after parsing attributes in process `syz.1.346'. [ 169.878928][ T7217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.344'. [ 169.910335][ T7209] XFS (loop0): SB validate failed with error -5. [ 170.189001][ T31] audit: type=1400 audit(1788715426.008:452): avc: denied { wake_alarm } for pid=7225 comm="syz.0.350" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.414914][ T5711] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 170.555802][ T5711] usb 2-1: device descriptor read/64, error -71 [ 170.675994][ T7248] FAULT_INJECTION: forcing a failure. [ 170.675994][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.689486][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.0.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.689504][ T7248] Tainted: [L]=SOFTLOCKUP [ 170.689508][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 170.689515][ T7248] Call Trace: [ 170.689519][ T7248] [ 170.689524][ T7248] dump_stack_lvl+0x100/0x190 [ 170.689565][ T7248] should_fail_ex.cold+0x5/0xa [ 170.689580][ T7248] _copy_from_user+0x2e/0xd0 [ 170.689598][ T7248] btf_new_fd+0x783/0x5bc0 [ 170.689614][ T7248] ? avc_has_perm_noaudit+0x145/0x3b0 [ 170.689630][ T7248] ? cred_has_capability.isra.0+0x186/0x300 [ 170.689642][ T7248] ? __lock_acquire+0x4c5/0x1ec0 [ 170.689655][ T7248] ? __pfx_btf_new_fd+0x10/0x10 [ 170.689671][ T7248] ? rcu_is_watching+0x13/0xc0 [ 170.689685][ T7248] ? cap_capable+0x107/0x430 [ 170.689702][ T7248] ? bpf_lsm_capable+0x9/0x10 [ 170.689716][ T7248] ? security_capable+0x80/0x260 [ 170.689732][ T7248] ? ns_capable+0xd2/0xf0 [ 170.689744][ T7248] __sys_bpf+0x13ef/0x4a30 [ 170.689758][ T7248] ? __pfx___sys_bpf+0x10/0x10 [ 170.689767][ T7248] ? find_held_lock+0x2b/0x80 [ 170.689782][ T7248] ? get_pid_task+0xfc/0x250 [ 170.689795][ T7248] ? get_pid_task+0xfc/0x250 [ 170.689813][ T7248] ? find_held_lock+0x2b/0x80 [ 170.689830][ T7248] ? rcu_read_lock_any_held+0x6a/0x90 [ 170.689846][ T7248] ? find_held_lock+0x2b/0x80 [ 170.689860][ T7248] ? ksys_write+0x190/0x250 [ 170.689873][ T7248] ? ksys_write+0x190/0x250 [ 170.689883][ T7248] ? lock_acquire+0x1d1/0x380 [ 170.689902][ T7248] ? fput+0x7c/0x100 [ 170.689915][ T7248] ? ksys_write+0x1ac/0x250 [ 170.689926][ T7248] ? __x64_sys_bpf+0xce/0x140 [ 170.689936][ T7248] __x64_sys_bpf+0xce/0x140 [ 170.689947][ T7248] ? do_syscall_64+0xae/0x790 [ 170.689961][ T7248] do_syscall_64+0x123/0x790 [ 170.689975][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.689987][ T7248] RIP: 0033:0x7f9b6939e159 [ 170.689997][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.690008][ T7248] RSP: 002b:00007f9b6a1db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.690019][ T7248] RAX: ffffffffffffffda RBX: 00007f9b69625fa0 RCX: 00007f9b6939e159 [ 170.690026][ T7248] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 170.690032][ T7248] RBP: 00007f9b6a1db090 R08: 0000000000000000 R09: 0000000000000000 [ 170.690039][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.690045][ T7248] R13: 00007f9b69626038 R14: 00007f9b69625fa0 R15: 00007ffcbff36958 [ 170.690059][ T7248] [ 171.446365][ T5711] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 171.690870][ T5711] usb 2-1: device descriptor read/64, error -71 [ 171.795224][ T5711] usb usb2-port1: attempt power cycle [ 171.850653][ T7258] FAULT_INJECTION: forcing a failure. [ 171.850653][ T7258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.850686][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.0.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.850702][ T7258] Tainted: [L]=SOFTLOCKUP [ 171.850706][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 171.850712][ T7258] Call Trace: [ 171.850716][ T7258] [ 171.850721][ T7258] dump_stack_lvl+0x100/0x190 [ 171.850741][ T7258] should_fail_ex.cold+0x5/0xa [ 171.850757][ T7258] _copy_from_user+0x2e/0xd0 [ 171.850775][ T7258] vt_ioctl+0xe80/0x3170 [ 171.850792][ T7258] ? __pfx_vt_ioctl+0x10/0x10 [ 171.850806][ T7258] ? tomoyo_path_number_perm+0x28f/0x580 [ 171.850826][ T7258] ? tomoyo_path_number_perm+0x188/0x580 [ 171.850846][ T7258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.850860][ T7258] ? tty_jobctrl_ioctl+0x152/0xce0 [ 171.850874][ T7258] ? __pfx_vt_ioctl+0x10/0x10 [ 171.850888][ T7258] tty_ioctl+0x26a/0x1640 [ 171.850900][ T7258] ? __pfx_tty_ioctl+0x10/0x10 [ 171.850910][ T7258] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 171.850925][ T7258] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 171.850938][ T7258] ? __fget_files+0x34/0x3d0 [ 171.850958][ T7258] ? selinux_file_ioctl+0x13b/0x290 [ 171.850967][ T7258] ? selinux_file_ioctl+0xb6/0x290 [ 171.850979][ T7258] ? __pfx_tty_ioctl+0x10/0x10 [ 171.850990][ T7258] __x64_sys_ioctl+0x18e/0x210 [ 171.851002][ T7258] do_syscall_64+0x123/0x790 [ 171.851016][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.851028][ T7258] RIP: 0033:0x7f9b6939e159 [ 171.851038][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.851048][ T7258] RSP: 002b:00007f9b6a1db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.851060][ T7258] RAX: ffffffffffffffda RBX: 00007f9b69625fa0 RCX: 00007f9b6939e159 [ 171.851067][ T7258] RDX: 00002000000001c0 RSI: 0000000000004b67 RDI: 0000000000000003 [ 171.851073][ T7258] RBP: 00007f9b6a1db090 R08: 0000000000000000 R09: 0000000000000000 [ 171.851079][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.851086][ T7258] R13: 00007f9b69626038 R14: 00007f9b69625fa0 R15: 00007ffcbff36958 [ 171.851099][ T7258] [ 172.180631][ T5711] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 172.204717][ T5711] usb 2-1: device descriptor read/8, error -71 [ 172.229683][ T7264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.359'. [ 172.464429][ T5711] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 172.504706][ T5711] usb 2-1: device descriptor read/8, error -71 [ 172.614943][ T5711] usb usb2-port1: unable to enumerate USB device [ 173.211857][ T7272] XFS (loop3): SB validate failed with error -5. [ 173.907244][ T7288] FAULT_INJECTION: forcing a failure. [ 173.907244][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 173.907280][ T7288] CPU: 0 UID: 0 PID: 7288 Comm: syz.4.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.907296][ T7288] Tainted: [L]=SOFTLOCKUP [ 173.907300][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 173.907306][ T7288] Call Trace: [ 173.907310][ T7288] [ 173.907315][ T7288] dump_stack_lvl+0x100/0x190 [ 173.907335][ T7288] should_fail_ex.cold+0x5/0xa [ 173.907348][ T7288] ? __netlink_lookup+0x652/0x900 [ 173.907366][ T7288] should_failslab+0xc2/0x120 [ 173.907380][ T7288] kmem_cache_alloc_noprof+0x92/0x6a0 [ 173.907392][ T7288] ? skb_clone+0x190/0x400 [ 173.907405][ T7288] skb_clone+0x190/0x400 [ 173.907417][ T7288] netlink_deliver_tap+0xaed/0xcc0 [ 173.907435][ T7288] netlink_unicast+0x62b/0x850 [ 173.907454][ T7288] ? __pfx_netlink_unicast+0x10/0x10 [ 173.907475][ T7288] netlink_sendmsg+0x8b0/0xda0 [ 173.907494][ T7288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.907512][ T7288] ? selinux_socket_sendmsg+0x198/0x2f0 [ 173.907538][ T7288] ____sys_sendmsg+0xa4d/0xbe0 [ 173.907552][ T7288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.907570][ T7288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.907587][ T7288] ? lock_acquire+0x1d1/0x380 [ 173.907598][ T7288] ? get_pid_task+0x2a/0x250 [ 173.907614][ T7288] ___sys_sendmsg+0x190/0x1e0 [ 173.907629][ T7288] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.907644][ T7288] ? get_pid_task+0x106/0x250 [ 173.907663][ T7288] ? find_held_lock+0x2b/0x80 [ 173.907686][ T7288] __sys_sendmsg+0x160/0x210 [ 173.907698][ T7288] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.907716][ T7288] do_syscall_64+0x123/0x790 [ 173.907732][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.907743][ T7288] RIP: 0033:0x7efcf879e159 [ 173.907753][ T7288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.907763][ T7288] RSP: 002b:00007efcf96f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.907775][ T7288] RAX: ffffffffffffffda RBX: 00007efcf8a25fa0 RCX: 00007efcf879e159 [ 173.907782][ T7288] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 173.907789][ T7288] RBP: 00007efcf96f1090 R08: 0000000000000000 R09: 0000000000000000 [ 173.907795][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.907801][ T7288] R13: 00007efcf8a26038 R14: 00007efcf8a25fa0 R15: 00007ffcea7ccac8 [ 173.907815][ T7288] [ 174.408407][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'. [ 175.383728][ T7304] veth0: entered promiscuous mode [ 175.404629][ T7293] XFS (loop0): SB validate failed with error -5. [ 175.525429][ T7303] veth0: left promiscuous mode [ 175.535218][ T7311] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 175.535709][ T7311] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 175.535834][ T7311] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 175.974314][ T5711] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 176.264710][ T5711] usb 2-1: device descriptor read/64, error -71 [ 176.624484][ T5711] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 176.792176][ T7321] XFS (loop0): SB validate failed with error -5. [ 176.799249][ T5711] usb 2-1: device descriptor read/64, error -71 [ 177.505287][ T7332] overlayfs: failed to resolve './file1': -2 [ 177.511664][ T5711] usb usb2-port1: attempt power cycle [ 177.819866][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 177.819892][ T31] audit: type=1400 audit(1788715433.638:455): avc: denied { mounton } for pid=7349 comm="syz.0.381" path="/61/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 177.854530][ T5711] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 177.873328][ T31] audit: type=1400 audit(1788715433.688:456): avc: denied { name_connect } for pid=7351 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 177.895609][ T5711] usb 2-1: device descriptor read/8, error -71 [ 177.977107][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.114528][ T10] usb 5-1: device descriptor read/64, error -71 [ 178.134453][ T5711] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 178.155068][ T5711] usb 2-1: device descriptor read/8, error -71 [ 178.265090][ T5711] usb usb2-port1: unable to enumerate USB device [ 178.853420][ T31] audit: type=1400 audit(1788715434.638:457): avc: denied { block_suspend } for pid=7360 comm="syz.3.384" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.934762][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.016085][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 179.084477][ T10] usb 5-1: device descriptor read/64, error -71 [ 179.203149][ T10] usb usb5-port1: attempt power cycle [ 180.269761][ T7375] program syz.1.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.279234][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.304861][ T10] usb 5-1: device descriptor read/8, error -71 [ 180.513264][ T7379] program syz.0.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.544457][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 180.565105][ T10] usb 5-1: device descriptor read/8, error -71 [ 180.674954][ T10] usb usb5-port1: unable to enumerate USB device [ 181.567700][ T7387] overlayfs: failed to resolve './file1': -2 [ 181.643016][ T7388] bridge0: port 3(macvlan2) entered blocking state [ 181.650722][ T7388] bridge0: port 3(macvlan2) entered disabled state [ 181.658599][ T7388] macvlan2: entered allmulticast mode [ 181.664192][ T7388] ip6gretap0: entered allmulticast mode [ 181.678279][ T7388] macvlan2: entered promiscuous mode [ 181.752912][ T7388] bridge0: port 3(macvlan2) entered blocking state [ 181.753010][ T7388] bridge0: port 3(macvlan2) entered forwarding state [ 181.860228][ T31] audit: type=1400 audit(1788715437.678:458): avc: denied { name_bind } for pid=7390 comm="syz.4.393" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 182.920042][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.929317][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.938925][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.949999][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.959110][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.984808][ T10] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 183.060248][ T7409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.399'. [ 183.147848][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.158388][ T10] usb 4-1: config index 0 descriptor too short (expected 8192, got 27) [ 183.158409][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.158425][ T10] usb 4-1: config 0 has no interfaces? [ 183.158442][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.195749][ T10] usb 4-1: config 0 descriptor?? [ 183.317431][ T7417] FAULT_INJECTION: forcing a failure. [ 183.317431][ T7417] name failslab, interval 1, probability 0, space 0, times 0 [ 183.317487][ T7417] CPU: 0 UID: 0 PID: 7417 Comm: syz.0.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.317503][ T7417] Tainted: [L]=SOFTLOCKUP [ 183.317507][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 183.317513][ T7417] Call Trace: [ 183.317517][ T7417] [ 183.317521][ T7417] dump_stack_lvl+0x100/0x190 [ 183.317542][ T7417] should_fail_ex.cold+0x5/0xa [ 183.317557][ T7417] should_failslab+0xc2/0x120 [ 183.317571][ T7417] __kmalloc_cache_noprof+0x91/0x6d0 [ 183.317589][ T7417] ? proc_thread_self_get_link+0x1a6/0x210 [ 183.317608][ T7417] proc_thread_self_get_link+0x1a6/0x210 [ 183.317624][ T7417] pick_link+0xac2/0x13c0 [ 183.317634][ T7417] ? selinux_inode_permission+0x14a/0x1130 [ 183.317648][ T7417] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 183.317665][ T7417] step_into_slowpath+0x9ba/0xf90 [ 183.317679][ T7417] ? __pfx_step_into_slowpath+0x10/0x10 [ 183.317692][ T7417] ? lookup_fast+0x2da/0x600 [ 183.317702][ T7417] ? inode_permission+0x374/0x620 [ 183.317719][ T7417] link_path_walk+0xf28/0x1cc0 [ 183.317735][ T7417] path_openat+0x1ac/0x2440 [ 183.317750][ T7417] ? __pfx_path_openat+0x10/0x10 [ 183.317767][ T7417] do_file_open+0x20e/0x430 [ 183.317781][ T7417] ? __pfx_do_file_open+0x10/0x10 [ 183.317804][ T7417] ? _raw_spin_unlock+0x28/0x50 [ 183.317815][ T7417] ? alloc_fd+0x471/0x7a0 [ 183.317833][ T7417] do_sys_openat2+0x10f/0x1e0 [ 183.317847][ T7417] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.317862][ T7417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.317880][ T7417] __x64_sys_openat+0x12d/0x210 [ 183.317895][ T7417] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.317914][ T7417] do_syscall_64+0x123/0x790 [ 183.317929][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.317941][ T7417] RIP: 0033:0x7f9b6935e98e [ 183.317950][ T7417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.317961][ T7417] RSP: 002b:00007f9b6a1daf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.317972][ T7417] RAX: ffffffffffffffda RBX: 00007f9b6a1db6c0 RCX: 00007f9b6935e98e [ 183.317979][ T7417] RDX: 0000000000000002 RSI: 00007f9b6943492b RDI: ffffffffffffff9c [ 183.317986][ T7417] RBP: 00007f9b69435024 R08: 0000000000000000 R09: 0000000000000000 [ 183.317992][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 183.317998][ T7417] R13: 00007f9b69626038 R14: 00007f9b69625fa0 R15: 00007ffcbff36958 [ 183.318012][ T7417] [ 183.318266][ T7417] FAULT_INJECTION: forcing a failure. [ 183.318266][ T7417] name failslab, interval 1, probability 0, space 0, times 0 [ 183.318283][ T7417] CPU: 0 UID: 0 PID: 7417 Comm: syz.0.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.318299][ T7417] Tainted: [L]=SOFTLOCKUP [ 183.318303][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 183.318309][ T7417] Call Trace: [ 183.318312][ T7417] [ 183.318316][ T7417] dump_stack_lvl+0x100/0x190 [ 183.318333][ T7417] should_fail_ex.cold+0x5/0xa [ 183.318347][ T7417] should_failslab+0xc2/0x120 [ 183.318360][ T7417] kmem_cache_alloc_noprof+0x92/0x6a0 [ 183.318371][ T7417] ? __pfx_map_id_range_down+0x10/0x10 [ 183.318383][ T7417] ? security_inode_alloc+0x3b/0x2c0 [ 183.318402][ T7417] security_inode_alloc+0x3b/0x2c0 [ 183.318419][ T7417] inode_init_always_gfp+0xc6f/0xfb0 [ 183.318434][ T7417] alloc_inode+0x8e/0x250 [ 183.318456][ T7417] alloc_anon_inode+0x2a/0x3e0 [ 183.318472][ T7417] anon_inode_make_secure_inode+0x2f/0x140 [ 183.318491][ T7417] __do_sys_memfd_secret+0xd7/0x570 [ 183.318507][ T7417] do_syscall_64+0x123/0x790 [ 183.318521][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.318531][ T7417] RIP: 0033:0x7f9b6939e159 [ 183.318540][ T7417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.318551][ T7417] RSP: 002b:00007f9b6a1db028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 183.318561][ T7417] RAX: ffffffffffffffda RBX: 00007f9b69625fa0 RCX: 00007f9b6939e159 [ 183.318567][ T7417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.318574][ T7417] RBP: 00007f9b6a1db090 R08: 0000000000000000 R09: 0000000000000000 [ 183.318580][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.318587][ T7417] R13: 00007f9b69626038 R14: 00007f9b69625fa0 R15: 00007ffcbff36958 [ 183.318600][ T7417] [ 183.624514][ T31] audit: type=1400 audit(1788715439.438:459): avc: denied { egress } for pid=36 comm="kcompactd1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 183.624566][ T31] audit: type=1400 audit(1788715439.438:460): avc: denied { sendto } for pid=36 comm="kcompactd1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 183.949697][ T10] usb 4-1: string descriptor 0 read error: -71 [ 183.961454][ T10] usb 4-1: USB disconnect, device number 18 [ 184.729386][ T1867] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 184.755701][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 184.763942][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 184.781558][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 184.819703][ T7421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.404'. [ 184.901039][ T7423] ceph: No mds server is up or the cluster is laggy [ 184.909517][ T7432] ceph: No mds server is up or the cluster is laggy [ 185.042401][ T7406] wg1 speed is unknown, defaulting to 1000 [ 185.049134][ T52] Bluetooth: hci3: command tx timeout [ 185.750323][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 185.750366][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 185.756448][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 186.480148][ T31] audit: type=1400 audit(1788715442.298:461): avc: denied { execute } for pid=7455 comm="syz.3.412" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 186.674850][ T1867] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 187.125625][ T5617] Bluetooth: hci3: command tx timeout [ 187.315178][ T1867] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 187.329232][ T1867] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 187.329258][ T1867] usb 2-1: config 0 has no interface number 0 [ 187.329279][ T1867] usb 2-1: too many endpoints for config 0 interface 32 altsetting 116: 119, using maximum allowed: 30 [ 187.329299][ T1867] usb 2-1: config 0 interface 32 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 187.329316][ T1867] usb 2-1: config 0 interface 32 has no altsetting 0 [ 187.329335][ T1867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.398302][ T1867] usb 2-1: config 0 descriptor?? [ 187.406509][ T31] audit: type=1400 audit(1788715443.218:462): avc: denied { connect } for pid=7455 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.639300][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.647006][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.647109][ T7406] bridge_slave_0: entered allmulticast mode [ 187.665367][ T7406] bridge_slave_0: entered promiscuous mode [ 187.687603][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.687667][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.687780][ T7406] bridge_slave_1: entered allmulticast mode [ 187.712219][ T7406] bridge_slave_1: entered promiscuous mode [ 187.796570][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.815465][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.863032][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.863261][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.908155][ T1867] usb 2-1: string descriptor 0 read error: -71 [ 187.931385][ T7406] team0: Port device team_slave_0 added [ 187.938683][ T1867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 187.955181][ T7406] team0: Port device team_slave_1 added [ 187.972049][ T1867] gp8psk: usb in 128 operation failed. [ 187.997773][ T1867] gp8psk: usb in 137 operation failed. [ 187.997794][ T1867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 187.997817][ T1867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 188.028297][ T1867] usb 2-1: USB disconnect, device number 12 [ 188.111254][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.118546][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.118564][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.162583][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.170229][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.196487][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.219861][ T31] audit: type=1400 audit(1788715444.038:463): avc: denied { view } for pid=7468 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.740466][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.741343][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.204334][ T5617] Bluetooth: hci3: command tx timeout [ 190.815835][ T7473] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 190.815871][ T7473] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 190.816015][ T7473] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 190.879842][ T31] audit: type=1400 audit(1788715446.638:464): avc: denied { firmware_load } for pid=7471 comm="syz.3.414" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 190.940659][ T7406] hsr_slave_0: entered promiscuous mode [ 190.941117][ T7406] hsr_slave_1: entered promiscuous mode [ 190.941414][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 190.941427][ T7406] Cannot create hsr debugfs directory [ 191.147811][ T7482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 191.188493][ T31] audit: type=1400 audit(1788715447.008:465): avc: denied { write } for pid=7479 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.284333][ T5617] Bluetooth: hci3: command tx timeout [ 193.079702][ T7494] fuse: fd is not a fuse device [ 193.085475][ T31] audit: type=1400 audit(1788715448.488:466): avc: denied { write } for pid=7489 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.085512][ T31] audit: type=1400 audit(1788715448.868:467): avc: denied { connect } for pid=7489 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.085533][ T31] audit: type=1400 audit(1788715448.868:468): avc: denied { write } for pid=7489 comm="syz.2.422" laddr=fe80::a8aa:aaff:feaa:aa0c lport=30935 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.085555][ T31] audit: type=1400 audit(1788715448.898:469): avc: denied { mounton } for pid=7489 comm="syz.2.422" path="/85/file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.888962][ T7406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.560222][ T7511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'. [ 194.875714][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.886632][ T7406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.895748][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.909536][ T7406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.924544][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 194.940386][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.706627][ T7406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.784137][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.826897][ T7518] XFS (loop1): SB validate failed with error -5. [ 195.882765][ T7505] wg1 speed is unknown, defaulting to 1000 [ 195.925807][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 196.093368][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.131330][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.152057][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.152110][ T6868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.179558][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.179613][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.360051][ T31] audit: type=1400 audit(1788715452.178:470): avc: denied { write } for pid=7536 comm="syz.1.432" name="usb_gadget" dev="configfs" ino=3606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.360095][ T31] audit: type=1400 audit(1788715452.178:471): avc: denied { create } for pid=7536 comm="syz.1.432" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 197.099847][ T7558] Bluetooth: MGMT ver 1.23 [ 198.932496][ T7578] overlayfs: failed to resolve './file0': -2 [ 199.215829][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.289964][ T7582] process 'syz.0.442' launched './file1' with NULL argv: empty string added [ 199.291008][ T31] audit: type=1400 audit(1788715455.108:472): avc: denied { execute_no_trans } for pid=7580 comm="syz.0.442" path="/77/file1" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.929489][ T7587] tmpfs: Cannot enable quota on remount [ 199.935754][ T31] audit: type=1400 audit(1788715455.748:473): avc: denied { getopt } for pid=7585 comm="syz.1.443" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.935793][ T31] audit: type=1400 audit(1788715455.748:474): avc: denied { read } for pid=7585 comm="syz.1.443" path="socket:[15457]" dev="sockfs" ino=15457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.713103][ T7406] veth0_vlan: entered promiscuous mode [ 200.733198][ T7406] veth1_vlan: entered promiscuous mode [ 200.790847][ T7406] veth0_macvtap: entered promiscuous mode [ 200.802641][ T7406] veth1_macvtap: entered promiscuous mode [ 200.853832][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.882262][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.027278][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.047711][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.032430][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.032452][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.064933][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.064967][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.228950][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.228972][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.836493][ T31] audit: type=1400 audit(1788715458.658:475): avc: denied { mounton } for pid=7406 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 202.902899][ T31] audit: type=1400 audit(1788715458.718:476): avc: denied { mount } for pid=7406 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 203.132495][ T7616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.774816][ T1867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.894383][ T5742] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.937562][ T1867] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 203.951668][ T1867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.951692][ T1867] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 203.951719][ T1867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.984877][ T1867] opticon 2-1:1.0: opticon converter detected [ 204.037185][ T1867] usb 2-1: opticon converter now attached to ttyUSB0 [ 204.044330][ T5742] usb 6-1: Using ep0 maxpacket: 8 [ 204.049930][ T5742] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 204.062182][ T5742] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.062215][ T5742] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 204.062236][ T5742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.116468][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 204.116493][ T5742] usb 6-1: Product: syz [ 204.116509][ T5742] usb 6-1: Manufacturer: syz [ 204.116519][ T5742] usb 6-1: SerialNumber: syz [ 204.144102][ T5742] usb 6-1: config 0 descriptor?? [ 204.294887][ T5742] rc_core: IR keymap rc-imon-rsc not found [ 204.294907][ T5742] Registered IR keymap rc-empty [ 204.295815][ T5742] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 204.323421][ T5742] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 204.339782][ T31] audit: type=1400 audit(1788715460.158:477): avc: denied { read } for pid=4957 comm="acpid" name="event4" dev="devtmpfs" ino=2897 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.339823][ T31] audit: type=1400 audit(1788715460.158:478): avc: denied { open } for pid=4957 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2897 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.339858][ T31] audit: type=1400 audit(1788715460.158:479): avc: denied { ioctl } for pid=4957 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2897 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.516106][ T7626] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 204.590350][ T5742] usb 6-1: USB disconnect, device number 2 [ 205.581842][ T7638] XFS (loop3): SB validate failed with error -5. [ 205.630545][ T7653] program syz.5.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.110707][ T7663] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 206.400109][ T31] audit: type=1400 audit(1788715462.158:480): avc: denied { read } for pid=7665 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.204101][ T5808] usb 2-1: USB disconnect, device number 13 [ 207.291341][ T5808] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 207.306856][ T5808] opticon 2-1:1.0: device disconnected [ 207.378660][ T7682] program syz.0.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.459459][ T7684] syzkaller0: entered promiscuous mode [ 207.459481][ T7684] syzkaller0: entered allmulticast mode [ 207.493920][ T7684] tipc: Enabled bearer , priority 0 [ 207.519625][ T7684] tipc: Resetting bearer [ 207.550708][ T7683] tipc: Resetting bearer [ 207.593134][ T7683] tipc: Disabling bearer [ 208.538560][ T7690] XFS (loop5): SB validate failed with error -5. [ 209.819036][ T7723] team_slave_1: entered promiscuous mode [ 209.829327][ T31] audit: type=1400 audit(1788715465.648:481): avc: denied { read } for pid=7722 comm="syz.3.464" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 209.855599][ T31] audit: type=1400 audit(1788715465.678:482): avc: denied { watch_reads } for pid=7718 comm="syz.5.478" path="/8" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.878311][ T31] audit: type=1400 audit(1788715465.698:483): avc: denied { open } for pid=7722 comm="syz.3.464" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 209.934396][ T31] audit: type=1400 audit(1788715465.748:484): avc: denied { mount } for pid=7722 comm="syz.3.464" name="/" dev="rpc_pipefs" ino=16214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 209.989636][ T31] audit: type=1400 audit(1788715465.808:485): avc: denied { map } for pid=7722 comm="syz.3.464" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 210.285898][ T7722] team_slave_1: left promiscuous mode [ 210.348040][ T31] audit: type=1400 audit(1788715466.168:486): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 210.375186][ T31] audit: type=1400 audit(1788715466.198:487): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 212.798749][ T7756] tipc: Enabling of bearer rejected, failed to enable media [ 212.857386][ T7759] bridge_slave_0: left allmulticast mode [ 212.857415][ T7759] bridge_slave_0: left promiscuous mode [ 212.857519][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.900055][ T7759] bridge_slave_1: left allmulticast mode [ 212.910812][ T7759] bridge_slave_1: left promiscuous mode [ 212.917915][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.970333][ T7759] bond0: (slave bond_slave_0): Releasing backup interface [ 213.002095][ T7759] bond0: (slave bond_slave_1): Releasing backup interface [ 213.082962][ T7759] team0: Port device team_slave_0 removed [ 213.123233][ T7759] team0: Port device team_slave_1 removed [ 213.131105][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.141945][ T7759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.160775][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.168993][ T7759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.190075][ T7759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.242098][ T1867] wg1 speed is unknown, defaulting to 1000 [ 213.370405][ T7775] team0: Port device xfrm0 added [ 213.378988][ T7777] tipc: Enabled bearer , priority 0 [ 214.497128][ T31] audit: type=1400 audit(1788715470.318:488): avc: denied { recv } for pid=7735 comm="syz.0.482" saddr=10.128.0.169 src=30006 daddr=10.128.0.48 dest=54140 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 214.531154][ T31] audit: type=1400 audit(1788715470.348:489): avc: denied { read write } for pid=7406 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.561161][ T31] audit: type=1400 audit(1788715470.378:490): avc: denied { open } for pid=7406 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.602482][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 214.602587][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 214.633609][ T7783] ceph: No mds server is up or the cluster is laggy [ 214.849800][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 214.849824][ T31] audit: type=1400 audit(1788715470.668:495): avc: denied { read } for pid=7792 comm="syz.3.495" name="comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.879684][ T31] audit: type=1400 audit(1788715470.708:496): avc: denied { open } for pid=7792 comm="syz.3.495" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.918948][ T31] audit: type=1400 audit(1788715470.738:497): avc: denied { ioctl } for pid=7792 comm="syz.3.495" path="/dev/comedi4" dev="devtmpfs" ino=1277 ioctlcmd=0x6409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.952915][ T31] audit: type=1400 audit(1788715470.768:498): avc: denied { create } for pid=7794 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.976352][ T31] audit: type=1400 audit(1788715470.798:499): avc: denied { write } for pid=7794 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.018597][ T31] audit: type=1400 audit(1788715470.838:500): avc: denied { read } for pid=7794 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.078724][ T31] audit: type=1400 audit(1788715470.898:501): avc: denied { view } for pid=7797 comm="syz.5.497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 215.142090][ T31] audit: type=1400 audit(1788715470.958:502): avc: denied { write } for pid=7799 comm="syz.3.498" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.541855][ T5808] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 215.549535][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 215.743163][ T5808] usb 4-1: device descriptor read/64, error -32 [ 216.019608][ T5808] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.197538][ T31] audit: type=1400 audit(1788715472.008:503): avc: denied { read } for pid=7797 comm="syz.5.497" dev="nsfs" ino=4026533568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 216.197583][ T31] audit: type=1400 audit(1788715472.008:504): avc: denied { open } for pid=7797 comm="syz.5.497" path="net:[4026533568]" dev="nsfs" ino=4026533568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 216.284675][ T7804] FAULT_INJECTION: forcing a failure. [ 216.284675][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 216.308047][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.1.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.308069][ T7804] Tainted: [L]=SOFTLOCKUP [ 216.308073][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 216.308079][ T7804] Call Trace: [ 216.308083][ T7804] [ 216.308088][ T7804] dump_stack_lvl+0x100/0x190 [ 216.308109][ T7804] should_fail_ex.cold+0x5/0xa [ 216.308123][ T7804] ? __netlink_lookup+0x652/0x900 [ 216.308141][ T7804] should_failslab+0xc2/0x120 [ 216.308156][ T7804] kmem_cache_alloc_noprof+0x92/0x6a0 [ 216.308168][ T7804] ? skb_clone+0x190/0x400 [ 216.308182][ T7804] skb_clone+0x190/0x400 [ 216.308193][ T7804] netlink_deliver_tap+0xaed/0xcc0 [ 216.308213][ T7804] netlink_unicast+0x62b/0x850 [ 216.308232][ T7804] ? __pfx_netlink_unicast+0x10/0x10 [ 216.308252][ T7804] netlink_sendmsg+0x8b0/0xda0 [ 216.308271][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.308290][ T7804] ? selinux_socket_sendmsg+0x198/0x2f0 [ 216.308309][ T7804] ____sys_sendmsg+0xa4d/0xbe0 [ 216.308323][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.308340][ T7804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.308360][ T7804] ? lock_acquire+0x1d1/0x380 [ 216.308371][ T7804] ? get_pid_task+0x2a/0x250 [ 216.308387][ T7804] ___sys_sendmsg+0x190/0x1e0 [ 216.308403][ T7804] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.308418][ T7804] ? get_pid_task+0x106/0x250 [ 216.308438][ T7804] ? find_held_lock+0x2b/0x80 [ 216.308461][ T7804] __sys_sendmsg+0x160/0x210 [ 216.308473][ T7804] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.308492][ T7804] do_syscall_64+0x123/0x790 [ 216.308507][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.308519][ T7804] RIP: 0033:0x7fd502b9e159 [ 216.308529][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.308539][ T7804] RSP: 002b:00007fd503b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.308551][ T7804] RAX: ffffffffffffffda RBX: 00007fd502e25fa0 RCX: 00007fd502b9e159 [ 216.308558][ T7804] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 0000000000000013 [ 216.308564][ T7804] RBP: 00007fd503b18090 R08: 0000000000000000 R09: 0000000000000000 [ 216.308571][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.308577][ T7804] R13: 00007fd502e26038 R14: 00007fd502e25fa0 R15: 00007ffd847dab78 [ 216.308591][ T7804] [ 216.343157][ T5808] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 216.586333][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.596250][ T5808] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 216.631545][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.631570][ T5808] usb 4-1: Product: syz [ 216.631585][ T5808] usb 4-1: Manufacturer: syz [ 216.631595][ T5808] usb 4-1: SerialNumber: syz [ 216.658734][ T5808] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 216.682864][ T5808] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 216.682864][ T5808] Please send a copy of this message to and [ 218.947555][ T5808] scsi host1: usb-storage 4-1:1.0 [ 219.328605][ T5808] usb 4-1: USB disconnect, device number 20 [ 219.400122][ T7814] XFS (loop1): SB validate failed with error -5. [ 219.425800][ T7809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.500'. [ 219.449144][ T7816] kAFS: No cell specified [ 219.642095][ T7834] FAULT_INJECTION: forcing a failure. [ 219.642095][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 219.642126][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.0.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.642141][ T7834] Tainted: [L]=SOFTLOCKUP [ 219.642146][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 219.642152][ T7834] Call Trace: [ 219.642156][ T7834] [ 219.642160][ T7834] dump_stack_lvl+0x100/0x190 [ 219.642181][ T7834] should_fail_ex.cold+0x5/0xa [ 219.642197][ T7834] should_failslab+0xc2/0x120 [ 219.642211][ T7834] __kmalloc_noprof+0xfc/0x840 [ 219.642221][ T7834] ? rcu_is_watching+0x13/0xc0 [ 219.642235][ T7834] ? tomoyo_realpath_from_path+0xb6/0x690 [ 219.642251][ T7834] tomoyo_realpath_from_path+0xb6/0x690 [ 219.642266][ T7834] tomoyo_path_number_perm+0x23c/0x580 [ 219.642282][ T7834] ? tomoyo_path_number_perm+0x22e/0x580 [ 219.642299][ T7834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.642321][ T7834] ? __lock_acquire+0x4c5/0x1ec0 [ 219.642339][ T7834] ? __fget_files+0x34/0x3d0 [ 219.642351][ T7834] ? find_held_lock+0x2b/0x80 [ 219.642366][ T7834] ? hook_file_ioctl_common+0x140/0x440 [ 219.642382][ T7834] ? __fget_files+0x21f/0x3d0 [ 219.642397][ T7834] security_file_ioctl+0xd3/0x230 [ 219.642416][ T7834] __x64_sys_ioctl+0xb7/0x210 [ 219.642428][ T7834] do_syscall_64+0x123/0x790 [ 219.642443][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.642455][ T7834] RIP: 0033:0x7f9b6939e159 [ 219.642464][ T7834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.642474][ T7834] RSP: 002b:00007f9b6a1db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.642485][ T7834] RAX: ffffffffffffffda RBX: 00007f9b69625fa0 RCX: 00007f9b6939e159 [ 219.642492][ T7834] RDX: 0000200000000140 RSI: 0000000000008b19 RDI: 0000000000000003 [ 219.642499][ T7834] RBP: 00007f9b6a1db090 R08: 0000000000000000 R09: 0000000000000000 [ 219.642505][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.642512][ T7834] R13: 00007f9b69626038 R14: 00007f9b69625fa0 R15: 00007ffcbff36958 [ 219.642525][ T7834] [ 219.642538][ T7834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.937509][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 219.937532][ T31] audit: type=1400 audit(1788715475.758:536): avc: denied { bind } for pid=7830 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.991751][ T31] audit: type=1400 audit(1788715475.808:537): avc: denied { append } for pid=7837 comm="syz.3.507" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.069434][ T31] audit: type=1400 audit(1788715475.888:538): avc: denied { create } for pid=7840 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.167537][ T31] audit: type=1400 audit(1788715475.988:539): avc: denied { setopt } for pid=7840 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.209018][ T31] audit: type=1400 audit(1788715476.028:540): avc: denied { open } for pid=7846 comm="syz.3.511" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 220.248532][ T31] audit: type=1400 audit(1788715476.068:541): avc: denied { mount } for pid=7846 comm="syz.3.511" name="/" dev="autofs" ino=16673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 220.315190][ T7849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.509'. [ 220.383829][ T7847] [ 220.386165][ T7847] ====================================================== [ 220.393159][ T7847] WARNING: possible circular locking dependency detected [ 220.400155][ T7847] syzkaller #0 Tainted: G L [ 220.406113][ T7847] ------------------------------------------------------ [ 220.413104][ T7847] syz.3.511/7847 is trying to acquire lock: [ 220.418965][ T7847] ffff88802c68cc60 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_prefill_and_lock+0x16c/0x580 [ 220.428861][ T7847] [ 220.428861][ T7847] but task is already holding lock: [ 220.436199][ T7847] ffff88807d378138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 220.445918][ T7847] [ 220.445918][ T7847] which lock already depends on the new lock. [ 220.445918][ T7847] [ 220.456297][ T7847] [ 220.456297][ T7847] the existing dependency chain (in reverse order) is: [ 220.465282][ T7847] [ 220.465282][ T7847] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 220.472991][ T7847] lock_acquire+0x1d1/0x380 [ 220.478022][ T7847] __mutex_lock+0x1a4/0x1bd0 [ 220.483117][ T7847] autofs_notify_daemon+0x4f8/0xd90 [ 220.488811][ T7847] autofs_wait+0x10fd/0x1b50 [ 220.493907][ T7847] autofs_mount_wait+0x132/0x3b0 [ 220.499337][ T7847] autofs_d_automount+0x490/0x950 [ 220.504854][ T7847] __traverse_mounts+0x1b9/0x8a0 [ 220.510285][ T7847] step_into_slowpath+0xb7e/0xf90 [ 220.515799][ T7847] path_lookupat+0x58b/0xc40 [ 220.520887][ T7847] filename_lookup+0x202/0x590 [ 220.526149][ T7847] kern_path+0x37/0x50 [ 220.530715][ T7847] lookup_bdev+0xd8/0x2a0 [ 220.535547][ T7847] resume_store+0x1d6/0x460 [ 220.540544][ T7847] kobj_attr_store+0x58/0x80 [ 220.545640][ T7847] sysfs_kf_write+0xf2/0x150 [ 220.550728][ T7847] kernfs_fop_write_iter+0x3e0/0x5f0 [ 220.556508][ T7847] vfs_write+0x6af/0x1050 [ 220.561327][ T7847] ksys_write+0x12a/0x250 [ 220.566154][ T7847] do_syscall_64+0x123/0x790 [ 220.571255][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.577666][ T7847] [ 220.577666][ T7847] -> #1 (&of->mutex){+.+.}-{4:4}: [ 220.584847][ T7847] lock_acquire+0x1d1/0x380 [ 220.589850][ T7847] __mutex_lock+0x1a4/0x1bd0 [ 220.594939][ T7847] kernfs_fop_write_iter+0x2c2/0x5f0 [ 220.600716][ T7847] iter_file_splice_write+0x830/0x10b0 [ 220.606687][ T7847] do_splice+0x109c/0x1fa0 [ 220.611617][ T7847] __do_splice+0x33b/0x370 [ 220.616534][ T7847] __x64_sys_splice+0x187/0x250 [ 220.621895][ T7847] do_syscall_64+0x123/0x790 [ 220.626979][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.633364][ T7847] [ 220.633364][ T7847] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 220.640715][ T7847] check_prev_add+0xeb/0xe60 [ 220.645807][ T7847] __lock_acquire+0x1492/0x1ec0 [ 220.651158][ T7847] lock_acquire+0x1d1/0x380 [ 220.656152][ T7847] __mutex_lock+0x1a4/0x1bd0 [ 220.661234][ T7847] anon_pipe_prefill_and_lock+0x16c/0x580 [ 220.667446][ T7847] anon_pipe_write+0x164/0x1b50 [ 220.672789][ T7847] __kernel_write_iter+0x6bb/0x930 [ 220.678391][ T7847] __kernel_write+0xf6/0x140 [ 220.683471][ T7847] autofs_notify_daemon+0x50d/0xd90 [ 220.689182][ T7847] autofs_wait+0x10fd/0x1b50 [ 220.694290][ T7847] autofs_mount_wait+0x132/0x3b0 [ 220.699750][ T7847] autofs_d_automount+0x490/0x950 [ 220.705270][ T7847] __traverse_mounts+0x1b9/0x8a0 [ 220.710706][ T7847] step_into_slowpath+0xb7e/0xf90 [ 220.716231][ T7847] path_lookupat+0x58b/0xc40 [ 220.721312][ T7847] filename_lookup+0x202/0x590 [ 220.726573][ T7847] kern_path+0x37/0x50 [ 220.731133][ T7847] lookup_bdev+0xd8/0x2a0 [ 220.735960][ T7847] resume_store+0x1d6/0x460 [ 220.740984][ T7847] kobj_attr_store+0x58/0x80 [ 220.746086][ T7847] sysfs_kf_write+0xf2/0x150 [ 220.751169][ T7847] kernfs_fop_write_iter+0x3e0/0x5f0 [ 220.756945][ T7847] vfs_write+0x6af/0x1050 [ 220.761767][ T7847] ksys_write+0x12a/0x250 [ 220.766592][ T7847] do_syscall_64+0x123/0x790 [ 220.771696][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.778105][ T7847] [ 220.778105][ T7847] other info that might help us debug this: [ 220.778105][ T7847] [ 220.788311][ T7847] Chain exists of: [ 220.788311][ T7847] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 220.788311][ T7847] [ 220.800702][ T7847] Possible unsafe locking scenario: [ 220.800702][ T7847] [ 220.808122][ T7847] CPU0 CPU1 [ 220.813466][ T7847] ---- ---- [ 220.818799][ T7847] lock(&sbi->pipe_mutex); [ 220.823273][ T7847] lock(&of->mutex); [ 220.829749][ T7847] lock(&sbi->pipe_mutex); [ 220.836741][ T7847] lock(&pipe->mutex); [ 220.840869][ T7847] [ 220.840869][ T7847] *** DEADLOCK *** [ 220.840869][ T7847] [ 220.848980][ T7847] locks held by syz.3.511/7847: 5, last CPU#0: [ 220.855100][ T7847] #0: ffff88807334f430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 220.864123][ T7847] #1: ffff8880339b4460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 220.873050][ T7847] #2: ffff888056438c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 220.882774][ T7847] #3: ffff888020ac5f08 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 220.892750][ T7847] #4: ffff88807d378138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 220.902897][ T7847] [ 220.902897][ T7847] stack backtrace: [ 220.908784][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.3.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.919530][ T7847] Tainted: [L]=SOFTLOCKUP [ 220.923831][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 220.933859][ T7847] Call Trace: [ 220.937116][ T7847] [ 220.940034][ T7847] dump_stack_lvl+0x100/0x190 [ 220.944691][ T7847] print_circular_bug.cold+0x178/0x1be [ 220.950129][ T7847] check_noncircular+0x146/0x160 [ 220.955061][ T7847] check_prev_add+0xeb/0xe60 [ 220.959632][ T7847] __lock_acquire+0x1492/0x1ec0 [ 220.964455][ T7847] ? unwind_next_frame+0x3be/0x2090 [ 220.969628][ T7847] lock_acquire+0x1d1/0x380 [ 220.974105][ T7847] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 220.979972][ T7847] ? __pfx___might_resched+0x10/0x10 [ 220.985236][ T7847] ? __kasan_check_byte+0x13/0x50 [ 220.990235][ T7847] __mutex_lock+0x1a4/0x1bd0 [ 220.994807][ T7847] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 221.000674][ T7847] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 221.006540][ T7847] ? is_bpf_text_address+0x8a/0x1a0 [ 221.011712][ T7847] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 221.017844][ T7847] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.023716][ T7847] ? __pfx___mutex_lock+0x10/0x10 [ 221.028724][ T7847] ? policy_nodemask+0xed/0x4f0 [ 221.033559][ T7847] ? __bfs+0x150/0x2a0 [ 221.037604][ T7847] ? anon_pipe_prefill_and_lock+0x16c/0x580 [ 221.043469][ T7847] anon_pipe_prefill_and_lock+0x16c/0x580 [ 221.049170][ T7847] ? stack_trace_save+0x8e/0xc0 [ 221.054002][ T7847] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 221.060227][ T7847] ? add_lock_to_list+0x9d/0x1d0 [ 221.065147][ T7847] anon_pipe_write+0x164/0x1b50 [ 221.069986][ T7847] ? __lock_acquire+0xe15/0x1ec0 [ 221.074895][ T7847] ? __pfx_anon_pipe_write+0x10/0x10 [ 221.080186][ T7847] ? lock_acquire+0x1d1/0x380 [ 221.084833][ T7847] ? autofs_notify_daemon+0x4f8/0xd90 [ 221.090183][ T7847] ? __pfx_anon_pipe_write+0x10/0x10 [ 221.095441][ T7847] __kernel_write_iter+0x6bb/0x930 [ 221.100523][ T7847] ? __pfx___kernel_write_iter+0x10/0x10 [ 221.106128][ T7847] ? find_held_lock+0x2b/0x80 [ 221.110780][ T7847] ? autofs_notify_daemon+0x4a0/0xd90 [ 221.116128][ T7847] ? autofs_notify_daemon+0x4a0/0xd90 [ 221.121490][ T7847] __kernel_write+0xf6/0x140 [ 221.126050][ T7847] ? __pfx___kernel_write+0x10/0x10 [ 221.131226][ T7847] ? __pfx_from_kgid_munged+0x10/0x10 [ 221.136570][ T7847] ? path_lookupat+0x58b/0xc40 [ 221.141307][ T7847] autofs_notify_daemon+0x50d/0xd90 [ 221.146490][ T7847] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 221.152194][ T7847] ? lockdep_init_map_type+0x5c/0x250 [ 221.157540][ T7847] ? lockdep_init_map_type+0x5c/0x250 [ 221.162894][ T7847] autofs_wait+0x10fd/0x1b50 [ 221.167470][ T7847] ? __pfx_autofs_wait+0x10/0x10 [ 221.172396][ T7847] ? find_held_lock+0x2b/0x80 [ 221.177052][ T7847] ? path_has_submounts+0xcf/0x120 [ 221.182145][ T7847] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.187316][ T7847] ? find_held_lock+0x2b/0x80 [ 221.191995][ T7847] autofs_mount_wait+0x132/0x3b0 [ 221.196997][ T7847] autofs_d_automount+0x490/0x950 [ 221.202020][ T7847] __traverse_mounts+0x1b9/0x8a0 [ 221.206952][ T7847] step_into_slowpath+0xb7e/0xf90 [ 221.211955][ T7847] ? rcu_is_watching+0x13/0xc0 [ 221.216693][ T7847] ? __pfx_step_into_slowpath+0x10/0x10 [ 221.222208][ T7847] ? lookup_slow+0x5b/0x70 [ 221.226608][ T7847] ? lookup_slow+0x5b/0x70 [ 221.231028][ T7847] path_lookupat+0x58b/0xc40 [ 221.235617][ T7847] filename_lookup+0x202/0x590 [ 221.240357][ T7847] ? __pfx_filename_lookup+0x10/0x10 [ 221.245619][ T7847] ? do_getname_kernel+0x5d/0x250 [ 221.250628][ T7847] ? __asan_memcpy+0x3c/0x60 [ 221.255198][ T7847] kern_path+0x37/0x50 [ 221.259241][ T7847] lookup_bdev+0xd8/0x2a0 [ 221.263556][ T7847] ? __pfx_lookup_bdev+0x10/0x10 [ 221.268477][ T7847] ? __asan_memcpy+0x3c/0x60 [ 221.273058][ T7847] resume_store+0x1d6/0x460 [ 221.277542][ T7847] ? __pfx_resume_store+0x10/0x10 [ 221.282548][ T7847] ? lock_acquire+0x1d1/0x380 [ 221.287203][ T7847] ? sysfs_file_kobj+0x21/0x290 [ 221.292035][ T7847] ? find_held_lock+0x2b/0x80 [ 221.296689][ T7847] ? sysfs_file_kobj+0xe4/0x290 [ 221.301521][ T7847] ? sysfs_file_kobj+0xe4/0x290 [ 221.306353][ T7847] ? __pfx_resume_store+0x10/0x10 [ 221.311357][ T7847] kobj_attr_store+0x58/0x80 [ 221.315924][ T7847] ? __pfx_kobj_attr_store+0x10/0x10 [ 221.321192][ T7847] sysfs_kf_write+0xf2/0x150 [ 221.325765][ T7847] kernfs_fop_write_iter+0x3e0/0x5f0 [ 221.331019][ T7847] ? __pfx_sysfs_kf_write+0x10/0x10 [ 221.336197][ T7847] vfs_write+0x6af/0x1050 [ 221.340499][ T7847] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 221.346274][ T7847] ? __pfx_vfs_write+0x10/0x10 [ 221.351016][ T7847] ? find_held_lock+0x2b/0x80 [ 221.355671][ T7847] ksys_write+0x12a/0x250 [ 221.359976][ T7847] ? __pfx_ksys_write+0x10/0x10 [ 221.364798][ T7847] do_syscall_64+0x123/0x790 [ 221.369370][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.375235][ T7847] RIP: 0033:0x7eff3b99e159 [ 221.379693][ T7847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.399297][ T7847] RSP: 002b:00007eff3c78c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.407693][ T7847] RAX: ffffffffffffffda RBX: 00007eff3bc25fa0 RCX: 00007eff3b99e159 [ 221.415641][ T7847] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 221.423585][ T7847] RBP: 00007eff3ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 221.431526][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.439475][ T7847] R13: 00007eff3bc26038 R14: 00007eff3bc25fa0 R15: 00007ffdcf0d0ce8 [ 221.447429][ T7847] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.549126][ T31] audit: type=1400 audit(1788715477.348:542): avc: denied { write } for pid=5590 comm="syz-executor" path="pipe:[4745]" dev="pipefs" ino=4745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 221.577052][ T31] audit: type=1400 audit(1788715477.368:543): avc: denied { recv } for pid=1533 comm="kworker/u8:14" saddr=10.128.0.169 src=41044 daddr=10.128.0.48 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 221.952475][ T7847] PM: Image not found (code -6) [ 222.049703][ T1533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.138092][ T1533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.166777][ T1533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.196524][ T1533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.225903][ T31] audit: type=1400 audit(1788715478.048:544): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 222.263675][ T31] audit: type=1400 audit(1788715478.078:545): avc: denied { search } for pid=5267 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.304066][ T1533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.340904][ T1533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.366856][ T1533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.396842][ T1533] vlan2 (unregistering): left allmulticast mode [ 222.396865][ T1533] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 222.396881][ T1533] vlan2 (unregistering): left promiscuous mode [ 222.396891][ T1533] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 222.396917][ T1533] bridge0: port 3(vlan2) entered disabled state [ 222.435950][ T1533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.561166][ T1533] macvlan2: left allmulticast mode [ 222.561186][ T1533] ip6gretap0: left allmulticast mode [ 222.561220][ T1533] macvlan2: left promiscuous mode [ 222.561294][ T1533] bridge0: port 3(macvlan2) entered disabled state [ 222.587209][ T1533] bridge_slave_1: left allmulticast mode [ 222.592848][ T1533] bridge_slave_1: left promiscuous mode [ 222.598652][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.606577][ T1533] bridge_slave_0: left allmulticast mode [ 222.612225][ T1533] bridge_slave_0: left promiscuous mode [ 222.618031][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.729654][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.740512][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.750199][ T1533] bond0 (unregistering): Released all slaves [ 222.767042][ T1533] team0: Port device xfrm0 removed [ 222.790788][ T1533] bond0 (unregistering): Released all slaves [ 222.801463][ T84] tipc: Resetting bearer [ 222.827156][ T1533] tipc: Left network mode [ 222.831581][ T1533] tipc: Disabling bearer [ 222.838453][ T1533] tipc: Left network mode [ 222.938444][ T5711] wg1 speed is unknown, defaulting to 1000 [ 222.938465][ T5711] syz2: Port: 1 Link DOWN [ 222.938491][ T5711] wg1 speed is unknown, defaulting to 1000 [ 222.983384][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 223.096938][ T1533] hsr_slave_0: left promiscuous mode [ 223.102479][ T1533] hsr_slave_1: left promiscuous mode [ 223.108217][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.115714][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.123147][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.131232][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.146023][ T1533] hsr_slave_0: left promiscuous mode [ 223.153030][ T1533] hsr_slave_1: left promiscuous mode [ 223.162752][ T1533] veth1_macvtap: left promiscuous mode [ 223.168929][ T1533] veth0_macvtap: left promiscuous mode [ 223.174596][ T1533] veth1_vlan: left promiscuous mode [ 223.179823][ T1533] veth0_vlan: left promiscuous mode [ 223.185439][ T1533] veth1_macvtap: left promiscuous mode [ 223.190921][ T1533] veth0_macvtap: left promiscuous mode [ 223.196568][ T1533] veth1_vlan: left promiscuous mode [ 223.196596][ T1533] veth0_vlan: left promiscuous mode [ 223.340943][ T1533] team0 (unregistering): Port device team_slave_1 removed [ 223.356738][ T1533] team0 (unregistering): Port device team_slave_0 removed [ 223.498040][ T12] smc: removing ib device syz2 [ 223.509859][ T12] smbdirect: ib_dev[syz2] removed [ 223.548460][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.947356][ T1533] IPVS: stop unused estimator thread 0... [ 223.969098][ T1533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.987967][ T1533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.000104][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 224.031701][ T1533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.066761][ T1533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.166700][ T1533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.198855][ T1533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.226495][ T1533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.249777][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 224.260879][ T1533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.311151][ T1533] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.346810][ T1533] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.377586][ T1533] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.397551][ T1533] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.468309][ T1533] bridge_slave_1: left allmulticast mode [ 224.473990][ T1533] bridge_slave_1: left promiscuous mode [ 224.479790][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.490094][ T1533] bridge_slave_0: left allmulticast mode [ 224.496115][ T1533] bridge_slave_0: left promiscuous mode [ 224.496193][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.512600][ T1533] bridge_slave_1: left allmulticast mode [ 224.512619][ T1533] bridge_slave_1: left promiscuous mode [ 224.512687][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.536152][ T1533] bridge_slave_0: left allmulticast mode [ 224.536174][ T1533] bridge_slave_0: left promiscuous mode [ 224.536245][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.624222][ T1533] team0: Port device xfrm0 removed [ 224.642444][ T1533] bond0 (unregistering): (slave geneve2): Releasing active interface [ 224.663870][ T1533] bond0 (unregistering): Released all slaves [ 224.704844][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.714084][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.726945][ T1533] bond0 (unregistering): Released all slaves [ 224.750450][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.759728][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.769497][ T1533] bond0 (unregistering): Released all slaves [ 224.776780][ T12] tipc: Resetting bearer [ 224.783127][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 224.820122][ T1533] tipc: Disabling bearer [ 224.827117][ T1533] tipc: Left network mode [ 224.837952][ T1533] IPVS: stopping master sync thread 6020 ... [ 224.995364][ T1533] hsr_slave_0: left promiscuous mode [ 225.000951][ T1533] hsr_slave_1: left promiscuous mode [ 225.011742][ T1533] hsr_slave_0: left promiscuous mode [ 225.017416][ T1533] hsr_slave_1: left promiscuous mode [ 225.017669][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.017683][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.031538][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.031551][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.056384][ T1533] hsr_slave_0: left promiscuous mode [ 225.061863][ T1533] hsr_slave_1: left promiscuous mode [ 225.069082][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.069103][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.069323][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.069333][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.107093][ T1533] veth1_macvtap: left promiscuous mode [ 225.112594][ T1533] veth0_macvtap: left promiscuous mode [ 225.118619][ T1533] veth1_vlan: left promiscuous mode [ 225.118644][ T1533] veth0_vlan: left promiscuous mode [ 225.129461][ T1533] veth1_macvtap: left promiscuous mode [ 225.135084][ T1533] veth0_macvtap: left promiscuous mode [ 225.140594][ T1533] veth0_vlan: left promiscuous mode [ 225.147772][ T1533] veth1_macvtap: left promiscuous mode [ 225.147799][ T1533] veth0_macvtap: left promiscuous mode [ 225.147835][ T1533] veth1_vlan: left promiscuous mode [ 225.147860][ T1533] veth0_vlan: left promiscuous mode [ 225.183654][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 225.183673][ T31] audit: type=1400 audit(1788715480.998:570): avc: denied { write } for pid=7926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.270992][ T31] audit: type=1400 audit(1788715481.088:571): avc: denied { write } for pid=7937 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.430050][ T1533] team0 (unregistering): Port device team_slave_1 removed [ 225.443385][ T1533] team0 (unregistering): Port device team_slave_0 removed [ 225.503963][ T1533] team0 (unregistering): Port device team_slave_1 removed [ 225.513139][ T1533] team0 (unregistering): Port device team_slave_0 removed [ 225.542476][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 225.776859][ T1533] IPVS: stop unused estimator thread 0... [ 225.797370][ T31] audit: type=1400 audit(1788715481.618:572): avc: denied { write } for pid=7940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.882947][ T31] audit: type=1400 audit(1788715481.698:573): avc: denied { write } for pid=7951 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.945864][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 226.048704][ T31] audit: type=1400 audit(1788715481.868:574): avc: denied { write } for pid=7954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.099204][ T31] audit: type=1400 audit(1788715481.918:575): avc: denied { write } for pid=7965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.141279][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 226.257695][ T31] audit: type=1400 audit(1788715482.078:576): avc: denied { write } for pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.309215][ T31] audit: type=1400 audit(1788715482.128:577): avc: denied { write } for pid=7980 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.349000][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 226.450589][ T31] audit: type=1400 audit(1788715482.268:578): avc: denied { write } for pid=7983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.501817][ T31] audit: type=1400 audit(1788715482.318:579): avc: denied { write } for pid=7994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.541953][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 226.707875][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 226.858787][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 227.032926][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 227.187762][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 227.337948][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 227.490258][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 227.640357][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 227.799584][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 227.965755][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 228.114132][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20