last executing test programs: 1m29.435317485s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r2 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x80) write$P9_RREADLINK(r0, &(0x7f0000000040)={0xf, 0x17, 0x2, {0x6, './proc'}}, 0xf) write(r0, &(0x7f0000000000)='27', 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) 1m28.989222134s ago: executing program 1 (id=11): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151f8218e3c73697e40800480209004000000000000000ed47b735ce689cbd", 0x0, 0x7ab8e724, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) mkdir(&(0x7f0000000040)='\x00', 0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r3, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) read$qrtrtun(r7, &(0x7f0000000500)=""/106, 0x6a) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x2}]}) openat(0xffffffffffffffff, 0x0, 0x0, 0x3c) close_range(r8, 0xffffffffffffffff, 0x0) 1m13.831493887s ago: executing program 32 (id=11): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151f8218e3c73697e40800480209004000000000000000ed47b735ce689cbd", 0x0, 0x7ab8e724, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) mkdir(&(0x7f0000000040)='\x00', 0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r3, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) read$qrtrtun(r7, &(0x7f0000000500)=""/106, 0x6a) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x2}]}) openat(0xffffffffffffffff, 0x0, 0x0, 0x3c) close_range(r8, 0xffffffffffffffff, 0x0) 6.855145562s ago: executing program 3 (id=238): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000df2502100000fc00fe070015000006001500060000000c0016800500040002000000"], 0x30}}, 0x40044) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 5.60910256s ago: executing program 4 (id=248): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x1, &(0x7f0000002180)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 5.356027397s ago: executing program 4 (id=250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x2) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x840) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, 0x0, 0xc040) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) bind$rds(r2, 0x0, 0x0) 5.020565946s ago: executing program 4 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) 5.006361066s ago: executing program 3 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xca}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.92512091s ago: executing program 4 (id=256): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 4.825804962s ago: executing program 4 (id=257): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8) write$FUSE_STATFS(r2, 0x0, 0x0) 4.821376008s ago: executing program 3 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x4126, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xc8, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 4.339811355s ago: executing program 3 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) write$rfkill(r1, 0x0, 0x0) 3.978892662s ago: executing program 3 (id=264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[], 0x8) 3.544469366s ago: executing program 2 (id=274): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10, 0x1000000}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x97, 0xfd, 0x8, 0xfb, 0x5, 0x2, 0x0, 0x8, 0x5, 0x1, 0xd, 0xfd, 0x0, 0xac}, 0xe) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x34}}, 0x0) pread64(r3, &(0x7f0000000240)=""/173, 0xad, 0xb0) syz_ublk_setup_io_uring(0x1e, &(0x7f00000000c0)={0x0, 0x9a7a, 0x200, 0x2000002, 0x158, 0x0, r3}, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x8001, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0xe, 0xa, 0x5, 0x0, 0x2, 0xf0, 0x1, 0x0, 0x80, 0x4, 0x6, 0xc6, 0x0, 0x1, 0x3, 0x5, 0x3, 0x7, 0x8, '\x00', 0x9, 0x4}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000480)={{0xffff1000, 0xeeee0000, 0xe, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x6000, 0xd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x7}, {0x1000, 0x3000, 0xa, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x94, 0xff, 0x0, 0x8, 0x8, 0x6, 0xfc}, {0x80a0000, 0xffff1000, 0x9, 0x55, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0x60000, 0x3000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x9000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, [0x8, 0x0, 0x1, 0x40]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x64, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48}, 0x4800) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.223796589s ago: executing program 5 (id=277): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000010000000070000000000000000000000000000000000000a00875ffe3a160941a9287291d35fa7ef3cdc780b852c148035154c70ab1db02670ae601788d9a1dff425b68ffb9a58ddf707b58bc6b1f003a6f5dd086fb231e7f89c44cc0e3da29cceaf8156cde7aed19124d77071e205838b8182dd129a0c6d63aacbd586131985fc50edd62c2358df1ced39663738ce75f99942f810e043a6474b0bf17dd5a8592bea52b827699c6188e28ed3eadab1d63d940411dd5f60a7bfe9c077c011d230cb1a4286c3c0699488997e401525d77ba49846ff6c2ce7815294a9fcc8f379c1766c89dd3fa61618ff38b0"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001c00010028bd7000fedbdf2502000000", @ANYRES32=r2, @ANYBLOB="3f0022091844d68264480e97576b57adcc847829ea000000000011b0fde3fadc8b547ecc00d28b563b6ed8ae110cca1e21"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) set_mempolicy(0x2002, 0x0, 0x4004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b1a, 0x0) ioctl(r8, 0x8b1b, &(0x7f0000000040)) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80064d12, &(0x7f0000000000)) r9 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) setns(0xc9, 0x0) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)) readv(r9, &(0x7f0000001980)=[{&(0x7f0000000040)=""/15, 0x20000}, {0x0, 0x32}], 0x1000000000000100) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x20000010, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @local}, 0x14) 3.069941869s ago: executing program 0 (id=278): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.017369604s ago: executing program 3 (id=279): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) socket(0x8, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040), 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.924826952s ago: executing program 5 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xca}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.087092935s ago: executing program 5 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0x61, 0x8, 0x1, 0x20}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.022314117s ago: executing program 0 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4004) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="6df51ef8b19ee2906eb737e6884a7ef4585b2be0f90d55f55868d4a2db2a639800f6987898e4b2e433a92cefd71e1baad5aec09237b75fd21d84e6d8fd7860e03de2934cb3416ff90e39e5204aa397604ac0254d5f072dd5d37bfaf72b93b3a3466c67592e06596cfe49ccd4aa9cb25510af8a16d38cc4601707f631860b14e4a2c650e41c2522b795eaf9cf5f88403f066b5e18c6b5bc8357b0b96989c442e0692f220bd97139c0ee276e6a2c6fad5b2c618f5f8bf7215c591f85877a054ce3baaeb90d6b2a83b470f172463a07d092a64e8b9be8d71cb38db00d9643a9ff72e6fcf60612d31104fd383dfa755fc78a0b37f6", 0xf3) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) 1.9685438s ago: executing program 2 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x5c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x3f, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x0, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x8, 0xf2}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="180800001800000000000000010000a634fa9c48019f3245e00166eb1400181100007f93d65b0a7b3026e334cf35b2f045d05982880e934b29d7e6c56e6241b029e3f59a83514699673a591a3e69ce0ba343013d132a09b4c7b3a62cd682f9dd53f2bc", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x80140, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='0', 0x1) add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000000)='./file0\x00', 0x102) 1.731668683s ago: executing program 0 (id=284): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) clock_gettime(0x4, 0x0) io_getevents(0x0, 0x5, 0x4, &(0x7f0000000940)=[{}, {}, {}, {}], &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) 1.72134478s ago: executing program 5 (id=285): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1.444240283s ago: executing program 4 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x310) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x410) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000090020000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x800, 0x5, 0x6, 0x401, 0x101, 0xffffffffffffff01}, {0x8, 0x7fffffff, 0x1, 0x4, 0x9, 0x3}], ['\x00']}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r5, 0x731, 0x70bd2b, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x20000014) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) unshare(0x60040000) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000480)={0x2, @pix={0x4, 0x8, 0x30364d54, 0x8, 0x8, 0x0, 0xf9b56075d2211bd5, 0x4, 0x1, 0x2, 0x0, 0x7}}) 727.913205ms ago: executing program 0 (id=287): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 675.997544ms ago: executing program 2 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='1\n', 0x2) 588.127107ms ago: executing program 0 (id=289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, 0x0, 0x0, 0xfb2200) 421.593955ms ago: executing program 0 (id=290): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x20000400) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x20008024) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 337.386617ms ago: executing program 2 (id=291): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) 212.185257ms ago: executing program 5 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='1:1', 0x3) 208.619073ms ago: executing program 2 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)=@random={'security.', '\\\\\x00'}, 0x0, 0x0, 0x0) 86.329801ms ago: executing program 5 (id=294): syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @rand_addr=0x64010102}, '\x00\x00\x00\x00'}}}}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffe, 0x2, 0x9, 0x0, 0x2, 0x10, 0x6, 0xb359, 0x5, 0x6, 0x800000000006, 0x47244453, 0x8005, 0x8, 0xed3, 0x90000000bdd], 0x60000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xd7) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008") 0s ago: executing program 2 (id=295): syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) getpgrp(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x80102) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) kernel console output (not intermixed with test programs): O base 0x300 [ 81.694522][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.694698][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.694840][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.694989][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.756442][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.763819][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.766218][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.766374][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.766514][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.766691][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.766829][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.770760][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.770922][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.777946][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.783838][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.783999][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.784837][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.785001][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.802165][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.802363][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.802506][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.802649][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.802797][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.802936][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.803074][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.803211][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.803351][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.803489][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.814347][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.814538][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.814707][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.814875][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.843245][ T10] playstation 0003:054C:09CC.0001: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 81.871562][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.908232][ T5854] Cannot find set identified by id 0 to match [ 81.914669][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.953595][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.953752][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.953873][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.968937][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.969097][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.985135][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.985283][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.985409][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.985532][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 81.985635][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.014418][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.051607][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.100751][ T10] playstation 0003:054C:09CC.0001: Invalid reportID received, expected 18 got 7 [ 82.100800][ T10] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -22 [ 82.100843][ T10] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 82.100862][ T10] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 82.149876][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.183019][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.183175][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.183264][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.183372][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.183454][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.183537][ T5843] comedi comedi0: No hardware detected at I/O base 0x300 [ 82.200711][ T10] playstation 0003:054C:09CC.0001: probe with driver playstation failed with error -22 [ 82.289653][ T10] usb 3-1: USB disconnect, device number 2 [ 82.444434][ T5855] fido_id[5855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 83.044727][ T5862] comedi comedi1: dt2814: I/O base address not correctly aligned [ 83.131760][ T5790] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.302255][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 83.311103][ T5790] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.328506][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.328648][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.328966][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.378422][ T5790] usb 4-1: config 0 descriptor?? [ 83.412633][ T5790] hub 4-1:0.0: USB hub found [ 83.613468][ T5790] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 84.184232][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 84.184249][ T31] audit: type=1400 audit(1790983470.268:216): avc: denied { create } for pid=5872 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.223781][ T5875] Cannot find set identified by id 0 to match [ 84.568029][ T31] audit: type=1400 audit(1790983470.658:217): avc: denied { read } for pid=5870 comm="syz.4.22" name="video7" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.589437][ T5859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.635968][ T31] audit: type=1400 audit(1790983470.708:218): avc: denied { open } for pid=5870 comm="syz.4.22" path="/dev/video7" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.680960][ T31] audit: type=1400 audit(1790983470.768:219): avc: denied { ioctl } for pid=5858 comm="syz.3.18" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.689196][ T31] audit: type=1400 audit(1790983470.778:220): avc: denied { ioctl } for pid=5870 comm="syz.4.22" path="/dev/video7" dev="devtmpfs" ino=945 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.701082][ T31] audit: type=1400 audit(1790983470.778:221): avc: denied { write } for pid=5879 comm="syz.2.24" name="video2" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.720696][ T31] audit: type=1326 audit(1790983470.808:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe33899e159 code=0x0 [ 84.804823][ T100] netdevsim netdevsim30 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.841753][ T5790] usbhid 4-1:0.0: can't add hid device: -71 [ 84.841847][ T5790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 84.884105][ T5790] usb 4-1: USB disconnect, device number 2 [ 84.956307][ T5876] netdevsim netdevsim30 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.996239][ T5886] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 85.053399][ T31] audit: type=1400 audit(1790983471.148:223): avc: denied { wake_alarm } for pid=5881 comm="syz.2.25" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.118229][ T31] audit: type=1400 audit(1790983471.208:224): avc: denied { create } for pid=5883 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.273833][ T31] audit: type=1400 audit(1790983471.358:225): avc: denied { allowed } for pid=5883 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.413290][ T5713] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.563779][ T5903] FAULT_INJECTION: forcing a failure. [ 86.563779][ T5903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.563801][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full) [ 86.563814][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.563821][ T5903] Call Trace: [ 86.563825][ T5903] [ 86.563830][ T5903] dump_stack_lvl+0x100/0x190 [ 86.563851][ T5903] should_fail_ex.cold+0x5/0xa [ 86.563869][ T5903] _copy_from_user+0x2e/0xd0 [ 86.563883][ T5903] memdup_user+0x6b/0xe0 [ 86.563896][ T5903] strndup_user+0x78/0xe0 [ 86.563908][ T5903] __x64_sys_mount+0x136/0x310 [ 86.563922][ T5903] ? __pfx___x64_sys_mount+0x10/0x10 [ 86.563937][ T5903] do_syscall_64+0x123/0x790 [ 86.563951][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.563963][ T5903] RIP: 0033:0x7f29cbd9e159 [ 86.563973][ T5903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.563983][ T5903] RSP: 002b:00007f29ccb97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.563995][ T5903] RAX: ffffffffffffffda RBX: 00007f29cc025fa0 RCX: 00007f29cbd9e159 [ 86.564002][ T5903] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 86.564009][ T5903] RBP: 00007f29ccb97090 R08: 0000200000000140 R09: 0000000000000000 [ 86.564016][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.564022][ T5903] R13: 00007f29cc026038 R14: 00007f29cc025fa0 R15: 00007ffd50c32bf8 [ 86.564037][ T5903] [ 87.345239][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 87.347403][ T5713] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.349679][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.349708][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.349742][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.363136][ T5713] usb 4-1: config 0 descriptor?? [ 87.378205][ T5713] hub 4-1:0.0: USB hub found [ 87.595336][ T5713] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 88.033509][ T5907] vivid-000: disconnect [ 88.037764][ T5907] FAULT_INJECTION: forcing a failure. [ 88.037764][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 88.037793][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.2.31 Not tainted syzkaller #0 PREEMPT(full) [ 88.037815][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.037826][ T5907] Call Trace: [ 88.037833][ T5907] [ 88.037841][ T5907] dump_stack_lvl+0x100/0x190 [ 88.037874][ T5907] should_fail_ex.cold+0x5/0xa [ 88.037901][ T5907] should_failslab+0xc2/0x120 [ 88.037929][ T5907] __kmalloc_noprof+0xfc/0x840 [ 88.037952][ T5907] ? tomoyo_encode2+0xfb/0x3c0 [ 88.037983][ T5907] tomoyo_encode2+0xfb/0x3c0 [ 88.038011][ T5907] tomoyo_encode+0x29/0x50 [ 88.038035][ T5907] tomoyo_realpath_from_path+0x18c/0x690 [ 88.038068][ T5907] tomoyo_path_number_perm+0x23c/0x580 [ 88.038090][ T5907] ? tomoyo_path_number_perm+0x22e/0x580 [ 88.038114][ T5907] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.038148][ T5907] ? __lock_acquire+0x5c0/0x1f40 [ 88.038184][ T5907] ? __fget_files+0x34/0x3d0 [ 88.038211][ T5907] ? find_held_lock+0x2b/0x80 [ 88.038237][ T5907] ? hook_file_ioctl_common+0x140/0x440 [ 88.038272][ T5907] ? __fget_files+0x21f/0x3d0 [ 88.038301][ T5907] security_file_ioctl+0xd3/0x230 [ 88.038327][ T5907] __x64_sys_ioctl+0xb7/0x210 [ 88.038366][ T5907] do_syscall_64+0x123/0x790 [ 88.038390][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.038409][ T5907] RIP: 0033:0x7f60ef39e159 [ 88.038426][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.038443][ T5907] RSP: 002b:00007f60ed5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.038462][ T5907] RAX: ffffffffffffffda RBX: 00007f60ef625fa0 RCX: 00007f60ef39e159 [ 88.038475][ T5907] RDX: 0000000000000000 RSI: 00000000c0185879 RDI: 0000000000000003 [ 88.038486][ T5907] RBP: 00007f60ed5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.038498][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.038509][ T5907] R13: 00007f60ef626038 R14: 00007f60ef625fa0 R15: 00007fffb93f5068 [ 88.038537][ T5907] [ 88.038553][ T5907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.038714][ T5906] vivid-000: reconnect [ 88.221871][ T5909] can0: slcan on ptm0. [ 88.238853][ T5895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.433518][ T5713] usbhid 4-1:0.0: can't add hid device: -71 [ 88.433611][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 88.546904][ T5713] usb 4-1: USB disconnect, device number 3 [ 88.556208][ T5908] can0 (unregistered): slcan off ptm0. [ 88.972164][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.132697][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 89.134157][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.134182][ T10] usb 1-1: config 0 has no interface number 0 [ 89.137238][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.137261][ T10] usb 1-1: Product: syz [ 89.137274][ T10] usb 1-1: Manufacturer: syz [ 89.137288][ T10] usb 1-1: SerialNumber: syz [ 89.209607][ T10] usb 1-1: config 0 descriptor?? [ 89.435603][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 89.468552][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.468898][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 89.468948][ T10] usb 1-1: media controller created [ 89.511685][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.632733][ T5738] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.636416][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 89.636433][ T31] audit: type=1400 audit(1790983475.728:235): avc: denied { append } for pid=5920 comm="syz.0.33" name="i2c-1" dev="devtmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.710073][ T31] audit: type=1400 audit(1790983475.798:236): avc: denied { create } for pid=5943 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.722146][ T31] audit: type=1400 audit(1790983475.808:237): avc: denied { ioctl } for pid=5943 comm="syz.3.36" path="socket:[9487]" dev="sockfs" ino=9487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.722199][ T31] audit: type=1400 audit(1790983475.808:238): avc: denied { bind } for pid=5943 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.722858][ T31] audit: type=1400 audit(1790983475.818:239): avc: denied { setopt } for pid=5943 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.731727][ T31] audit: type=1400 audit(1790983475.818:240): avc: denied { write } for pid=5943 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.735150][ T5713] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 89.781212][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 89.805988][ T5738] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.806034][ T5738] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 89.810233][ T5738] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 89.810260][ T5738] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 89.810277][ T5738] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 89.810298][ T5738] usb 3-1: config 13 has no interface number 0 [ 89.810334][ T5738] usb 3-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.810358][ T5738] usb 3-1: config 13 interface 50 has no altsetting 0 [ 89.814005][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.814029][ T5738] usb 3-1: Product: syz [ 89.814043][ T5738] usb 3-1: Manufacturer: syz [ 89.814058][ T5738] usb 3-1: SerialNumber: syz [ 89.865906][ T5922] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 89.872663][ T5713] usb 5-1: device descriptor read/64, error -71 [ 89.976982][ T10] usb 1-1: USB disconnect, device number 3 [ 90.006166][ T31] audit: type=1400 audit(1790983476.098:241): avc: denied { write } for pid=5933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.114904][ T5713] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 90.237148][ T31] audit: type=1400 audit(1790983476.308:242): avc: denied { create } for pid=5934 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.263310][ T31] audit: type=1400 audit(1790983476.328:243): avc: denied { create } for pid=5934 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.292732][ T31] audit: type=1400 audit(1790983476.378:244): avc: denied { create } for pid=5934 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.451620][ T5713] usb 5-1: device descriptor read/64, error -71 [ 90.552394][ T5713] usb usb5-port1: attempt power cycle [ 91.412099][ T5713] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 91.433020][ T5713] usb 5-1: device descriptor read/8, error -71 [ 92.042726][ T5713] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 92.082992][ T5713] usb 5-1: device descriptor read/8, error -71 [ 92.192344][ T5713] usb usb5-port1: unable to enumerate USB device [ 92.259421][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.415022][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 92.419135][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.419180][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.419202][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.419226][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.419265][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.444598][ T5738] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 92.447181][ T38] usb 3-1: Failed to submit usb control message: -71 [ 92.449329][ T38] usb 3-1: unable to send the bmi data to the device: -71 [ 92.449349][ T38] usb 3-1: unable to get target info from device [ 92.449363][ T38] usb 3-1: could not get target info (-71) [ 92.449518][ T38] usb 3-1: could not probe fw (-71) [ 92.458127][ T5738] usb 3-1: USB disconnect, device number 3 [ 92.661910][ T5968] Bluetooth: MGMT ver 1.23 [ 93.313755][ T10] gud 4-1:1.0: probe with driver gud failed with error -5 [ 93.538217][ T10] usb 4-1: USB disconnect, device number 4 [ 93.658161][ T5977] Cannot find set identified by id 0 to match [ 93.895678][ T5731] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 94.025103][ T5731] usb 1-1: device descriptor read/64, error -71 [ 94.264142][ T5731] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 94.362522][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.365588][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.366425][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.367966][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.368526][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.392337][ T5731] usb 1-1: device descriptor read/64, error -71 [ 94.502354][ T5731] usb usb1-port1: attempt power cycle [ 95.042215][ T5731] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 95.080258][ T5731] usb 1-1: device descriptor read/8, error -71 [ 95.137333][ T5993] vlan2: entered promiscuous mode [ 95.138439][ T5993] bridge0: entered promiscuous mode [ 95.223278][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 95.223295][ T31] audit: type=1400 audit(1790983481.318:257): avc: denied { write } for pid=6001 comm="syz.3.49" name="configs" dev="configfs" ino=8588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.256316][ T31] audit: type=1400 audit(1790983481.328:258): avc: denied { checkpoint_restore } for pid=6001 comm="syz.3.49" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.322116][ T5731] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 95.343149][ T5731] usb 1-1: device descriptor read/8, error -71 [ 95.362125][ T2266] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.452646][ T5731] usb usb1-port1: unable to enumerate USB device [ 95.532689][ T2266] usb 3-1: Using ep0 maxpacket: 32 [ 95.533342][ T2266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.534983][ T2266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.535013][ T2266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.535047][ T2266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.642098][ T2266] usb 3-1: config 0 descriptor?? [ 96.041081][ T2266] hub 3-1:0.0: USB hub found [ 96.200217][ T2266] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 96.422335][ T5600] Bluetooth: hci5: command tx timeout [ 96.485253][ T31] audit: type=1400 audit(1790983482.578:259): avc: denied { create } for pid=6010 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.535869][ T31] audit: type=1400 audit(1790983482.628:260): avc: denied { bind } for pid=6013 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.562672][ T31] audit: type=1400 audit(1790983482.658:261): avc: denied { write } for pid=6013 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.594467][ T31] audit: type=1400 audit(1790983482.668:262): avc: denied { read } for pid=6013 comm="syz.4.52" path="socket:[9667]" dev="sockfs" ino=9667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.682966][ T5999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.720474][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.736911][ T31] audit: type=1326 audit(1790983482.828:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.2.48" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60ef39e159 code=0x0 [ 96.796276][ T2266] usbhid 3-1:0.0: can't add hid device: -71 [ 96.796373][ T2266] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 96.822957][ T2266] usb 3-1: USB disconnect, device number 4 [ 96.888746][ T31] audit: type=1400 audit(1790983482.978:264): avc: denied { read } for pid=6019 comm="syz.0.53" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.888795][ T31] audit: type=1400 audit(1790983482.978:265): avc: denied { open } for pid=6019 comm="syz.0.53" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.899309][ T31] audit: type=1400 audit(1790983482.988:266): avc: denied { ioctl } for pid=6019 comm="syz.0.53" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.922191][ T5731] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.013581][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.063143][ T5731] usb 5-1: device descriptor read/64, error -71 [ 97.404700][ T5731] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.552154][ T5731] usb 5-1: device descriptor read/64, error -71 [ 97.685529][ T5731] usb usb5-port1: attempt power cycle [ 98.486339][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.504110][ T5600] Bluetooth: hci5: command tx timeout [ 98.565822][ T6032] FAULT_INJECTION: forcing a failure. [ 98.565822][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 98.565847][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 98.565871][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.565884][ T6032] Call Trace: [ 98.565891][ T6032] [ 98.565898][ T6032] dump_stack_lvl+0x100/0x190 [ 98.565933][ T6032] should_fail_ex.cold+0x5/0xa [ 98.565957][ T6032] should_failslab+0xc2/0x120 [ 98.565986][ T6032] kmem_cache_alloc_noprof+0x92/0x6a0 [ 98.566013][ T6032] ? ceph_msg_new2+0x3e/0x4f0 [ 98.566055][ T6032] ceph_msg_new2+0x3e/0x4f0 [ 98.566088][ T6032] ceph_monc_init+0x686/0xcd0 [ 98.566121][ T6032] ceph_create_client+0x25e/0x370 [ 98.566146][ T6032] ceph_get_tree+0x1a4/0x1fd0 [ 98.566164][ T6032] ? bpf_lsm_capable+0x9/0x10 [ 98.566181][ T6032] ? security_capable+0x80/0x260 [ 98.566202][ T6032] vfs_get_tree+0x92/0x320 [ 98.566221][ T6032] vfs_cmd_create+0xd7/0x2a0 [ 98.566242][ T6032] __do_sys_fsconfig+0x55a/0xcb0 [ 98.566265][ T6032] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 98.566302][ T6032] do_syscall_64+0x123/0x790 [ 98.566325][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.566346][ T6032] RIP: 0033:0x7f60ef39e159 [ 98.566363][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.566380][ T6032] RSP: 002b:00007f60ed5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 98.566400][ T6032] RAX: ffffffffffffffda RBX: 00007f60ef625fa0 RCX: 00007f60ef39e159 [ 98.566411][ T6032] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 98.566420][ T6032] RBP: 00007f60ef43506b R08: 0000000000000000 R09: 0000000000000000 [ 98.566432][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.566442][ T6032] R13: 00007f60ef626038 R14: 00007f60ef625fa0 R15: 00007fffb93f5068 [ 98.566468][ T6032] [ 98.613867][ T5731] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.671308][ T5731] usb 5-1: device descriptor read/8, error -71 [ 98.919093][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.924494][ T5731] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.954896][ T5731] usb 5-1: device descriptor read/8, error -71 [ 99.034359][ T6037] could not allocate digest TFM handle crct10dif-arm64-neon [ 99.064056][ T5731] usb usb5-port1: unable to enumerate USB device [ 99.284359][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.454194][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 99.468085][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.468126][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 99.499707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.499727][ T9] usb 3-1: Product: syz [ 99.499742][ T9] usb 3-1: Manufacturer: syz [ 99.499757][ T9] usb 3-1: SerialNumber: syz [ 99.557123][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.558262][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 99.772898][ T12] bridge_slave_1: left allmulticast mode [ 99.772929][ T12] bridge_slave_1: left promiscuous mode [ 99.774436][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.882835][ T12] bridge_slave_0: left allmulticast mode [ 99.882854][ T12] bridge_slave_0: left promiscuous mode [ 99.883051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.300156][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 100.300174][ T31] audit: type=1400 audit(1790983486.388:283): avc: denied { write } for pid=6063 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.311140][ T6065] FAULT_INJECTION: forcing a failure. [ 100.311140][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.311171][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(full) [ 100.311195][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.311207][ T6065] Call Trace: [ 100.311214][ T6065] [ 100.311222][ T6065] dump_stack_lvl+0x100/0x190 [ 100.311259][ T6065] should_fail_ex.cold+0x5/0xa [ 100.311286][ T6065] _copy_from_iter+0x1f4/0x1690 [ 100.311316][ T6065] ? __pfx__copy_from_iter+0x10/0x10 [ 100.311337][ T6065] ? trace_kmalloc+0xeb/0x110 [ 100.311361][ T6065] ? __kasan_kmalloc+0xaa/0xb0 [ 100.311386][ T6065] ? __kmalloc_noprof+0x350/0x840 [ 100.311407][ T6065] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 100.311435][ T6065] kernfs_fop_write_iter+0x186/0x5f0 [ 100.311461][ T6065] vfs_write+0x6af/0x1050 [ 100.311484][ T6065] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 100.311508][ T6065] ? __pfx_vfs_write+0x10/0x10 [ 100.311528][ T6065] ? find_held_lock+0x2b/0x80 [ 100.311572][ T6065] ksys_write+0x12a/0x250 [ 100.311593][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 100.311623][ T6065] do_syscall_64+0x123/0x790 [ 100.311646][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.311665][ T6065] RIP: 0033:0x7f49dd39e159 [ 100.311681][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.311699][ T6065] RSP: 002b:00007f49de246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.311717][ T6065] RAX: ffffffffffffffda RBX: 00007f49dd625fa0 RCX: 00007f49dd39e159 [ 100.311730][ T6065] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 100.311742][ T6065] RBP: 00007f49de246090 R08: 0000000000000000 R09: 0000000000000000 [ 100.311753][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.311764][ T6065] R13: 00007f49dd626038 R14: 00007f49dd625fa0 R15: 00007ffd8d1ad408 [ 100.311791][ T6065] [ 100.537149][ T5731] usb 3-1: USB disconnect, device number 5 [ 100.572328][ T5600] Bluetooth: hci5: command tx timeout [ 101.101438][ T6074] blktrace: Concurrent blktraces are not allowed on loop8 [ 101.495059][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.547748][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.554204][ T12] bond0 (unregistering): Released all slaves [ 101.656713][ T31] audit: type=1400 audit(1790983487.748:284): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 101.659338][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.659421][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.659587][ T5987] bridge_slave_0: entered allmulticast mode [ 101.723276][ T5987] bridge_slave_0: entered promiscuous mode [ 101.736914][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.736961][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.737045][ T5987] bridge_slave_1: entered allmulticast mode [ 101.747459][ T5987] bridge_slave_1: entered promiscuous mode [ 101.779964][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.946402][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.965948][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.000224][ T6080] sctp: [Deprecated]: syz.4.64 (pid 6080) Use of int in maxseg socket option. [ 102.000224][ T6080] Use struct sctp_assoc_value instead [ 102.233319][ T5987] team0: Port device team_slave_0 added [ 102.234991][ T5987] team0: Port device team_slave_1 added [ 102.362281][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.362292][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.362313][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.371912][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.371918][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.371931][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.443664][ T5713] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.593000][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 102.594212][ T5713] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.597125][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.597151][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.597205][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.637219][ T5713] usb 5-1: config 0 descriptor?? [ 102.652731][ T5600] Bluetooth: hci5: command tx timeout [ 102.659452][ T5713] hub 5-1:0.0: USB hub found [ 102.751183][ T31] audit: type=1400 audit(1790983488.838:285): avc: denied { name_bind } for pid=6088 comm="syz.2.66" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 102.751360][ T31] audit: type=1400 audit(1790983488.838:286): avc: denied { node_bind } for pid=6088 comm="syz.2.66" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 102.857256][ T5713] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 102.892731][ T31] audit: type=1400 audit(1790983488.988:287): avc: denied { write } for pid=6095 comm="syz.3.67" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.178938][ T5987] hsr_slave_0: entered promiscuous mode [ 103.188659][ T5987] hsr_slave_1: entered promiscuous mode [ 103.197399][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 103.197414][ T5987] Cannot create hsr debugfs directory [ 103.285987][ T12] hsr_slave_0: left promiscuous mode [ 103.290983][ T12] hsr_slave_1: left promiscuous mode [ 103.310254][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.310318][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.321574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.321590][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.497564][ T31] audit: type=1400 audit(1790983489.588:288): avc: denied { write } for pid=6086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.750353][ T31] audit: type=1326 audit(1790983489.838:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.4.65" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49dd39e159 code=0x0 [ 104.212078][ T5713] usbhid 5-1:0.0: can't add hid device: -71 [ 104.212216][ T5713] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.236868][ T12] veth1_macvtap: left promiscuous mode [ 104.271691][ T12] veth0_macvtap: left promiscuous mode [ 104.296556][ T12] veth1_vlan: left promiscuous mode [ 104.296825][ T12] veth0_vlan: left promiscuous mode [ 104.363380][ T12] net_ratelimit: 64 callbacks suppressed [ 104.687278][ T6083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.993576][ T5713] usb 5-1: USB disconnect, device number 10 [ 105.145297][ T31] audit: type=1400 audit(1790983491.238:290): avc: denied { write } for pid=6114 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.266991][ T6120] netlink: 'syz.2.70': attribute type 23 has an invalid length. [ 105.267008][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 105.321935][ T6121] FAULT_INJECTION: forcing a failure. [ 105.321935][ T6121] name failslab, interval 1, probability 0, space 0, times 0 [ 105.321954][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 105.321968][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.321976][ T6121] Call Trace: [ 105.321981][ T6121] [ 105.321986][ T6121] dump_stack_lvl+0x100/0x190 [ 105.322009][ T6121] should_fail_ex.cold+0x5/0xa [ 105.322031][ T6121] should_failslab+0xc2/0x120 [ 105.322061][ T6121] __kmalloc_cache_noprof+0x91/0x6d0 [ 105.322080][ T6121] ? bpf_int_jit_compile+0x1304/0x1820 [ 105.322110][ T6121] bpf_int_jit_compile+0x1304/0x1820 [ 105.322144][ T6121] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 105.322188][ T6121] __bpf_prog_select_runtime+0x8c3/0xc60 [ 105.322211][ T6121] ? __asan_memcpy+0x3c/0x60 [ 105.322236][ T6121] bpf_prepare_filter+0xd32/0x11e0 [ 105.322257][ T6121] ? __pfx_seccomp_check_filter+0x10/0x10 [ 105.322291][ T6121] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 105.322314][ T6121] ? __asan_memcpy+0x3c/0x60 [ 105.322339][ T6121] ? kmemdup_noprof+0x49/0x60 [ 105.322365][ T6121] bpf_prog_create_from_user+0x1df/0x2e0 [ 105.322387][ T6121] ? __pfx_seccomp_check_filter+0x10/0x10 [ 105.322419][ T6121] do_seccomp+0x870/0x27c0 [ 105.322456][ T6121] ? __pfx_do_seccomp+0x10/0x10 [ 105.322486][ T6121] ? __sys_socket+0xac/0x260 [ 105.322509][ T6121] ? xfd_validate_state+0x129/0x190 [ 105.322533][ T6121] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 105.322560][ T6121] ? syscall_user_dispatch+0x76/0x130 [ 105.322593][ T6121] do_syscall_64+0x123/0x790 [ 105.322618][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.322640][ T6121] RIP: 0033:0x7f60ef39e159 [ 105.322658][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.322677][ T6121] RSP: 002b:00007f60ed5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 105.322698][ T6121] RAX: ffffffffffffffda RBX: 00007f60ef626180 RCX: 00007f60ef39e159 [ 105.322713][ T6121] RDX: 0000200000000240 RSI: 0000000000000007 RDI: 0000000000000001 [ 105.322726][ T6121] RBP: 00007f60ef43506b R08: 0000000000000000 R09: 0000000000000000 [ 105.322739][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.322751][ T6121] R13: 00007f60ef626218 R14: 00007f60ef626180 R15: 00007fffb93f5068 [ 105.322780][ T6121] [ 105.330170][ T31] audit: type=1326 audit(1790983491.418:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef39e159 code=0x7ffc0000 [ 105.330226][ T31] audit: type=1326 audit(1790983491.418:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef39e159 code=0x7ffc0000 [ 105.330266][ T31] audit: type=1326 audit(1790983491.418:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.331342][ T31] audit: type=1326 audit(1790983491.418:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.332524][ T31] audit: type=1326 audit(1790983491.428:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.333732][ T31] audit: type=1326 audit(1790983491.428:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.335334][ T31] audit: type=1326 audit(1790983491.428:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.336984][ T31] audit: type=1326 audit(1790983491.428:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.338182][ T31] audit: type=1326 audit(1790983491.428:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.344615][ T31] audit: type=1326 audit(1790983491.428:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.70" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60ef35e98e code=0x7ffc0000 [ 105.479478][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.633087][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 105.647514][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.653839][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.653859][ T9] usb 4-1: Product: syz [ 105.653875][ T9] usb 4-1: Manufacturer: syz [ 105.741761][ T9] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 105.905936][ T9] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 105.907298][ T9] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 105.907353][ T9] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 105.907909][ T9] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 105.967399][ T9] usb 4-1: USB disconnect, device number 5 [ 106.230835][ T12] team0 (unregistering): Port device team_slave_1 removed [ 106.249620][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.392833][ T5699] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.678208][ T5699] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 106.717578][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.773572][ T5699] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.773593][ T5699] usb 5-1: config 0 has no interface number 0 [ 106.809221][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.809242][ T5699] usb 5-1: Product: syz [ 106.809257][ T5699] usb 5-1: Manufacturer: syz [ 106.809273][ T5699] usb 5-1: SerialNumber: syz [ 108.050948][ T5699] usb 5-1: config 0 descriptor?? [ 108.337089][ T5699] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 108.346986][ T5699] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.347515][ T5699] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 108.347565][ T5699] usb 5-1: media controller created [ 108.398488][ T6133] FAULT_INJECTION: forcing a failure. [ 108.398488][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 108.398515][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT(full) [ 108.398538][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.398551][ T6133] Call Trace: [ 108.398558][ T6133] [ 108.398567][ T6133] dump_stack_lvl+0x100/0x190 [ 108.398599][ T6133] should_fail_ex.cold+0x5/0xa [ 108.398628][ T6133] should_failslab+0xc2/0x120 [ 108.398655][ T6133] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 108.398680][ T6133] ? __alloc_skb+0x5b7/0x710 [ 108.398705][ T6133] ? __alloc_skb+0x140/0x710 [ 108.398734][ T6133] __alloc_skb+0x140/0x710 [ 108.398757][ T6133] ? __alloc_skb+0x5b7/0x710 [ 108.398781][ T6133] ? __pfx___alloc_skb+0x10/0x10 [ 108.398822][ T6133] netlink_alloc_large_skb+0x69/0x150 [ 108.398850][ T6133] netlink_sendmsg+0x680/0xda0 [ 108.398878][ T6133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.398905][ T6133] ? selinux_socket_sendmsg+0x198/0x2f0 [ 108.398936][ T6133] ____sys_sendmsg+0xa4d/0xbe0 [ 108.398956][ T6133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.398983][ T6133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.399011][ T6133] ? lock_acquire+0x1d1/0x380 [ 108.399034][ T6133] ? get_pid_task+0x2a/0x250 [ 108.399062][ T6133] ___sys_sendmsg+0x190/0x1e0 [ 108.399086][ T6133] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.399108][ T6133] ? get_pid_task+0x106/0x250 [ 108.399145][ T6133] ? find_held_lock+0x2b/0x80 [ 108.399191][ T6133] __sys_sendmsg+0x160/0x210 [ 108.399219][ T6133] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.399261][ T6133] do_syscall_64+0x123/0x790 [ 108.399286][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.399307][ T6133] RIP: 0033:0x7f60ef39e159 [ 108.399324][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.399343][ T6133] RSP: 002b:00007f60ed5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.399362][ T6133] RAX: ffffffffffffffda RBX: 00007f60ef625fa0 RCX: 00007f60ef39e159 [ 108.399376][ T6133] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 108.399389][ T6133] RBP: 00007f60ed5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.399401][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.399413][ T6133] R13: 00007f60ef626038 R14: 00007f60ef625fa0 R15: 00007fffb93f5068 [ 108.399441][ T6133] [ 108.689938][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.907451][ T6136] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 109.054011][ T6139] FAULT_INJECTION: forcing a failure. [ 109.054011][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 109.054042][ T6139] CPU: 0 UID: 0 PID: 6139 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 109.054070][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.054082][ T6139] Call Trace: [ 109.054089][ T6139] [ 109.054098][ T6139] dump_stack_lvl+0x100/0x190 [ 109.054136][ T6139] should_fail_ex.cold+0x5/0xa [ 109.054164][ T6139] should_failslab+0xc2/0x120 [ 109.054193][ T6139] kmem_cache_alloc_noprof+0x92/0x6a0 [ 109.054220][ T6139] ? ptlock_alloc+0x1f/0x70 [ 109.054286][ T6139] ptlock_alloc+0x1f/0x70 [ 109.054315][ T6139] pte_alloc_one+0x82/0x3d0 [ 109.054350][ T6139] __pte_alloc+0x6d/0x380 [ 109.054375][ T6139] ? __pfx___pte_alloc+0x10/0x10 [ 109.054407][ T6139] do_anonymous_page+0x1307/0x2050 [ 109.054441][ T6139] ? find_held_lock+0x2b/0x80 [ 109.054478][ T6139] ? __pmd_alloc+0x3f6/0x950 [ 109.054504][ T6139] ? __pmd_alloc+0x3f6/0x950 [ 109.054532][ T6139] ? __pfx_do_anonymous_page+0x10/0x10 [ 109.054563][ T6139] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.054591][ T6139] ? _raw_spin_unlock+0x28/0x50 [ 109.054627][ T6139] ? __pmd_alloc+0x3fb/0x950 [ 109.054657][ T6139] __handle_mm_fault+0x1ff3/0x2f60 [ 109.054695][ T6139] ? __pfx___handle_mm_fault+0x10/0x10 [ 109.054729][ T6139] ? __pfx_mt_find+0x10/0x10 [ 109.054780][ T6139] handle_mm_fault+0x363/0xa20 [ 109.054822][ T6139] __get_user_pages+0x8ae/0x2c30 [ 109.054859][ T6139] ? __pfx___get_user_pages+0x10/0x10 [ 109.054886][ T6139] ? lock_acquire+0x1d1/0x380 [ 109.054908][ T6139] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 109.054947][ T6139] get_user_pages_remote+0x3d2/0xb10 [ 109.054982][ T6139] ? __pfx_get_user_pages_remote+0x10/0x10 [ 109.055023][ T6139] get_arg_page+0xf4/0x310 [ 109.055048][ T6139] ? __pfx_get_arg_page+0x10/0x10 [ 109.055071][ T6139] ? do_raw_spin_lock+0x128/0x260 [ 109.055099][ T6139] ? alloc_bprm+0x54e/0x9e0 [ 109.055123][ T6139] ? alloc_bprm+0x54e/0x9e0 [ 109.055150][ T6139] copy_string_kernel+0x17d/0x3f0 [ 109.055176][ T6139] ? alloc_bprm+0x596/0x9e0 [ 109.055204][ T6139] do_execveat_common.isra.0+0x2e6/0x580 [ 109.055238][ T6139] __x64_sys_execve+0x93/0xd0 [ 109.055278][ T6139] do_syscall_64+0x123/0x790 [ 109.055306][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.055332][ T6139] RIP: 0033:0x7fe33899e159 [ 109.055352][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.055374][ T6139] RSP: 002b:00007fe33983f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 109.055396][ T6139] RAX: ffffffffffffffda RBX: 00007fe338c25fa0 RCX: 00007fe33899e159 [ 109.055412][ T6139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 109.055426][ T6139] RBP: 00007fe338a3506b R08: 0000000000000000 R09: 0000000000000000 [ 109.055440][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.055454][ T6139] R13: 00007fe338c26038 R14: 00007fe338c25fa0 R15: 00007ffef69a13e8 [ 109.055485][ T6139] [ 109.086149][ T5609] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.287213][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 109.294262][ T5609] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 109.372294][ C0] net_ratelimit: 118 callbacks suppressed [ 109.376074][ T5699] usb 5-1: USB disconnect, device number 11 [ 109.389753][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.389773][ T5609] usb 3-1: Product: syz [ 109.389787][ T5609] usb 3-1: Manufacturer: syz [ 109.389801][ T5609] usb 3-1: SerialNumber: syz [ 109.456990][ T5609] usb 3-1: config 0 descriptor?? [ 109.473853][ T5609] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 109.555388][ T6146] FAULT_INJECTION: forcing a failure. [ 109.555388][ T6146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.555417][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.3.77 Not tainted syzkaller #0 PREEMPT(full) [ 109.555441][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.555454][ T6146] Call Trace: [ 109.555461][ T6146] [ 109.555469][ T6146] dump_stack_lvl+0x100/0x190 [ 109.555503][ T6146] should_fail_ex.cold+0x5/0xa [ 109.555530][ T6146] _copy_from_user+0x2e/0xd0 [ 109.555553][ T6146] ucma_resolve_ip+0x92/0x220 [ 109.555581][ T6146] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 109.555616][ T6146] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 109.555641][ T6146] ucma_write+0x1fb/0x330 [ 109.555674][ T6146] ? __pfx_ucma_write+0x10/0x10 [ 109.555696][ T6146] ? bpf_lsm_file_permission+0x9/0x10 [ 109.555724][ T6146] ? security_file_permission+0x76/0x210 [ 109.555751][ T6146] ? rw_verify_area+0xce/0x6d0 [ 109.555773][ T6146] ? __pfx_ucma_write+0x10/0x10 [ 109.555795][ T6146] vfs_writev+0x5ed/0xdd0 [ 109.555823][ T6146] ? __pfx_vfs_writev+0x10/0x10 [ 109.555848][ T6146] ? lock_acquire+0x1d1/0x380 [ 109.555868][ T6146] ? __fget_files+0x34/0x3d0 [ 109.555902][ T6146] ? __fget_files+0x21f/0x3d0 [ 109.555932][ T6146] ? do_writev+0x28a/0x340 [ 109.555949][ T6146] do_writev+0x28a/0x340 [ 109.555970][ T6146] ? __pfx_do_writev+0x10/0x10 [ 109.555994][ T6146] do_syscall_64+0x123/0x790 [ 109.556018][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.556038][ T6146] RIP: 0033:0x7fe33899e159 [ 109.556056][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.556072][ T6146] RSP: 002b:00007fe33983f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 109.556091][ T6146] RAX: ffffffffffffffda RBX: 00007fe338c25fa0 RCX: 00007fe33899e159 [ 109.556103][ T6146] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 109.556114][ T6146] RBP: 00007fe33983f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.556125][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.556137][ T6146] R13: 00007fe338c26038 R14: 00007fe338c25fa0 R15: 00007ffef69a13e8 [ 109.556161][ T6146] [ 109.816723][ T6135] misc userio: Can't change port proto on an already running userio instance [ 109.859262][ T5609] gspca_topro: reg_w err -71 [ 109.882220][ T5609] gspca_topro: Sensor soi763a [ 109.948563][ T5609] usb 3-1: USB disconnect, device number 6 [ 110.201226][ T6152] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.385540][ T5987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.428381][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.428866][ T5987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.467893][ T31] kauditd_printk_skb: 212 callbacks suppressed [ 110.467910][ T31] audit: type=1400 audit(1790983496.558:513): avc: denied { map_create } for pid=6161 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.467952][ T31] audit: type=1400 audit(1790983496.558:514): avc: denied { map_read map_write } for pid=6161 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.470883][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.478331][ T5987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.503975][ T6162] netlink: 'syz.4.79': attribute type 39 has an invalid length. [ 110.550667][ T31] audit: type=1400 audit(1790983496.638:515): avc: denied { watch } for pid=6151 comm="syz.3.78" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 110.553099][ T31] audit: type=1400 audit(1790983496.648:516): avc: denied { watch_sb watch_reads } for pid=6151 comm="syz.3.78" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 110.583846][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.584623][ T5987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.646193][ T31] audit: type=1400 audit(1790983496.738:517): avc: denied { write } for pid=6163 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.654747][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.689298][ T31] audit: type=1400 audit(1790983496.768:518): avc: denied { getopt } for pid=6161 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.714323][ T31] audit: type=1400 audit(1790983496.808:519): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.809629][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 112.055013][ T31] audit: type=1400 audit(1790983497.568:520): avc: denied { create } for pid=6178 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.055065][ T31] audit: type=1400 audit(1790983497.598:521): avc: denied { write } for pid=6178 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.055096][ T31] audit: type=1400 audit(1790983497.598:522): avc: denied { nlmsg_write } for pid=6178 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.377636][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.423130][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.467409][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.508106][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.508200][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.530672][ T5810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.547918][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.548026][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.582375][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.583198][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.584636][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.584671][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.584721][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.641911][ T9] usb 3-1: config 0 descriptor?? [ 112.653758][ T9] hub 3-1:0.0: USB hub found [ 112.722706][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 112.739364][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.739405][ T5810] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=d1.a4 [ 112.740719][ T5810] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 112.740740][ T5810] usb 4-1: config 4 has no interface number 0 [ 112.740767][ T5810] usb 4-1: config 4 interface 109 has no altsetting 0 [ 112.789264][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.789286][ T5810] usb 4-1: Product: syz [ 112.789324][ T5810] usb 4-1: Manufacturer: syz [ 112.789341][ T5810] usb 4-1: SerialNumber: syz [ 112.901888][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 112.982100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.444029][ T6199] FAULT_INJECTION: forcing a failure. [ 113.444029][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 113.444219][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: syz.4.84 Not tainted syzkaller #0 PREEMPT(full) [ 113.444243][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.444256][ T6199] Call Trace: [ 113.444263][ T6199] [ 113.444274][ T6199] dump_stack_lvl+0x100/0x190 [ 113.444309][ T6199] should_fail_ex.cold+0x5/0xa [ 113.444338][ T6199] should_failslab+0xc2/0x120 [ 113.444366][ T6199] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 113.444391][ T6199] ? preempt_schedule_thunk+0x16/0x40 [ 113.444415][ T6199] ? __alloc_skb+0x140/0x710 [ 113.444446][ T6199] __alloc_skb+0x140/0x710 [ 113.444470][ T6199] ? __alloc_skb+0x5b7/0x710 [ 113.444494][ T6199] ? __pfx___alloc_skb+0x10/0x10 [ 113.444527][ T6199] alloc_skb_with_frags+0xdd/0x760 [ 113.444560][ T6199] ? sock_alloc_send_pskb+0x105/0x980 [ 113.444586][ T6199] sock_alloc_send_pskb+0x801/0x980 [ 113.444619][ T6199] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 113.444641][ T6199] ? preempt_schedule_thunk+0x16/0x40 [ 113.444667][ T6199] ? preempt_schedule_common+0x3c/0xb0 [ 113.444699][ T6199] ? preempt_schedule_thunk+0x16/0x40 [ 113.444730][ T6199] j1939_sk_sendmsg+0x6bc/0x1440 [ 113.444772][ T6199] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 113.444799][ T6199] ? security_socket_sendmsg+0x106/0x230 [ 113.444823][ T6199] ? security_socket_sendmsg+0x2e/0x230 [ 113.444849][ T6199] ____sys_sendmsg+0xa4d/0xbe0 [ 113.444868][ T6199] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 113.444905][ T6199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.444930][ T6199] ? __schedule+0x126b/0x6920 [ 113.444965][ T6199] ___sys_sendmsg+0x190/0x1e0 [ 113.444988][ T6199] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.445022][ T6199] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.445042][ T6199] ? irqentry_exit+0x24d/0xa10 [ 113.445075][ T6199] ? __sys_sendmmsg+0x1c7/0x440 [ 113.445107][ T6199] __sys_sendmmsg+0x20c/0x440 [ 113.445137][ T6199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.445172][ T6199] ? preempt_schedule_irq+0x79/0x90 [ 113.445215][ T6199] __x64_sys_sendmmsg+0x9c/0x100 [ 113.445244][ T6199] do_syscall_64+0x123/0x790 [ 113.445267][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.445289][ T6199] RIP: 0033:0x7f49dd39e159 [ 113.445307][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.445325][ T6199] RSP: 002b:00007f49de225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.445346][ T6199] RAX: ffffffffffffffda RBX: 00007f49dd626090 RCX: 00007f49dd39e159 [ 113.445359][ T6199] RDX: fffffffffffffd9e RSI: 000020000000a540 RDI: 0000000000000007 [ 113.445372][ T6199] RBP: 00007f49de225090 R08: 0000000000000000 R09: 0000000000000000 [ 113.445384][ T6199] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 113.445396][ T6199] R13: 00007f49dd626128 R14: 00007f49dd626090 R15: 00007ffd8d1ad408 [ 113.445425][ T6199] [ 113.672086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.792092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.952077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.307207][ T6186] FAULT_INJECTION: forcing a failure. [ 114.307207][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 114.307238][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(full) [ 114.307262][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.307275][ T6186] Call Trace: [ 114.307283][ T6186] [ 114.307291][ T6186] dump_stack_lvl+0x100/0x190 [ 114.307328][ T6186] should_fail_ex.cold+0x5/0xa [ 114.307371][ T6186] should_failslab+0xc2/0x120 [ 114.307401][ T6186] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.307426][ T6186] ? __pfx_map_id_range_down+0x10/0x10 [ 114.307451][ T6186] ? security_inode_alloc+0x3b/0x2c0 [ 114.307481][ T6186] security_inode_alloc+0x3b/0x2c0 [ 114.307507][ T6186] inode_init_always_gfp+0xc6f/0xfb0 [ 114.307541][ T6186] alloc_inode+0x8e/0x250 [ 114.307563][ T6186] new_inode+0x22/0x1c0 [ 114.307587][ T6186] shmem_get_inode+0x1e3/0xf70 [ 114.307617][ T6186] ? __pfx_shmem_get_inode+0x10/0x10 [ 114.307651][ T6186] shmem_mknod+0x217/0x480 [ 114.307674][ T6186] ? __pfx_may_create+0x10/0x10 [ 114.307704][ T6186] ? __pfx_shmem_mknod+0x10/0x10 [ 114.307730][ T6186] ? inode_permission+0x374/0x620 [ 114.307757][ T6186] shmem_mkdir+0x31/0x80 [ 114.307783][ T6186] vfs_mkdir+0x364/0x850 [ 114.307809][ T6186] filename_mkdirat+0x48b/0x5e0 [ 114.307839][ T6186] ? __pfx_filename_mkdirat+0x10/0x10 [ 114.307868][ T6186] ? strncpy_from_user+0x19d/0x2d0 [ 114.307898][ T6186] ? do_getname+0x191/0x390 [ 114.307921][ T6186] __x64_sys_mkdirat+0x89/0xc0 [ 114.307950][ T6186] do_syscall_64+0x123/0x790 [ 114.307976][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.307999][ T6186] RIP: 0033:0x7fe33899e159 [ 114.308016][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.308036][ T6186] RSP: 002b:00007fe33983f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 114.308057][ T6186] RAX: ffffffffffffffda RBX: 00007fe338c25fa0 RCX: 00007fe33899e159 [ 114.308072][ T6186] RDX: 00000000000001d1 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 114.308086][ T6186] RBP: 00007fe338a3506b R08: 0000000000000000 R09: 0000000000000000 [ 114.308100][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.308114][ T6186] R13: 00007fe338c26038 R14: 00007fe338c25fa0 R15: 00007ffef69a13e8 [ 114.308144][ T6186] [ 114.344851][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 114.344971][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.579105][ T12] net_ratelimit: 53 callbacks suppressed [ 114.682159][ T5810] usb_ehset_test 4-1:4.109: probe with driver usb_ehset_test failed with error -32 [ 114.693191][ T9] usb 3-1: USB disconnect, device number 7 [ 114.714303][ T5810] usb 4-1: USB disconnect, device number 6 [ 114.888831][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 115.170987][ T6215] ======================================================= [ 115.170987][ T6215] WARNING: The mand mount option has been deprecated and [ 115.170987][ T6215] and is ignored by this kernel. Remove the mand [ 115.170987][ T6215] option from the mount to silence this warning. [ 115.170987][ T6215] ======================================================= [ 115.171841][ T6215] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 115.171859][ T6215] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.87'. [ 115.171884][ T6215] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.87'. [ 116.475465][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.955454][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 116.955472][ T31] audit: type=1400 audit(1790983503.048:538): avc: denied { accept } for pid=6233 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 117.012895][ T31] audit: type=1400 audit(1790983503.108:539): avc: denied { create } for pid=6233 comm="syz.0.82" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.165980][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 117.349948][ T31] audit: type=1400 audit(1790983503.438:540): avc: denied { mounton } for pid=6245 comm="syz.4.91" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 117.384698][ T31] audit: type=1400 audit(1790983503.478:541): avc: denied { mount } for pid=6245 comm="syz.4.91" name="/" dev="rpc_pipefs" ino=11448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 117.393356][ T5987] veth0_vlan: entered promiscuous mode [ 117.422338][ T5987] veth1_vlan: entered promiscuous mode [ 117.449189][ T6239] could not allocate digest TFM handle crct10dif-arm64-neon [ 117.462322][ T31] audit: type=1400 audit(1790983503.548:542): avc: denied { create } for pid=6245 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.517825][ T5713] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.546421][ T5987] veth0_macvtap: entered promiscuous mode [ 117.557580][ T5987] veth1_macvtap: entered promiscuous mode [ 117.610499][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.636807][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.672852][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 117.683418][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.683458][ T5713] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 117.686813][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.686833][ T5713] usb 1-1: Product: syz [ 117.686849][ T5713] usb 1-1: Manufacturer: syz [ 117.686864][ T5713] usb 1-1: SerialNumber: syz [ 117.723841][ T31] audit: type=1400 audit(1790983503.818:543): avc: denied { setopt } for pid=6245 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.762267][ T31] audit: type=1400 audit(1790983503.838:544): avc: denied { ioctl } for pid=6245 comm="syz.4.91" path="socket:[10599]" dev="sockfs" ino=10599 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.796417][ T5713] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.796886][ T5713] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 117.842464][ T1178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.842876][ T1178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.843196][ T1178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.857798][ T100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.024194][ T31] audit: type=1400 audit(1790983504.118:545): avc: denied { setopt } for pid=6245 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.057612][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.057624][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.189094][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.189109][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.330035][ T31] audit: type=1400 audit(1790983504.418:546): avc: denied { mounton } for pid=5987 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 118.577097][ T9] usb 1-1: USB disconnect, device number 9 [ 119.190512][ T6255] netlink: 'syz.3.92': attribute type 11 has an invalid length. [ 119.425403][ T31] audit: type=1400 audit(1790983505.278:547): avc: denied { ioctl } for pid=6254 comm="syz.3.92" path="socket:[10883]" dev="sockfs" ino=10883 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.589758][ T2266] net_ratelimit: 236 callbacks suppressed [ 120.856531][ T6266] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.331893][ T6272] loop9: detected capacity change from 0 to 2640 [ 121.339107][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.339346][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.339475][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.339961][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.340113][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.340741][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.341022][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.341152][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.341201][ T6272] ldm_validate_partition_table(): Disk read failed. [ 121.341330][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.341443][ T6272] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.341688][ T6272] Dev loop9: unable to read RDB block 0 [ 121.342565][ T6272] loop9: unable to read partition table [ 121.343605][ T6272] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 122.020418][ T6273] capability: warning: `syz.4.96' uses 32-bit capabilities (legacy support in use) [ 122.187502][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 122.187522][ T31] audit: type=1400 audit(1790983507.388:554): avc: denied { write } for pid=6269 comm="syz.4.96" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.187566][ T31] audit: type=1400 audit(1790983507.798:555): avc: denied { ioctl } for pid=6269 comm="syz.4.96" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11488 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.632456][ T2266] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.738808][ T6286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6286 comm=syz.0.99 [ 122.782829][ T2266] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 122.795745][ T2266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.795765][ T2266] usb 3-1: Product: syz [ 122.795781][ T2266] usb 3-1: Manufacturer: syz [ 122.795797][ T2266] usb 3-1: SerialNumber: syz [ 122.826021][ T2266] usb 3-1: config 0 descriptor?? [ 122.828330][ T31] audit: type=1400 audit(1790983508.918:556): avc: denied { ioctl } for pid=6285 comm="syz.0.99" path="socket:[10948]" dev="sockfs" ino=10948 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.897893][ T2266] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 122.943814][ T2266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.966992][ T2266] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 122.967058][ T2266] usb 3-1: media controller created [ 123.146328][ T2266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.190086][ T31] audit: type=1400 audit(1790983509.278:557): avc: denied { write } for pid=6277 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.466691][ T2266] DVB: Unable to find symbol mt352_attach() [ 123.611298][ T2266] DVB: Unable to find symbol nxt6000_attach() [ 123.611304][ T2266] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 123.637825][ T2266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 123.649836][ T6299] FAULT_INJECTION: forcing a failure. [ 123.649836][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 123.649866][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT(full) [ 123.649889][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.649901][ T6299] Call Trace: [ 123.649908][ T6299] [ 123.649916][ T6299] dump_stack_lvl+0x100/0x190 [ 123.649949][ T6299] should_fail_ex.cold+0x5/0xa [ 123.649976][ T6299] should_failslab+0xc2/0x120 [ 123.650002][ T6299] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 123.650027][ T6299] ? __alloc_skb+0x5b7/0x710 [ 123.650050][ T6299] ? __alloc_skb+0x140/0x710 [ 123.650078][ T6299] __alloc_skb+0x140/0x710 [ 123.650103][ T6299] ? __alloc_skb+0x5b7/0x710 [ 123.650126][ T6299] ? __pfx___alloc_skb+0x10/0x10 [ 123.650158][ T6299] netlink_alloc_large_skb+0x69/0x150 [ 123.650185][ T6299] netlink_sendmsg+0x680/0xda0 [ 123.650213][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.650240][ T6299] ? selinux_socket_sendmsg+0x198/0x2f0 [ 123.650269][ T6299] ____sys_sendmsg+0xa4d/0xbe0 [ 123.650287][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.650312][ T6299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.650338][ T6299] ? lock_acquire+0x1d1/0x380 [ 123.650360][ T6299] ? get_pid_task+0x2a/0x250 [ 123.650388][ T6299] ___sys_sendmsg+0x190/0x1e0 [ 123.650411][ T6299] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.650431][ T6299] ? get_pid_task+0x106/0x250 [ 123.650466][ T6299] ? find_held_lock+0x2b/0x80 [ 123.650511][ T6299] __sys_sendmsg+0x160/0x210 [ 123.650537][ T6299] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.650577][ T6299] do_syscall_64+0x123/0x790 [ 123.650600][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.650620][ T6299] RIP: 0033:0x7fe33899e159 [ 123.650650][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.650668][ T6299] RSP: 002b:00007fe33981e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.650687][ T6299] RAX: ffffffffffffffda RBX: 00007fe338c26090 RCX: 00007fe33899e159 [ 123.650701][ T6299] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 123.650712][ T6299] RBP: 00007fe33981e090 R08: 0000000000000000 R09: 0000000000000000 [ 123.650724][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.650736][ T6299] R13: 00007fe338c26128 R14: 00007fe338c26090 R15: 00007ffef69a13e8 [ 123.650763][ T6299] [ 123.725619][ T2266] dvb-usb: schedule remote query interval to 1000 msecs. [ 123.725649][ T2266] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 123.750726][ T2266] dvb-usb: bulk message failed: -22 (7/0) [ 123.750747][ T2266] dvb-usb: bulk message failed: -22 (7/0) [ 123.827757][ T2266] usb 3-1: USB disconnect, device number 8 [ 124.118827][ T6301] netlink: 116 bytes leftover after parsing attributes in process `syz.2.104'. [ 124.225447][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 124.225686][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 124.671080][ T31] audit: type=1400 audit(1790983510.728:558): avc: denied { ioctl } for pid=6302 comm="syz.2.105" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.680323][ T5703] net_ratelimit: 115 callbacks suppressed [ 124.834837][ T2266] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 125.113105][ T6284] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 125.541009][ T31] audit: type=1400 audit(1790983511.628:559): avc: denied { create } for pid=6316 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.571904][ T31] audit: type=1400 audit(1790983511.658:560): avc: denied { write } for pid=6316 comm="syz.0.109" path="socket:[11002]" dev="sockfs" ino=11002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.932394][ T5699] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.992405][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.189407][ T5699] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 126.220420][ T5699] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.220500][ T5699] usb 4-1: config 0 has no interface number 0 [ 126.256772][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 126.321249][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.321282][ T5699] usb 4-1: Product: syz [ 126.321298][ T5699] usb 4-1: Manufacturer: syz [ 126.321341][ T5699] usb 4-1: SerialNumber: syz [ 126.366279][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.366334][ T10] usb 1-1: config 0 has no interface number 0 [ 126.446560][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.446589][ T10] usb 1-1: Product: syz [ 126.446660][ T10] usb 1-1: Manufacturer: syz [ 126.446731][ T10] usb 1-1: SerialNumber: syz [ 126.744241][ T5699] usb 4-1: config 0 descriptor?? [ 126.777223][ T10] usb 1-1: config 0 descriptor?? [ 127.112501][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 127.129128][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.129913][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 127.129971][ T10] usb 1-1: media controller created [ 127.156665][ T5699] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 127.224028][ T5699] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 127.225499][ T31] audit: type=1400 audit(1790983513.318:561): avc: denied { firmware_load } for pid=5699 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.227048][ T5699] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 127.282154][ T5738] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.294180][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.434053][ T5738] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 127.460410][ T5738] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.460524][ T5738] usb 6-1: config 0 has no interface number 0 [ 127.596220][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.596301][ T5738] usb 6-1: Product: syz [ 127.596343][ T5738] usb 6-1: Manufacturer: syz [ 127.596359][ T5738] usb 6-1: SerialNumber: syz [ 127.986855][ T5738] usb 6-1: config 0 descriptor?? [ 128.490387][ T5738] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 128.520068][ T5738] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.520647][ T5738] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 128.520700][ T5738] usb 6-1: media controller created [ 128.614065][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.723400][ T10] usb 1-1: USB disconnect, device number 10 [ 128.799947][ T31] audit: type=1400 audit(1790983514.888:562): avc: denied { setopt } for pid=6339 comm="syz.3.116" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.822521][ T31] audit: type=1400 audit(1790983514.898:563): avc: denied { mmap_zero } for pid=6338 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 128.845259][ T31] audit: type=1400 audit(1790983514.918:564): avc: denied { connect } for pid=6339 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.865494][ T31] audit: type=1400 audit(1790983514.938:565): avc: denied { name_connect } for pid=6339 comm="syz.3.116" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 128.908166][ T5738] usb 6-1: USB disconnect, device number 2 [ 129.186126][ T31] audit: type=1400 audit(1790983515.278:566): avc: denied { listen } for pid=6339 comm="syz.3.116" lport=41136 faddr=fe88::4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.368461][ T31] audit: type=1400 audit(1790983515.458:567): avc: denied { accept } for pid=6339 comm="syz.3.116" lport=41136 faddr=fe88::4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.736224][ T5609] net_ratelimit: 776 callbacks suppressed [ 131.933994][ T31] audit: type=1400 audit(1790983518.028:568): avc: denied { append } for pid=6362 comm="syz.2.107" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.941963][ T31] audit: type=1400 audit(1790983518.028:569): avc: denied { write } for pid=6329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.992355][ T5720] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.152157][ T5720] usb 6-1: Using ep0 maxpacket: 32 [ 132.153493][ T5720] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.155435][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.155449][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.155481][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.157795][ T5720] usb 6-1: config 0 descriptor?? [ 132.171295][ T5720] hub 6-1:0.0: USB hub found [ 132.234555][ T31] audit: type=1400 audit(1790983518.318:570): avc: denied { allowed } for pid=6368 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.330310][ T31] audit: type=1400 audit(1790983518.418:571): avc: denied { write } for pid=6366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.362204][ T5609] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.383071][ T31] audit: type=1400 audit(1790983518.478:572): avc: denied { getopt } for pid=6368 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.419405][ T5720] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 132.513253][ T5609] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 132.515852][ T5609] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.515885][ T5609] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.520804][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.520824][ T5609] usb 3-1: Product: syz [ 132.520839][ T5609] usb 3-1: Manufacturer: syz [ 132.520854][ T5609] usb 3-1: SerialNumber: syz [ 132.589224][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589275][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.115381][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 133.127746][ T31] audit: type=1400 audit(1790983519.198:573): avc: denied { write } for pid=6368 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.659128][ T6357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.705511][ T31] audit: type=1326 audit(1790983519.798:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91d499e159 code=0x0 [ 133.838999][ T5720] usbhid 6-1:0.0: can't add hid device: -71 [ 133.839130][ T5720] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 133.840497][ T5609] kaweth 3-1:1.0: Firmware present in device. [ 133.920994][ T5609] kaweth 3-1:1.0: Statistics collection: 0 [ 133.921038][ T5609] kaweth 3-1:1.0: Multicast filter limit: 0 [ 133.921080][ T5609] kaweth 3-1:1.0: MTU: 0 [ 133.921122][ T5609] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00 [ 134.343020][ T5609] kaweth 3-1:1.0: Error setting SOFS wait [ 134.343126][ T5609] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 134.368179][ T5609] usb 3-1: USB disconnect, device number 9 [ 134.375510][ T5720] usb 6-1: USB disconnect, device number 3 [ 134.892107][ C0] net_ratelimit: 556 callbacks suppressed [ 137.536243][ T31] audit: type=1400 audit(1790983523.628:575): avc: denied { read write } for pid=6396 comm="syz.2.127" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.539574][ T31] audit: type=1400 audit(1790983523.628:576): avc: denied { open } for pid=6396 comm="syz.2.127" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.607941][ T31] audit: type=1400 audit(1790983523.698:577): avc: denied { mount } for pid=6398 comm="syz.5.129" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 137.610741][ T31] audit: type=1400 audit(1790983523.698:578): avc: denied { watch } for pid=6398 comm="syz.5.129" path="/5" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 137.612350][ T5738] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.770584][ T5738] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 137.778682][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.778709][ T5738] usb 1-1: config 0 has no interface number 0 [ 137.786377][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.786397][ T5738] usb 1-1: Product: syz [ 137.786411][ T5738] usb 1-1: Manufacturer: syz [ 137.786426][ T5738] usb 1-1: SerialNumber: syz [ 137.797244][ T5738] usb 1-1: config 0 descriptor?? [ 137.891833][ T31] audit: type=1400 audit(1790983523.978:579): avc: denied { unmount } for pid=5987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 138.021978][ T5738] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 138.026597][ T6411] FAULT_INJECTION: forcing a failure. [ 138.026597][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 138.026626][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz.4.128 Not tainted syzkaller #0 PREEMPT(full) [ 138.026650][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.026663][ T6411] Call Trace: [ 138.026670][ T6411] [ 138.026686][ T6411] dump_stack_lvl+0x100/0x190 [ 138.026720][ T6411] should_fail_ex.cold+0x5/0xa [ 138.026749][ T6411] should_failslab+0xc2/0x120 [ 138.026779][ T6411] __kmalloc_noprof+0xfc/0x840 [ 138.026803][ T6411] ? tomoyo_encode2+0xfb/0x3c0 [ 138.026836][ T6411] tomoyo_encode2+0xfb/0x3c0 [ 138.026866][ T6411] tomoyo_encode+0x29/0x50 [ 138.026891][ T6411] tomoyo_realpath_from_path+0x18c/0x690 [ 138.026924][ T6411] tomoyo_get_exe+0x63/0xa0 [ 138.026945][ T6411] tomoyo_write_control+0x69e/0x13a0 [ 138.026984][ T6411] ? lock_acquire+0x5e/0x380 [ 138.027007][ T6411] ? __pfx_tomoyo_write_control+0x10/0x10 [ 138.027045][ T6411] vfs_write+0x2aa/0x1050 [ 138.027069][ T6411] ? __pfx_tomoyo_write+0x10/0x10 [ 138.027094][ T6411] ? lock_acquire+0x1d1/0x380 [ 138.027116][ T6411] ? __fget_files+0x34/0x3d0 [ 138.027141][ T6411] ? __pfx_vfs_write+0x10/0x10 [ 138.027161][ T6411] ? find_held_lock+0x2b/0x80 [ 138.027190][ T6411] ? __fget_files+0x215/0x3d0 [ 138.027220][ T6411] ? __fget_files+0x21f/0x3d0 [ 138.027254][ T6411] ksys_write+0x12a/0x250 [ 138.027277][ T6411] ? __pfx_ksys_write+0x10/0x10 [ 138.027307][ T6411] do_syscall_64+0x123/0x790 [ 138.027331][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.027351][ T6411] RIP: 0033:0x7f49dd39e159 [ 138.027368][ T6411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.027386][ T6411] RSP: 002b:00007f49de246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.027405][ T6411] RAX: ffffffffffffffda RBX: 00007f49dd625fa0 RCX: 00007f49dd39e159 [ 138.027419][ T6411] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006 [ 138.027431][ T6411] RBP: 00007f49de246090 R08: 0000000000000000 R09: 0000000000000000 [ 138.027443][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.027455][ T6411] R13: 00007f49dd626038 R14: 00007f49dd625fa0 R15: 00007ffd8d1ad408 [ 138.027484][ T6411] [ 138.041669][ T6411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.236322][ T31] audit: type=1400 audit(1790983524.328:580): avc: denied { write } for pid=6380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.473748][ T6418] blktrace: Concurrent blktraces are not allowed on loop8 [ 139.029949][ T31] audit: type=1400 audit(1790983525.118:581): avc: denied { write } for pid=6419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.012107][ C1] net_ratelimit: 125 callbacks suppressed [ 141.179826][ T31] audit: type=1400 audit(1790983527.268:582): avc: denied { listen } for pid=6452 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.352368][ T5600] Bluetooth: hci3: connection err: -111 [ 141.398635][ T31] audit: type=1400 audit(1790983527.488:583): avc: denied { write } for pid=6434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.719841][ T31] audit: type=1400 audit(1790983527.808:584): avc: denied { write } for pid=6463 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.882110][ T5720] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.890760][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 142.890776][ T31] audit: type=1400 audit(1790983528.978:586): avc: denied { write } for pid=6468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.965884][ T6485] FAULT_INJECTION: forcing a failure. [ 142.965884][ T6485] name failslab, interval 1, probability 0, space 0, times 0 [ 142.965915][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) [ 142.965942][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.965956][ T6485] Call Trace: [ 142.965964][ T6485] [ 142.965973][ T6485] dump_stack_lvl+0x100/0x190 [ 142.966009][ T6485] should_fail_ex.cold+0x5/0xa [ 142.966040][ T6485] should_failslab+0xc2/0x120 [ 142.966069][ T6485] __kmalloc_cache_noprof+0x91/0x6d0 [ 142.966091][ T6485] ? binder_get_thread+0x1c7/0x850 [ 142.966116][ T6485] ? binder_get_thread+0x201/0x850 [ 142.966147][ T6485] binder_get_thread+0x201/0x850 [ 142.966178][ T6485] binder_ioctl+0x26f/0x74a0 [ 142.966209][ T6485] ? tomoyo_path_number_perm+0x28f/0x580 [ 142.966241][ T6485] ? tomoyo_path_number_perm+0x188/0x580 [ 142.966271][ T6485] ? __pfx_futex_wait+0x10/0x10 [ 142.966295][ T6485] ? __pfx_binder_ioctl+0x10/0x10 [ 142.966325][ T6485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.966363][ T6485] ? do_vfs_ioctl+0x226/0x13e0 [ 142.966389][ T6485] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 142.966413][ T6485] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 142.966443][ T6485] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 142.966475][ T6485] ? __fget_files+0x34/0x3d0 [ 142.966514][ T6485] ? selinux_file_ioctl+0x13b/0x290 [ 142.966539][ T6485] ? selinux_file_ioctl+0xb6/0x290 [ 142.966567][ T6485] ? __pfx_binder_ioctl+0x10/0x10 [ 142.966596][ T6485] __x64_sys_ioctl+0x18e/0x210 [ 142.966621][ T6485] do_syscall_64+0x123/0x790 [ 142.966648][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.966671][ T6485] RIP: 0033:0x7f29cbd9e159 [ 142.966691][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.966712][ T6485] RSP: 002b:00007f29ccb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.966735][ T6485] RAX: ffffffffffffffda RBX: 00007f29cc025fa0 RCX: 00007f29cbd9e159 [ 142.966752][ T6485] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 142.966766][ T6485] RBP: 00007f29cbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 142.966780][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.966794][ T6485] R13: 00007f29cc026038 R14: 00007f29cc025fa0 R15: 00007ffd50c32bf8 [ 142.966825][ T6485] [ 142.966852][ T6485] binder: 6484:6485 ioctl c0306201 0 returned -12 [ 143.056252][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.056294][ T5720] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 143.058021][ T5720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.058042][ T5720] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.063780][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.063800][ T5720] usb 5-1: Product: syz [ 143.063814][ T5720] usb 5-1: Manufacturer: syz [ 143.063829][ T5720] usb 5-1: SerialNumber: syz [ 143.110363][ T5720] usb 5-1: selecting invalid altsetting 1 [ 143.111197][ T5720] usb 5-1: unit 6 not found! [ 143.295010][ T31] audit: type=1400 audit(1790983529.388:587): avc: denied { ioctl } for pid=6489 comm="syz.0.148" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.337067][ T31] audit: type=1400 audit(1790983529.428:588): avc: denied { write } for pid=6488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.482852][ T31] audit: type=1400 audit(1790983529.568:589): avc: denied { append } for pid=6493 comm="syz.2.149" name="media6" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.737954][ T6502] netlink: 'syz.2.151': attribute type 3 has an invalid length. [ 143.737976][ T6502] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 143.737989][ T6502] netlink: 224 bytes leftover after parsing attributes in process `syz.2.151'. [ 143.832874][ T31] audit: type=1400 audit(1790983529.928:590): avc: denied { mount } for pid=6472 comm="syz.4.143" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.841211][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.847992][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.016202][ T31] audit: type=1400 audit(1790983530.108:591): avc: denied { mounton } for pid=6509 comm="syz.3.153" path="/29/mnt/mnt" dev="sda1" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1 [ 144.016632][ T6510] overlayfs: failed to resolve 'upper': -2 [ 144.108894][ T31] audit: type=1400 audit(1790983530.198:592): avc: denied { relabelfrom } for pid=6508 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.109133][ T31] audit: type=1400 audit(1790983530.198:593): avc: denied { relabelto } for pid=6508 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.374170][ T31] audit: type=1400 audit(1790983530.468:594): avc: denied { read } for pid=6519 comm="syz.0.158" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.374534][ T31] audit: type=1400 audit(1790983530.468:595): avc: denied { open } for pid=6519 comm="syz.0.158" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.612308][ T6530] bond0: option arp_interval: invalid value () [ 144.612331][ T6530] bond0: option arp_interval: allowed values 0 - 2147483647 [ 145.052099][ C1] net_ratelimit: 64 callbacks suppressed [ 145.765156][ T5720] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 145.927345][ T5720] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 145.939213][ T5720] usb 5-1: USB disconnect, device number 12 [ 146.034590][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.076862][ T6551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.166'. [ 146.099524][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.167'. [ 146.446614][ T6563] FAULT_INJECTION: forcing a failure. [ 146.446614][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 146.446644][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(full) [ 146.446670][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.446683][ T6563] Call Trace: [ 146.446692][ T6563] [ 146.446701][ T6563] dump_stack_lvl+0x100/0x190 [ 146.446738][ T6563] should_fail_ex.cold+0x5/0xa [ 146.446768][ T6563] should_failslab+0xc2/0x120 [ 146.446797][ T6563] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 146.446825][ T6563] ? __kasan_kmalloc+0xaa/0xb0 [ 146.446850][ T6563] ? __request_module+0x2d5/0x6a0 [ 146.446883][ T6563] kstrdup+0x51/0xe0 [ 146.446907][ T6563] __request_module+0x2d5/0x6a0 [ 146.446936][ T6563] ? __pfx___request_module+0x10/0x10 [ 146.446974][ T6563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.447010][ T6563] nfnetlink_rcv_batch+0x14a8/0x2880 [ 146.447045][ T6563] ? kmem_cache_free+0x127/0x6c0 [ 146.447070][ T6563] ? __lock_acquire+0x5c0/0x1f40 [ 146.447098][ T6563] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 146.447135][ T6563] ? lock_acquire+0x1d1/0x380 [ 146.447160][ T6563] ? avc_has_perm_noaudit+0x56/0x470 [ 146.447204][ T6563] ? avc_has_perm_noaudit+0x145/0x470 [ 146.447240][ T6563] ? __asan_memset+0x23/0x50 [ 146.447263][ T6563] ? __nla_validate_parse+0x1e7/0x28b0 [ 146.447293][ T6563] ? __pfx___nla_validate_parse+0x10/0x10 [ 146.447315][ T6563] ? rcu_is_watching+0x13/0xc0 [ 146.447344][ T6563] ? cap_capable+0x107/0x430 [ 146.447372][ T6563] ? __nla_parse+0x40/0x60 [ 146.447396][ T6563] nfnetlink_rcv+0x3bd/0x440 [ 146.447428][ T6563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 146.447467][ T6563] netlink_unicast+0x585/0x850 [ 146.447498][ T6563] ? __pfx_netlink_unicast+0x10/0x10 [ 146.447522][ T6563] ? __build_skb_around+0x278/0x390 [ 146.447554][ T6563] netlink_sendmsg+0x8b0/0xda0 [ 146.447585][ T6563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.447625][ T6563] ? selinux_socket_sendmsg+0x198/0x2f0 [ 146.447658][ T6563] ____sys_sendmsg+0xa4d/0xbe0 [ 146.447680][ T6563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.447709][ T6563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.447738][ T6563] ? plist_check_list+0x1b8/0x280 [ 146.447765][ T6563] ? plist_del+0x308/0x510 [ 146.447796][ T6563] ___sys_sendmsg+0x190/0x1e0 [ 146.447821][ T6563] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.447844][ T6563] ? futex_wake+0x220/0x5e0 [ 146.447875][ T6563] ? find_held_lock+0x2b/0x80 [ 146.447922][ T6563] __sys_sendmsg+0x160/0x210 [ 146.447951][ T6563] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.447995][ T6563] do_syscall_64+0x123/0x790 [ 146.448020][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.448043][ T6563] RIP: 0033:0x7f60ef39e159 [ 146.448062][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.448081][ T6563] RSP: 002b:00007f60ed5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.448103][ T6563] RAX: ffffffffffffffda RBX: 00007f60ef625fa0 RCX: 00007f60ef39e159 [ 146.448118][ T6563] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000006 [ 146.448132][ T6563] RBP: 00007f60ef43506b R08: 0000000000000000 R09: 0000000000000000 [ 146.448145][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.448158][ T6563] R13: 00007f60ef626038 R14: 00007f60ef625fa0 R15: 00007fffb93f5068 [ 146.448187][ T6563] [ 146.571674][ T6556] jffs2: notice: (6556) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.172542][ T6573] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 147.174631][ T6573] CIFS: Attempting to mount //172.20.20.170/share [ 147.296264][ T6573] CIFS: VFS: Error connecting to socket. Aborting operation. [ 147.296745][ T6573] CIFS: VFS: cifs_mount failed w/return code = -111 [ 148.274770][ T6583] 9pnet_virtio: no channels available for device syz [ 148.354417][ T6587] overlayfs: conflicting options: userxattr,redirect_dir=on [ 148.400747][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 148.400764][ T31] audit: type=1800 audit(1790983534.488:604): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.180" name="(" dev="sda1" ino=2051 res=0 errno=0 [ 148.403811][ T31] audit: type=1400 audit(1790983534.498:605): avc: denied { read write } for pid=6584 comm="syz.4.178" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 148.403841][ T31] audit: type=1400 audit(1790983534.498:606): avc: denied { open } for pid=6584 comm="syz.4.178" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 148.549876][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.178'. [ 148.664001][ T6592] gadgetfs: bound to dummy_udc driver [ 149.416342][ T6599] syz.2.183 uses obsolete (PF_INET,SOCK_PACKET) [ 149.493967][ T31] audit: type=1400 audit(1790983535.588:607): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 149.807472][ T31] audit: type=1400 audit(1790983535.898:608): avc: denied { mount } for pid=6611 comm="syz.5.189" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 150.251691][ T31] audit: type=1400 audit(1790983536.338:609): avc: denied { prog_run } for pid=6627 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.332096][ C1] net_ratelimit: 88 callbacks suppressed [ 150.373097][ T31] audit: type=1400 audit(1790983536.468:610): avc: denied { create } for pid=6631 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.385230][ T31] audit: type=1400 audit(1790983536.478:611): avc: denied { bind } for pid=6631 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.470471][ T31] audit: type=1400 audit(1790983536.538:612): avc: denied { listen } for pid=6631 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.555924][ T31] audit: type=1400 audit(1790983536.628:613): avc: denied { connect } for pid=6631 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.288458][ T6662] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 151.288458][ T6662] [ 151.288697][ T6662] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 151.289197][ T6662] CIFS: Attempting to mount //172.20.20.170/share [ 151.297550][ T6662] CIFS: VFS: Error connecting to socket. Aborting operation. [ 151.297738][ T6662] CIFS: VFS: cifs_mount failed w/return code = -111 [ 152.211571][ T6666] overlayfs: conflicting options: userxattr,redirect_dir=on [ 152.290302][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 152.951648][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'. [ 152.985670][ T6680] gadgetfs: bound to dummy_udc driver [ 155.372113][ C1] net_ratelimit: 122 callbacks suppressed [ 156.012758][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 156.012772][ T31] audit: type=1400 audit(1790983542.108:619): avc: denied { setopt } for pid=6692 comm="syz.5.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.210343][ T6695] syzkaller0: entered promiscuous mode [ 156.210358][ T6695] syzkaller0: entered allmulticast mode [ 156.433828][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.213'. [ 156.559615][ T31] audit: type=1400 audit(1790983542.648:620): avc: denied { mounton } for pid=6700 comm="syz.0.212" path="/46/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 156.736968][ T6701] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.738177][ T31] audit: type=1400 audit(1790983542.828:621): avc: denied { create } for pid=6717 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 156.796105][ T1092] IPVS: starting estimator thread 0... [ 156.808725][ T31] audit: type=1400 audit(1790983542.898:622): avc: denied { create } for pid=6700 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.832155][ T31] audit: type=1400 audit(1790983542.898:623): avc: denied { accept } for pid=6700 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.897971][ T31] audit: type=1400 audit(1790983542.988:624): avc: denied { mount } for pid=6717 comm="syz.4.217" name="/" dev="autofs" ino=12189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 156.932825][ T6721] IPVS: using max 46 ests per chain, 110400 per kthread [ 157.005010][ T31] audit: type=1400 audit(1790983543.098:625): avc: denied { write } for pid=6703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.164426][ T6725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.217'. [ 157.165138][ T31] audit: type=1400 audit(1790983543.258:626): avc: denied { write } for pid=6717 comm="syz.4.217" path="socket:[12173]" dev="sockfs" ino=12173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 157.219973][ T31] audit: type=1400 audit(1790983543.308:627): avc: denied { write } for pid=6735 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.376771][ T6745] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 157.519956][ T6749] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 157.920157][ T5600] Bluetooth: Wrong link type (-57) [ 158.224204][ T31] audit: type=1400 audit(1790983544.308:628): avc: denied { write } for pid=6746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.112404][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 159.177876][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 159.464188][ T6788] ceph: No mds server is up or the cluster is laggy [ 159.503753][ T5609] libceph: connect (1)[c::]:6789 error -101 [ 159.503874][ T5609] libceph: mon0 (1)[c::]:6789 connect error [ 160.422099][ C1] net_ratelimit: 104 callbacks suppressed [ 161.089611][ T6825] pimreg: entered allmulticast mode [ 161.164177][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 161.164190][ T31] audit: type=1400 audit(1790983547.258:633): avc: denied { create } for pid=6827 comm="syz.5.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.344191][ T31] audit: type=1400 audit(1790983547.438:634): avc: denied { setopt } for pid=6827 comm="syz.5.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.345190][ T31] audit: type=1400 audit(1790983547.438:635): avc: denied { ioctl } for pid=6827 comm="syz.5.237" path="socket:[12938]" dev="sockfs" ino=12938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.345770][ T31] audit: type=1400 audit(1790983547.438:636): avc: denied { bind } for pid=6827 comm="syz.5.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.350988][ T31] audit: type=1400 audit(1790983547.438:637): avc: denied { write } for pid=6827 comm="syz.5.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.499502][ T31] audit: type=1400 audit(1790983547.588:638): avc: denied { read } for pid=6836 comm="syz.0.240" name="video7" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.530257][ T31] audit: type=1400 audit(1790983547.588:639): avc: denied { open } for pid=6836 comm="syz.0.240" path="/dev/video7" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.560408][ T31] audit: type=1400 audit(1790983547.628:640): avc: denied { ioctl } for pid=6836 comm="syz.0.240" path="/dev/video7" dev="devtmpfs" ino=945 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.625897][ T31] audit: type=1400 audit(1790983547.718:641): avc: denied { create } for pid=6812 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.659848][ T31] audit: type=1400 audit(1790983547.748:642): avc: denied { setopt } for pid=6812 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.735528][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 161.837710][ T6841] null_blk: nullb1: using native zone append [ 161.841773][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.243'. [ 161.872776][ T6845] netlink: 'syz.5.243': attribute type 12 has an invalid length. [ 161.960056][ T6848] nvmet: adding nsid 1 to subsystem testsubsys [ 161.972501][ T6849] netlink: 'syz.3.238': attribute type 4 has an invalid length. [ 162.184346][ T6856] team0: Device xfrm0 is of different type [ 162.215825][ T6841] null_blk: disk nullb1 created [ 162.262827][ T6858] sg_write: data in/out 548876/136 bytes for SCSI command 0x0-- guessing data in; [ 162.262827][ T6858] program syz.4.246 not setting count and/or reply_len properly [ 162.266831][ T6848] block device autoloading is deprecated and will be removed. [ 162.283046][ T5609] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.452121][ T5609] usb 3-1: Using ep0 maxpacket: 8 [ 162.452963][ T5609] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.454035][ T5609] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 162.454100][ T5609] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.454124][ T5609] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.454147][ T5609] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.454170][ T5609] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.454226][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.711656][ T5609] usb 3-1: usb_control_msg returned -32 [ 162.711697][ T5609] usbtmc 3-1:16.0: can't read capabilities [ 163.306240][ T6896] 9pnet_virtio: no channels available for device syz [ 163.557417][ T6901] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 163.667414][ T6905] bridge_slave_0: left allmulticast mode [ 163.667433][ T6905] bridge_slave_0: left promiscuous mode [ 163.671166][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.706133][ T6905] bridge_slave_1: left allmulticast mode [ 163.706155][ T6905] bridge_slave_1: left promiscuous mode [ 163.706346][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.739824][ T6905] bond0: (slave bond_slave_0): Releasing backup interface [ 163.772197][ T9] usb 3-1: USB disconnect, device number 10 [ 163.793347][ T6905] bond0: (slave bond_slave_1): Releasing backup interface [ 163.845680][ T6905] team0: Port device team_slave_0 removed [ 163.868000][ T6905] team0: Port device team_slave_1 removed [ 163.868546][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.868557][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.883225][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.883245][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.935556][ T6908] team0: Mode changed to "loadbalance" [ 164.799258][ T6934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.850094][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.277'. [ 164.854724][ T6944] netlink: 'syz.5.277': attribute type 12 has an invalid length. [ 165.522548][ T5705] net_ratelimit: 249 callbacks suppressed [ 166.111950][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 166.281509][ T6962] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 166.477905][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 166.477931][ T31] audit: type=1400 audit(1790983552.568:662): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 166.979457][ T6969] netlink: 'syz.5.285': attribute type 49 has an invalid length. [ 167.306972][ T31] audit: type=1400 audit(1790983553.398:663): avc: denied { connect } for pid=6971 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.328673][ T6975] FAULT_INJECTION: forcing a failure. [ 167.328673][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 167.328698][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.4.286 Not tainted syzkaller #0 PREEMPT(full) [ 167.328724][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.328740][ T6975] Call Trace: [ 167.328748][ T6975] [ 167.328756][ T6975] dump_stack_lvl+0x100/0x190 [ 167.328793][ T6975] should_fail_ex.cold+0x5/0xa [ 167.328824][ T6975] should_failslab+0xc2/0x120 [ 167.328853][ T6975] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 167.328879][ T6975] ? __d_alloc+0x35/0xa50 [ 167.328917][ T6975] __d_alloc+0x35/0xa50 [ 167.328949][ T6975] d_alloc+0x4a/0x1e0 [ 167.328980][ T6975] lookup_one_qstr_excl+0x171/0x250 [ 167.329005][ T6975] start_dirop+0x59/0xb0 [ 167.329030][ T6975] simple_start_creating+0xf9/0x110 [ 167.329058][ T6975] ? __pfx_simple_start_creating+0x10/0x10 [ 167.329087][ T6975] ? mntput+0x70/0xa0 [ 167.329112][ T6975] ? simple_pin_fs+0xa3/0x190 [ 167.329137][ T6975] debugfs_start_creating.part.0+0x7b/0x150 [ 167.329160][ T6975] debugfs_create_symlink+0x84/0x220 [ 167.329184][ T6975] ref_tracker_dir_symlink+0x257/0x3b0 [ 167.329216][ T6975] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 167.329273][ T6975] ? rcu_is_watching+0x13/0xc0 [ 167.329304][ T6975] ? ida_alloc_range+0x70d/0x830 [ 167.329325][ T6975] ? kfree+0x1e5/0x6d0 [ 167.329343][ T6975] ? xas_nomem+0x189/0x2c0 [ 167.329371][ T6975] ? __pfx_net_ns_net_init+0x10/0x10 [ 167.329400][ T6975] net_ns_net_init+0xd2/0x120 [ 167.329429][ T6975] ops_init+0x1e2/0x5f0 [ 167.329460][ T6975] setup_net+0x118/0x3a0 [ 167.329489][ T6975] ? __pfx_setup_net+0x10/0x10 [ 167.329526][ T6975] copy_net_ns+0x345/0x7a0 [ 167.329548][ T6975] create_new_namespaces+0x3ea/0xac0 [ 167.329579][ T6975] unshare_nsproxy_namespaces+0xf2/0x220 [ 167.329607][ T6975] ksys_unshare+0x4a2/0xa70 [ 167.329631][ T6975] ? __pfx_ksys_unshare+0x10/0x10 [ 167.329674][ T6975] __x64_sys_unshare+0x31/0x40 [ 167.329699][ T6975] do_syscall_64+0x123/0x790 [ 167.329725][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.329747][ T6975] RIP: 0033:0x7f49dd39e159 [ 167.329765][ T6975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.329784][ T6975] RSP: 002b:00007f49de225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 167.329804][ T6975] RAX: ffffffffffffffda RBX: 00007f49dd626090 RCX: 00007f49dd39e159 [ 167.329820][ T6975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 167.329833][ T6975] RBP: 00007f49dd43506b R08: 0000000000000000 R09: 0000000000000000 [ 167.329846][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.329859][ T6975] R13: 00007f49dd626128 R14: 00007f49dd626090 R15: 00007ffd8d1ad408 [ 167.329889][ T6975] [ 167.352404][ T6969] bond_slave_0: entered promiscuous mode [ 167.352421][ T6969] bond_slave_0: entered allmulticast mode [ 167.410649][ T6976] dlm: non-version read from control device 0 [ 167.840239][ T6988] jffs2: notice: (6988) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.873199][ T31] audit: type=1400 audit(1790983553.958:664): avc: denied { setattr } for pid=6985 comm="syz.2.293" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.963634][ T6982] kobject: 'lowpan0' (ffff88802c0147c0): kobject_uevent_env [ 167.963719][ T6982] kobject: 'lowpan0' (ffff88802c0147c0): fill_kobj_path: path = '/devices/virtual/net/lowpan0' [ 167.963835][ C1] virtqueue interrupt with no work for ffff888027fb3600 [ 167.963866][ T6982] kernfs lowpan0: removing [ 167.963942][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 167.963990][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 167.964009][ C1] No more buffers in queue [ 167.964485][ C1] eth0: xmit ffff88807538aaf0 42:01:0a:80:00:01 [ 167.964519][ C1] Added buffer head 16 to ffff888027fb3600 [ 167.964543][ C1] virtqueue callback for ffff888027fb3600 (ffffffff86ecd780) [ 167.964578][ C1] Sent skb ffff88807538aaf0 [ 167.964594][ C1] No more buffers in queue [ 167.964609][ C1] No more buffers in queue [ 167.964620][ C1] No more buffers in queue [ 167.964635][ C1] No more buffers in queue [ 167.964948][ C1] virtqueue callback for ffff888027fb3800 (ffffffff86ec49d0) [ 167.964970][ C1] No more buffers in queue [ 167.965001][ C1] Receiving skb proto 0x0800 len 220 type 0 [ 167.965026][ C1] No more buffers in queue [ 167.965227][ C1] eth0: xmit ffff88805a9c7640 42:01:0a:80:00:01 [ 167.965255][ C1] Added buffer head 16 to ffff888027fb3600 [ 167.965276][ C1] virtqueue callback for ffff888027fb3600 (ffffffff86ecd780) [ 167.965305][ C1] Sent skb ffff88805a9c7640 [ 167.965349][ C1] No more buffers in queue [ 167.965364][ C1] No more buffers in queue [ 167.965780][ T5605] ------------[ cut here ]------------ [ 167.966595][ T5605] kernel BUG at fs/jffs2/nodelist.c:462! [ 167.973463][ T5605] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 167.995608][ T6993] kcov: kcov_start: t = ffff88807dba2580, size = 524288, area = ffffc9001af0a000 [ 168.064069][ T6994] kcov: kcov_start: t = ffff888032244b00, size = 524288, area = ffffc9001b30b000 [ 168.184656][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 168.195963][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.208000][ T5605] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 168.215047][ T5605] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 73 81 fe 90 <0f> 0b e8 aa de f4 fe e9 5b fe ff ff e8 70 de f4 fe e9 59 ff ff ff [ 168.238543][ T5605] RSP: 0018:ffffc90003c67a98 EFLAGS: 00010293 [ 168.245788][ T5605] RAX: 0000000000000000 RBX: ffff888027866000 RCX: 0000000000000000 [ 168.255331][ T5605] RDX: ffff8880306d0000 RSI: ffffffff838ad45e RDI: ffff8880756c0ea0 [ 168.264870][ T5605] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1004f0cc6c [ 168.274403][ T5605] R10: ffff888027866363 R11: 0000000000000000 R12: ffff888057d83700 [ 168.283938][ T5605] R13: dffffc0000000000 R14: ffff8880756c0e80 R15: ffff888057d837b0 [ 168.293475][ T5605] FS: 000055555aef2500(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 168.304173][ T5605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.312053][ T5605] CR2: 00007f8d60befda0 CR3: 000000005a833000 CR4: 00000000003526f0 [ 168.321597][ T5605] Call Trace: [ 168.325498][ T5605] [ 168.328980][ T5605] jffs2_do_clear_inode+0x3ca/0x470 [ 168.335182][ T5605] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 168.341702][ T5605] evict+0x3c2/0xad0 [ 168.346338][ T5605] ? list_lru_del+0xba/0x2f0 [ 168.351824][ T5605] ? list_lru_del+0xba/0x2f0 [ 168.357294][ T5605] ? __pfx_evict+0x10/0x10 [ 168.362553][ T5605] ? do_raw_spin_unlock+0x145/0x1e0 [ 168.368759][ T5605] ? find_held_lock+0x2b/0x80 [ 168.374340][ T5605] ? find_held_lock+0x2b/0x80 [ 168.379926][ T5605] dispose_list+0x117/0x1e0 [ 168.385295][ T5605] evict_inodes+0x473/0x710 [ 168.390667][ T5605] ? __pfx_evict_inodes+0x10/0x10 [ 168.396669][ T5605] ? sync_blockdev+0x51/0x70 [ 168.402163][ T5605] generic_shutdown_super+0xc8/0x360 [ 168.408474][ T5605] kill_mtd_super+0x1d/0x80 [ 168.413851][ T5605] jffs2_kill_sb+0x7c/0xb0 [ 168.419118][ T5605] deactivate_locked_super+0xbd/0x130 [ 168.425541][ T5605] deactivate_super+0xea/0x110 [ 168.431229][ T5605] cleanup_mnt+0x21f/0x450 [ 168.436505][ T5605] task_work_run+0x150/0x240 [ 168.441984][ T5605] ? __pfx_task_work_run+0x10/0x10 [ 168.448100][ T5605] exit_to_user_mode_loop+0x1d8/0x700 [ 168.454525][ T5605] ? rcu_is_watching+0x13/0xc0 [ 168.460221][ T5605] do_syscall_64+0x661/0x790 [ 168.465695][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.472767][ T5605] RIP: 0033:0x7f60ef39f397 [ 168.478033][ T5605] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 168.501544][ T5605] RSP: 002b:00007fffb93f42d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 168.511604][ T5605] RAX: 0000000000000000 RBX: 00007f60ef4344bb RCX: 00007f60ef39f397 [ 168.521156][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb93f4390 [ 168.530691][ T5605] RBP: 00007fffb93f4390 R08: 00007fffb93f5390 R09: 00000000ffffffff [ 168.540233][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb93f5420 [ 168.549766][ T5605] R13: 00007f60ef4344bb R14: 0000000000028fe3 R15: 00007fffb93f5460 [ 168.559317][ T5605] [ 168.562919][ T5605] Modules linked in: [ 168.567666][ C1] virtqueue callback for ffff888027fb3800 (ffffffff86ec49d0) [ 168.573954][ T6981] sctp: sctp_close: sk:ffff8880354c1bc0, timeout:0 [ 168.573981][ T6981] sctp: sctp_destroy_sock: sk:ffff8880354c1bc0 [ 168.574214][ T6990] kcov: kcov_task_exit: t = ffff8880753d4b00, kcov->t = ffff8880753d4b00 [ 168.580673][ T6971] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 190 [ 168.580736][ T5810] nfc: nfc_urelease_event_work: portid 190 [ 168.619010][ T5605] ---[ end trace 0000000000000000 ]--- [ 168.625594][ C1] No more buffers in queue [ 168.630930][ C1] Receiving skb proto 0x0800 len 164 type 0 [ 168.638068][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 168.645088][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 168.652118][ C1] Receiving skb proto 0x0800 len 164 type 0 [ 168.659190][ C1] No more buffers in queue [ 168.664671][ C1] eth0: xmit ffff88806808e3c0 42:01:0a:80:00:01 [ 168.672188][ C1] Added buffer head 16 to ffff888027fb3600 [ 168.672214][ C1] virtqueue callback for ffff888027fb3600 (ffffffff86ecd780) [ 168.672317][ T6982] kobject: 'wpan0' (ffff888029d887c0): kobject_uevent_env [ 168.672360][ T6982] kobject: 'wpan0' (ffff888029d887c0): fill_kobj_path: path = '/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0' [ 168.672456][ T6982] net wpan0: renaming to wpan0 [ 168.672507][ T6982] kobject: 'wpan0' (ffff888029d887c0): fill_kobj_path: path = '/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0' [ 168.672551][ T6982] kobject: 'wpan0' (ffff888029d887c0): kobject_uevent_env [ 168.672567][ T6982] kobject: 'wpan0' (ffff888029d887c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 168.672612][ T6982] kobject: 'wpan0' (ffff888029d887c0): kobject_uevent_env [ 168.672642][ T6982] kobject: 'wpan0' (ffff888029d887c0): fill_kobj_path: path = '/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0' [ 168.672843][ T6982] Registering net sysctl (net ffff888035e6a7c0): net/ipv4/neigh/wpan0 [ 168.672859][ T6982] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888035d68b60 [ 168.672891][ T6982] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888035d68b64 [ 168.672917][ T6982] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888035d68b68 [ 168.672944][ T6982] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888035d68b6c [ 168.672970][ T6982] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888035d68b70 [ 168.672997][ T6982] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff888035d68b74 [ 168.673023][ T6982] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff888035d68b78 [ 168.673048][ T6982] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff888035d68b7c [ 168.673076][ T6982] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff888035d68b80 [ 168.673101][ T6982] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888035d68b84 [ 168.673126][ T6982] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888035d68b88 [ 168.673152][ T6982] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888035d68b8c [ 168.673199][ T6982] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888035d68b90 [ 168.673227][ T6982] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888035d68b94 [ 168.673255][ T6982] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff888035d68b84 [ 168.673282][ T6982] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=ffff888035d68b70 [ 168.673309][ T6982] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff888035d68b74 [ 168.673402][ T6982] Registering net sysctl (net ffff888035e6a7c0): net/ipv4/conf/wpan0 [ 168.673417][ T6982] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff888034a33960 [ 168.673454][ T6982] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff888034a33964 [ 168.673489][ T6982] Not writable by anyone [ 168.673497][ T6982] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff888034a339dc [ 169.065356][ C1] virtqueue callback for ffff888027fb3800 (ffffffff86ec49d0) ** replaying previous printk message ** [ 169.074937][ T6982] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888034a3396c [ 169.075263][ C1] Sent skb ffff88806808e3c0 [ 169.075296][ C1] No more buffers in queue [ 169.075303][ T6982] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888034a33970 [ 169.075315][ C1] No more buffers in queue [ 169.075339][ T6982] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff888034a33978 [ 169.075351][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 169.075381][ C1] No more buffers in queue [ 169.075372][ T6982] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888034a3397c [ 169.075402][ T6982] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888034a33974 [ 169.075422][ C1] No more buffers in queue [ 169.075431][ T6982] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff888034a33980 [ 169.075462][ T6982] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff888034a339b8 [ 169.075493][ T6982] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff888034a339bc [ 169.075538][ T6982] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff888034a33968 [ 169.075572][ T6982] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff888034a33994 [ 169.075605][ T6982] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff888034a33984 [ 169.075636][ T6982] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff888034a33988 [ 169.075667][ T6982] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff888034a3398c [ 169.075698][ T6982] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888034a33990 [ 169.075728][ T6982] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff888034a339a4 [ 169.075758][ T6982] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff888034a339a8 [ 169.075789][ T6982] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff888034a339b0 [ 169.075819][ T6982] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff888034a339b4 [ 169.075850][ T6982] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff888034a339e0 [ 169.075881][ T6982] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff888034a339c0 [ 169.075913][ T6982] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff888034a339a0 [ 169.075945][ T6982] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff888034a339c8 [ 169.075979][ T6982] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff888034a339cc [ 169.076011][ T6982] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff888034a339d0 [ 169.076039][ T6982] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff888034a339d8 [ 169.076069][ T6982] procname=disable_xfrm mode=644 proc_handler=devinet_conf_proc data=ffff888034a33998 [ 169.076096][ T6982] procname=disable_policy mode=644 proc_handler=devinet_conf_proc data=ffff888034a3399c [ 169.076124][ T6982] procname=promote_secondaries mode=644 proc_handler=devinet_conf_proc data=ffff888034a339ac [ 169.076152][ T6982] procname=route_localnet mode=644 proc_handler=devinet_conf_proc data=ffff888034a339c4 [ 169.076182][ T6982] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=devinet_conf_proc data=ffff888034a339d4 [ 169.076361][ T6982] ieee802154 phy0 wpan0: bond_netdev_event received NETDEV_REGISTER [ 169.076390][ T6982] net wpan0: siw: event 5 [ 169.076469][ T6982] Registering net sysctl (net ffff888035e6a7c0): net/mpls/conf/wpan0 [ 169.076486][ T6982] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff888036a6cf80 [ 169.076565][ T5605] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 169.076598][ T5605] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 73 81 fe 90 <0f> 0b e8 aa de f4 fe e9 5b fe ff ff e8 70 de f4 fe e9 59 ff ff ff [ 169.076614][ T5605] RSP: 0018:ffffc90003c67a98 EFLAGS: 00010293 [ 169.076630][ T5605] RAX: 0000000000000000 RBX: ffff888027866000 RCX: 0000000000000000 [ 169.076641][ T5605] RDX: ffff8880306d0000 RSI: ffffffff838ad45e RDI: ffff8880756c0ea0 [ 169.076654][ T5605] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1004f0cc6c [ 169.076666][ T5605] R10: ffff888027866363 R11: 0000000000000000 R12: ffff888057d83700 [ 169.076677][ T5605] R13: dffffc0000000000 R14: ffff8880756c0e80 R15: ffff888057d837b0 [ 169.076689][ T5605] FS: 000055555aef2500(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 169.076708][ T5605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.076719][ T5605] CR2: 00007f8d60befda0 CR3: 000000005a833000 CR4: 00000000003526f0 [ 169.076731][ T5605] Kernel panic - not syncing: Fatal exception [ 169.628975][ T5605] Kernel Offset: disabled [ 169.634139][ T5605] Rebooting in 86400 seconds..