last executing test programs: 10m18.966329905s ago: executing program 1 (id=126): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f00000000000000000800"], 0x2c}}, 0x20004090) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000080)={0x40, 0xf, 0x8c, "8da2fc40d28d6c462b22e2b840f0dc786c4b9c1d549b1240801e99c3dbf6f3856e557dd9400a45bb55ed41a29117723d32270234478f584cadeb41a0043ce84fc6bf9e66413762174da08801140fafa55dc3f27a7957e3cda4b4c9693d8fe768ee388916046edd0d450ea79457e775ee70c0faf4c722bad799048b7a76a1bacc0b3c349ad6214d4c579ba9f6"}, 0x0, 0x0}) 10m15.640356097s ago: executing program 1 (id=139): bind(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) 10m14.440096854s ago: executing program 1 (id=145): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000001080)={{&(0x7f00005a0000/0x1000)=nil, 0x1000}, 0x1}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r2, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) write$binfmt_elf32(r4, 0x0, 0x0) 10m12.256948119s ago: executing program 1 (id=151): socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x20240) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 10m11.461611296s ago: executing program 1 (id=154): socket$nl_sock_diag(0x10, 0x3, 0x4) timerfd_create(0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc858) r0 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x80, 0x3, 0x3ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 10m11.129208519s ago: executing program 1 (id=156): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x10080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r4, 0x29, 0xff, 0x1, 0xf8fd, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xf88c, 0x80, 0x0, 0x6a05}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 9m55.801956921s ago: executing program 32 (id=156): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x10080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r4, 0x29, 0xff, 0x1, 0xf8fd, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xf88c, 0x80, 0x0, 0x6a05}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 2m1.108409291s ago: executing program 3 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) 1m59.332223617s ago: executing program 3 (id=1548): prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x8f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0xcf, 0xc0, 0xf9, "", [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x8d, {{0x5}, {0x5, 0x24, 0x0, 0xbf}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x26, 0x9, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xe}, @mdlm={0x15, 0x24, 0x12, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xd}, @mdlm_detail={0x13, 0x24, 0x13, 0x4, "bed19f4871b8bed1e3dbfa10bec856"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x4, 0x33}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x6, 0x17}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0xe, 0x4, 0xa7, 0x8, 0x40}, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 1m57.838548347s ago: executing program 3 (id=1551): close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="23000000010006", 0x7) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x3, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xd, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x80003, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0xfff, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x5, 0x0, 0x2, 0x0, 0xc, 0x3, 0xb, 0xd, 0x8000, 0x5, 0x7, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000002, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000009, 0x3, 0x83, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x0, 0x7, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x5, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2850, 0x100, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0x3, 0x4, 0xffffffff, 0x7fff, 0xffff8a32, 0xfffffff8, 0xf, 0x5, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfffffffd}, 0x18) getsockopt$inet_mreqsrc(r3, 0x0, 0xe, 0x0, &(0x7f0000000400)) 1m53.771200567s ago: executing program 3 (id=1544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x204) listen(r2, 0xfffffffd) socket$inet(0xa, 0x801, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x108}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004080) 1m52.711230594s ago: executing program 3 (id=1549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xb4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x8, 0x80000001, 0x0, 0x4, 0x6}}, {0x4}}]}]}, 0xb4}}, 0x0) 1m51.461243411s ago: executing program 3 (id=1553): unshare(0x60000000) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x671d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000700)={'\x00', 0x8000, 0x3ff, 0x8001, 0xa, 0xe240000000000000, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0xe4f, 0xf27d, 0xfffffffffffffffb, 0x26, 0x4, 0xd43, 0xc615, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0x83, 0xe0, 0x8, 0x7, 0x8, 0x9, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x4, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0x5, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x8, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0x10001, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x37, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x7, 0x200, 0x5c6, 0x63a, 0xba2, 0x0, 0x2, 0x5, 0xffffffffffffa0e5, 0x8000000000000001, 0x5, 0x1e1, 0x6, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x26, 0x3, 0x9, 0x80000000f, 0x9, 0x8, 0xf6, 0x200, 0x7, 0x7fffffffffffffff, 0xf5d, 0x3, 0x9]}) 1m36.23348316s ago: executing program 33 (id=1553): unshare(0x60000000) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x671d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000700)={'\x00', 0x8000, 0x3ff, 0x8001, 0xa, 0xe240000000000000, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0xe4f, 0xf27d, 0xfffffffffffffffb, 0x26, 0x4, 0xd43, 0xc615, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0x83, 0xe0, 0x8, 0x7, 0x8, 0x9, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x4, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0x5, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x8, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0x10001, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x37, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x7, 0x200, 0x5c6, 0x63a, 0xba2, 0x0, 0x2, 0x5, 0xffffffffffffa0e5, 0x8000000000000001, 0x5, 0x1e1, 0x6, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x26, 0x3, 0x9, 0x80000000f, 0x9, 0x8, 0xf6, 0x200, 0x7, 0x7fffffffffffffff, 0xf5d, 0x3, 0x9]}) 18.981534344s ago: executing program 4 (id=1704): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb635773f06ebbeea, 0x8031, r0, 0xb2095000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) truncate(0x0, 0x42dc) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6300, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) 18.652238928s ago: executing program 0 (id=1705): r0 = gettid() getpgrp(r0) timer_create(0x4, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40440, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xd1, 0x0, 0x0) 15.512117693s ago: executing program 4 (id=1708): preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x0) unshare(0x40000000) unshare(0x2020200) setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x40) 15.432416709s ago: executing program 5 (id=1709): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000850000007a0000001801000020646c250000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 15.261824679s ago: executing program 0 (id=1710): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = gettid() prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x19, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) tkill(r1, 0x7) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 14.775149019s ago: executing program 5 (id=1711): ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x3, 0x2, 0x4, 0x1, 0x0, {}, {0x2, 0xc, 0x81, 0x1, 0x2, 0x2, "1b436a41"}, 0x1, 0x2, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x2040403) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0x3, 0x4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) 13.874704894s ago: executing program 0 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$getregs(0xe, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000007c0)}, 0x20) 12.620731123s ago: executing program 5 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x76e3, &(0x7f0000000540)={0x0, 0x854c, 0x8, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x1800}, {0x0, 0xfffe}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0x0, 0x800}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0xe]) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) 10.648258924s ago: executing program 6 (id=1716): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r1, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 8.417932127s ago: executing program 0 (id=1717): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) 7.767315492s ago: executing program 6 (id=1718): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000164000/0x7000)=nil], 0x0, &(0x7f0000000040), 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) sysfs$3(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xa58, @private0, 0x7}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x4}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r4, @in6={{0xa, 0x4e23, 0x10000, @loopback, 0x10}}, 0x8, 0x0, 0x2, 0x9018, 0x0, 0x3a, 0x1d}, 0x9c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'vlan0\x00', @random="010000201079"}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f259", 0x3}], 0x1) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x0, 0x6, 0xc, 0x400000000, 0x6, 0xf73b], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.214073969s ago: executing program 4 (id=1720): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000140)={0x0, 0xcf, 0x9e, 0x1, 0x6}) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(xcbc(camellia-generic))\x00'}, 0x58) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0xa0000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xfff5, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 6.462727031s ago: executing program 2 (id=1721): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x4e21, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d5, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x3}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'blake2s-224-arm\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x24044884) 6.385781114s ago: executing program 6 (id=1722): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x2c}}, 0x18) 6.082234127s ago: executing program 5 (id=1723): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002380)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000000100)='1', 0x1) 5.315685911s ago: executing program 6 (id=1724): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r3, &(0x7f0000001600), &(0x7f0000001700)=@udp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000040)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='tps6598x 0x20\n', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0xcb22) clock_gettime(0x1, &(0x7f0000000000)) 5.271191064s ago: executing program 2 (id=1725): userfaultfd(0x801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) 5.185549875s ago: executing program 5 (id=1726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x6040, 0x25, 0x4}, 0x18) ioctl$FIBMAP(r1, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x48080) timer_settime(0x0, 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) fchmod(r0, 0x90) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @empty, @local, [@srh={0x86, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x4) 4.380899661s ago: executing program 2 (id=1727): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x93) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.334641245s ago: executing program 4 (id=1728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_secret(0x80000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000340)=""/231) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = dup(0xffffffffffffffff) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) name_to_handle_at(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@isofs={0x14, 0x1, {0x547, 0x7f, 0x7, 0x8, 0x8, 0x82}}, &(0x7f0000000100), 0x0) shmctl$SHM_LOCK(0x0, 0xb) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x5d}, @initr0, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 4.049020696s ago: executing program 0 (id=1729): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d85f10"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x140, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x64, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0xfffffce1, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xaf6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe39c64e3f41b6e89}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x41) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) fcntl$lock(r3, 0x25, &(0x7f00000002c0)={0x1, 0x0, 0x6, 0x3, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000440), 0x3) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000041) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x20004890) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESDEC=r7], 0x24}}, 0x4010) 3.28719439s ago: executing program 4 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000480)=0x4, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, "020240", 0x4e, 0xfe}) 3.276636707s ago: executing program 5 (id=1731): mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0xbec75000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) 3.259939482s ago: executing program 6 (id=1732): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000020000000000800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x4024001}, 0x0) mmap(&(0x7f0000568000/0x3000)=nil, 0x3000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r3, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r3, 0x2, 0xf, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3.201541332s ago: executing program 2 (id=1733): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x1, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.237447217s ago: executing program 4 (id=1734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) listen(r3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sync() sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) 2.219307182s ago: executing program 0 (id=1735): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x2e5, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) 2.110947507s ago: executing program 2 (id=1736): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2d) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r4, 0x400261f3, &(0x7f0000000000)) 1.974351822s ago: executing program 6 (id=1737): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 0s ago: executing program 2 (id=1738): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x629, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x449) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) fanotify_init(0x200, 0x0) socket(0x200000000000011, 0x2, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002aad7000fddbdf251b0000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x800) kernel console output (not intermixed with test programs): pend } for pid=8900 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2672 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.048467][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 260.111412][ T8929] input: syz0 as /devices/virtual/input/input14 [ 260.154685][ T8935] FAULT_INJECTION: forcing a failure. [ 260.154685][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 260.154717][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.4.683 Not tainted syzkaller #0 PREEMPT(full) [ 260.154742][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.154756][ T8935] Call Trace: [ 260.154763][ T8935] [ 260.154772][ T8935] dump_stack_lvl+0x100/0x190 [ 260.154811][ T8935] should_fail_ex.cold+0x5/0xa [ 260.154846][ T8935] should_failslab+0xc2/0x120 [ 260.154878][ T8935] __kmalloc_cache_noprof+0x91/0x6d0 [ 260.154900][ T8935] ? iovec_from_user+0xda/0x140 [ 260.154930][ T8935] ? io_queue_sqe_fallback.cold+0x62/0x393 [ 260.154962][ T8935] io_queue_sqe_fallback.cold+0x62/0x393 [ 260.154991][ T8935] io_submit_sqes+0x165c/0x2480 [ 260.155037][ T8935] __do_sys_io_uring_enter+0xa88/0x1b10 [ 260.155072][ T8935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.155105][ T8935] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 260.155134][ T8935] ? __x64_sys_futex+0x34f/0x4d0 [ 260.155165][ T8935] ? __x64_sys_futex+0x358/0x4d0 [ 260.155200][ T8935] ? xfd_validate_state+0x129/0x190 [ 260.155239][ T8935] do_syscall_64+0x123/0x790 [ 260.155268][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.155292][ T8935] RIP: 0033:0x7f12a9d9e159 [ 260.155311][ T8935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.155333][ T8935] RSP: 002b:00007f12aac3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 260.155357][ T8935] RAX: ffffffffffffffda RBX: 00007f12aa025fa0 RCX: 00007f12a9d9e159 [ 260.155372][ T8935] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 260.155387][ T8935] RBP: 00007f12a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 260.155401][ T8935] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 260.155422][ T8935] R13: 00007f12aa026038 R14: 00007f12aa025fa0 R15: 00007fff83abbda8 [ 260.155455][ T8935] [ 260.340007][ T30] audit: type=1400 audit(1791173695.159:564): avc: denied { write } for pid=8938 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.350407][ T30] audit: type=1400 audit(1791173695.159:565): avc: denied { unlink } for pid=8938 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2672 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.548715][ T30] audit: type=1800 audit(1791173696.359:566): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.694" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 261.591750][ T8961] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 261.673317][ T8961] bond3: entered promiscuous mode [ 261.673730][ T8961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.743465][ T8961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.743840][ T8961] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 261.743861][ T8961] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 261.803792][ T8961] bond3: (slave wireguard0): making interface the new active one [ 261.803815][ T8961] wireguard0: entered promiscuous mode [ 261.822840][ T8961] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 261.906807][ T984] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 262.290794][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.333762][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.594337][ T30] audit: type=1400 audit(1791173697.399:567): avc: denied { connect } for pid=8964 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.318422][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.320737][ T984] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice= 0.40 [ 264.323868][ T984] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 264.323903][ T984] usb 5-1: can't read configurations, error -71 [ 264.598574][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 264.598588][ T30] audit: type=1800 audit(1791173699.409:570): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.709" name="file1" dev="sda1" ino=2058 res=0 errno=0 [ 266.121181][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.133054][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.191028][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.366301][ T30] audit: type=1400 audit(1791173701.169:571): avc: denied { connect } for pid=9015 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.504613][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.524864][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.615468][ T30] audit: type=1400 audit(1791173701.419:572): avc: denied { write } for pid=8997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.631799][ T8996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.631821][ T8996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.709184][ T8996] veth1_vlan: left promiscuous mode [ 266.730782][ T8996] veth0_vlan: left promiscuous mode [ 266.749787][ T8996] veth0_vlan: entered promiscuous mode [ 266.770692][ T8996] veth1_vlan: entered promiscuous mode [ 266.771145][ T30] audit: type=1400 audit(1791173701.579:573): avc: denied { write } for pid=9028 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.866923][ T8996] veth1_macvtap: left promiscuous mode [ 266.885043][ T8996] veth0_macvtap: left promiscuous mode [ 266.902814][ T8996] veth0_macvtap: entered promiscuous mode [ 266.915239][ T8996] veth1_macvtap: entered promiscuous mode [ 266.937868][ T30] audit: type=1400 audit(1791173701.749:574): avc: denied { read } for pid=9002 comm="syz.4.700" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 266.938059][ T30] audit: type=1400 audit(1791173701.749:575): avc: denied { open } for pid=9002 comm="syz.4.700" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 266.971117][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.998931][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.018569][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.039426][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.062804][ T8996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.088987][ T8996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.104182][ T8996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.104999][ T8996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.138190][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.138291][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.167623][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.167717][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.317864][ T5912] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.317900][ T5912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.320262][ T6167] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.320295][ T6167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.320334][ T6167] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.320361][ T6167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.320396][ T6167] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.320423][ T6167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.160695][ T30] audit: type=1400 audit(1791173703.609:576): avc: denied { connect } for pid=9044 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.160999][ T30] audit: type=1400 audit(1791173703.609:577): avc: denied { write } for pid=9044 comm="syz.5.707" lport=64043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 270.182416][ T6139] IPVS: starting estimator thread 0... [ 270.277187][ T9080] IPVS: using max 34 ests per chain, 81600 per kthread [ 270.685431][ T30] audit: type=1400 audit(1791173705.489:578): avc: denied { write } for pid=9038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.761239][ T9064] v: left promiscuous mode [ 270.875129][ T30] audit: type=1400 audit(1791173705.679:579): avc: denied { mount } for pid=9091 comm="syz.2.718" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.155732][ T30] audit: type=1400 audit(1791173706.959:580): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.248424][ T9099] binder: 9098:9099 ioctl c0306201 0 returned -14 [ 272.303041][ T30] audit: type=1400 audit(1791173707.109:581): avc: denied { write } for pid=9097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.568009][ T6003] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.619829][ T987] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.707749][ T6003] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.707795][ T6003] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.707831][ T6003] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.039103][ T987] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.039148][ T987] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 273.041944][ T987] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 273.041979][ T987] usb 1-1: can't read configurations, error -71 [ 273.550304][ T30] audit: type=1400 audit(1791173708.359:582): avc: denied { create } for pid=9113 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.974858][ T30] audit: type=1400 audit(1791173708.779:583): avc: denied { write } for pid=9112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.091971][ T30] audit: type=1400 audit(1791173709.899:584): avc: denied { write } for pid=9137 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.930352][ T9163] netlink: 68 bytes leftover after parsing attributes in process `syz.4.732'. [ 276.937011][ T30] audit: type=1400 audit(1791173711.749:585): avc: denied { name_bind } for pid=9159 comm="syz.4.732" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 276.953761][ T30] audit: type=1400 audit(1791173711.749:586): avc: denied { create } for pid=9160 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 277.034923][ T30] audit: type=1400 audit(1791173711.839:587): avc: denied { sys_admin } for pid=9160 comm="syz.0.741" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 277.272394][ T30] audit: type=1400 audit(1791173712.079:588): avc: denied { write } for pid=9150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.501349][ T30] audit: type=1400 audit(1791173712.309:589): avc: denied { write } for pid=9176 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.286151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 280.616364][ T30] audit: type=1400 audit(1791173715.419:590): avc: denied { ioctl } for pid=9210 comm="syz.3.740" path="socket:[20692]" dev="sockfs" ino=20692 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.656014][ T5706] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 282.115821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 282.185823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 282.315592][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.315634][ T5706] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 282.319795][ T30] audit: type=1400 audit(1791173717.129:591): avc: denied { write } for pid=9188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.363512][ T5706] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 282.363532][ T5706] usb 5-1: can't read configurations, error -71 [ 282.641283][ T30] audit: type=1400 audit(1791173717.449:592): avc: denied { lock } for pid=9225 comm="syz.3.744" path="socket:[21578]" dev="sockfs" ino=21578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 282.735459][ T30] audit: type=1400 audit(1791173717.539:593): avc: denied { write } for pid=9227 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.294718][ T9243] tc_dump_action: action bad kind [ 289.821981][ T30] audit: type=1400 audit(1791173724.629:594): avc: denied { write } for pid=9300 comm="syz.2.767" name="functions" dev="configfs" ino=17768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.853906][ T9301] file system registered [ 289.941452][ T30] audit: type=1400 audit(1791173724.749:595): avc: denied { write } for pid=9300 comm="syz.2.767" name="functions" dev="configfs" ino=17768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.992123][ T30] audit: type=1400 audit(1791173724.789:596): avc: denied { remove_name } for pid=9300 comm="syz.2.767" name="ffs.usb0" dev="configfs" ino=20814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.992301][ T30] audit: type=1400 audit(1791173724.799:597): avc: denied { rmdir } for pid=9300 comm="syz.2.767" name="ffs.usb0" dev="configfs" ino=20814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.002603][ T9302] unloading [ 290.052726][ T30] audit: type=1400 audit(1791173724.859:598): avc: denied { mount } for pid=9300 comm="syz.2.767" name="/" dev="functionfs" ino=21731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 290.117173][ T9301] ffs_data_put(): freeing [ 291.541652][ T30] audit: type=1400 audit(1791173726.349:599): avc: denied { write } for pid=9320 comm="syz.4.773" name="nullb" dev="configfs" ino=3467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 291.613500][ T30] audit: type=1400 audit(1791173726.419:600): avc: denied { write } for pid=9320 comm="syz.4.773" name="zoned" dev="configfs" ino=20841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 291.613835][ T30] audit: type=1400 audit(1791173726.419:601): avc: denied { open } for pid=9320 comm="syz.4.773" path="/140/config/nullb/rnullb0/zoned" dev="configfs" ino=20841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 291.715428][ T9321] null_blk: rnullb0: using native zone append [ 291.950532][ T9321] null_blk: disk rnullb0 created [ 293.615010][ T9342] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 293.921636][ T9353] team0: Device wg0 is of different type [ 293.975865][ T30] audit: type=1400 audit(1791173728.779:602): avc: denied { getopt } for pid=9344 comm="syz.4.779" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.150903][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 297.708129][ T9377] hsr_slave_1 (unregistering): left promiscuous mode [ 298.408077][ T30] audit: type=1400 audit(1791173733.219:603): avc: denied { accept } for pid=9380 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.644452][ T9393] veth0_macvtap: Caught tx_queue_len zero misconfig [ 298.676169][ T5707] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 298.816812][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 298.839746][ T5707] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 298.842985][ T5707] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 298.843032][ T5707] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 298.843056][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.855966][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 298.855991][ T5707] usb 5-1: Product: syz [ 298.856008][ T5707] usb 5-1: Manufacturer: syz [ 298.856024][ T5707] usb 5-1: SerialNumber: syz [ 298.908869][ T5707] usb 5-1: config 0 descriptor?? [ 298.912057][ T5707] hub 5-1:0.0: bad descriptor, ignoring hub [ 298.912080][ T5707] hub 5-1:0.0: probe with driver hub failed with error -5 [ 298.915489][ T5707] usb 5-1: selecting invalid altsetting 0 [ 299.076051][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 299.314736][ T5720] usb 5-1: USB disconnect, device number 22 [ 300.338764][ T9412] udevd[9412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.225870][ T30] audit: type=1400 audit(1791173737.029:604): avc: denied { write } for pid=9421 comm="syz.5.800" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 302.225964][ T30] audit: type=1400 audit(1791173737.029:605): avc: denied { open } for pid=9421 comm="syz.5.800" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 302.235590][ T30] audit: type=1400 audit(1791173737.039:606): avc: denied { setattr } for pid=9421 comm="syz.5.800" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 302.318399][ T30] audit: type=1400 audit(1791173737.129:607): avc: denied { create } for pid=9445 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 302.354351][ T30] audit: type=1400 audit(1791173737.159:608): avc: denied { getopt } for pid=9445 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 302.355274][ T30] audit: type=1400 audit(1791173737.159:609): avc: denied { write } for pid=9445 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 302.515695][ T30] audit: type=1400 audit(1791173737.319:610): avc: denied { create } for pid=9448 comm="syz.4.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 302.657356][ T9451] fuse: fd is not a fuse device [ 303.255721][ T30] audit: type=1400 audit(1791173738.059:611): avc: denied { bind } for pid=9453 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.895939][ T30] audit: type=1400 audit(1791173739.699:612): avc: denied { create } for pid=9486 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.577530][ T9502] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 305.577572][ T9502] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 305.577619][ T9502] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 305.586406][ T9502] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 306.101919][ T9507] fuse: fd is not a fuse device [ 306.939134][ T30] audit: type=1800 audit(1791173741.749:613): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.825" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 307.053767][ T9515] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 307.975907][ T5707] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 308.089509][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.089550][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.099999][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.100035][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.145915][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 308.146582][ T5707] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 308.147729][ T5707] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 308.147755][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.147777][ T5707] usb 5-1: config 0 has no interface number 0 [ 308.147815][ T5707] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 308.147843][ T5707] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 308.147870][ T5707] usb 5-1: config 0 interface 98 has no altsetting 0 [ 308.149724][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.149746][ T5707] usb 5-1: Product: syz [ 308.149763][ T5707] usb 5-1: Manufacturer: syz [ 308.149780][ T5707] usb 5-1: SerialNumber: syz [ 308.155490][ T5707] usb 5-1: config 0 descriptor?? [ 308.158982][ T9520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.159161][ T9520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.405127][ T9520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.405320][ T9520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.438248][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.431237][ T9552] fuse: fd is not a fuse device [ 310.127103][ T30] audit: type=1400 audit(1791173744.929:614): avc: denied { mounton } for pid=9555 comm="syz.5.837" path="/file0" dev="autofs" ino=22114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 310.217984][ T5707] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 310.218019][ T5707] asix 5-1:0.98 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 310.218209][ T5707] asix 5-1:0.98: probe with driver asix failed with error -71 [ 310.258302][ T9552] orangefs_mount: mount request failed with -4 [ 310.275244][ T5707] usb 5-1: USB disconnect, device number 23 [ 310.498165][ T30] audit: type=1400 audit(1791173745.289:615): avc: denied { shutdown } for pid=9563 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.591541][ T9568] syzkaller0: entered promiscuous mode [ 310.591562][ T9568] syzkaller0: entered allmulticast mode [ 310.695954][ T30] audit: type=1400 audit(1791173745.459:616): avc: denied { read } for pid=9563 comm="syz.3.840" path="socket:[21247]" dev="sockfs" ino=21247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 311.769835][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.781274][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.784623][ T30] audit: type=1400 audit(1791173747.589:617): avc: denied { bind } for pid=9574 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 314.075811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 314.676564][ T30] audit: type=1400 audit(1791173748.669:618): avc: denied { write } for pid=9574 comm="syz.4.842" path="socket:[21259]" dev="sockfs" ino=21259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.236173][ T5720] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 315.385941][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 315.400194][ T5720] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 315.401687][ T5720] usb 6-1: config 0 has no interfaces? [ 315.423569][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.423630][ T5720] usb 6-1: Product: syz [ 315.423666][ T5720] usb 6-1: Manufacturer: syz [ 315.423701][ T5720] usb 6-1: SerialNumber: syz [ 315.802036][ T5720] usb 6-1: config 0 descriptor?? [ 316.167235][ T9595] fuse: fd is not a fuse device [ 320.464182][ T9618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.500190][ T9622] bond4 (unregistering): Released all slaves [ 322.920594][ T30] audit: type=1800 audit(1791173757.729:619): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.861" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 322.921027][ T30] audit: type=1800 audit(1791173757.729:620): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.861" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 323.916628][ T5720] usb 6-1: USB disconnect, device number 8 [ 324.149025][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.863'. [ 324.337562][ T9657] team0 (unregistering): Port device team_slave_0 removed [ 324.345191][ T9657] team0 (unregistering): Port device team_slave_1 removed [ 324.448118][ T30] audit: type=1400 audit(1791173759.259:621): avc: denied { ioctl } for pid=9668 comm="syz.0.867" path="socket:[21347]" dev="sockfs" ino=21347 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.505656][ T30] audit: type=1400 audit(1791173759.309:622): avc: denied { getopt } for pid=9668 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 331.733884][ T9728] netlink: 'syz.5.883': attribute type 1 has an invalid length. [ 332.073644][ T9728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.096435][ T30] audit: type=1400 audit(1791173766.909:623): avc: denied { create } for pid=9726 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 332.132320][ T9727] bond1: (slave veth3): Enslaving as an active interface with a down link [ 332.166892][ T30] audit: type=1400 audit(1791173766.979:624): avc: denied { write } for pid=9726 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 332.171013][ T9731] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 332.174829][ T9731] bond1: (slave batadv1): making interface the new active one [ 332.210700][ T9731] batadv1: entered promiscuous mode [ 332.211188][ T9731] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 332.491953][ T9735] batadv_slave_0: Caught tx_queue_len zero misconfig [ 333.006969][ T9727] bond1 (unregistering): (slave veth3): Releasing active interface [ 333.011112][ T9727] bond1 (unregistering): (slave batadv1): Releasing active interface [ 333.011139][ T9727] batadv1: left promiscuous mode [ 333.014390][ T9727] bond1 (unregistering): Released all slaves [ 334.010465][ T9753] No source specified [ 334.055873][ T30] audit: type=1400 audit(1791173768.819:625): avc: denied { mounton } for pid=9748 comm="syz.5.888" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 335.648734][ T6139] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.648926][ T6139] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.648985][ T6139] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.649024][ T6139] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.665805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 336.725805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 337.239501][ T6027] IPVS: starting estimator thread 0... [ 337.325908][ T9785] IPVS: using max 32 ests per chain, 76800 per kthread [ 337.566014][ T9787] syz_tun: entered allmulticast mode [ 337.585739][ T9787] syz_tun: left allmulticast mode [ 337.674252][ T30] audit: type=1400 audit(1791173772.479:626): avc: denied { read write } for pid=9790 comm="syz.4.898" name="sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 337.674618][ T30] audit: type=1400 audit(1791173772.479:627): avc: denied { open } for pid=9790 comm="syz.4.898" path="/dev/sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 337.737712][ T30] audit: type=1400 audit(1791173772.549:628): avc: denied { ioctl } for pid=9790 comm="syz.4.898" path="/dev/sg0" dev="devtmpfs" ino=857 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 338.260387][ T30] audit: type=1400 audit(1791173773.069:629): avc: denied { read } for pid=9797 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.424252][ T9803] vlan0: entered promiscuous mode [ 338.424291][ T9803] hsr0: entered promiscuous mode [ 338.424711][ T9803] vlan0: entered allmulticast mode [ 338.424744][ T9803] hsr0: entered allmulticast mode [ 338.424761][ T9803] hsr_slave_0: entered allmulticast mode [ 338.480853][ T30] audit: type=1400 audit(1791173773.289:630): avc: denied { bind } for pid=9805 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.506449][ T30] audit: type=1400 audit(1791173773.289:631): avc: denied { read } for pid=9805 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.530950][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.901'. [ 338.531280][ T9804] hsr_slave_0: left promiscuous mode [ 338.560907][ T30] audit: type=1400 audit(1791173773.369:632): avc: denied { write } for pid=9805 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.856730][ T9814] netlink: 'syz.5.904': attribute type 1 has an invalid length. [ 338.955154][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.904'. [ 338.994103][ T9814] bond1: entered promiscuous mode [ 339.002554][ T9814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.020908][ T9817] bond1: entered allmulticast mode [ 339.195310][ T9814] bond1: (slave bridge1): making interface the new active one [ 339.195346][ T9814] bridge1: entered promiscuous mode [ 339.195484][ T9814] bridge1: entered allmulticast mode [ 339.303480][ T9814] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 339.495190][ T9821] erspan1: entered promiscuous mode [ 339.495252][ T9821] erspan1: entered allmulticast mode [ 340.113309][ T9840] netlink: 112 bytes leftover after parsing attributes in process `syz.2.910'. [ 341.681665][ T9855] futex_wake_op: syz.2.916 tries to shift op by 144; fix this program [ 344.595799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 344.705793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 344.907155][ T30] audit: type=1400 audit(1791173779.719:633): avc: denied { read } for pid=9873 comm="syz.4.922" dev="nsfs" ino=4026532980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 344.907546][ T30] audit: type=1400 audit(1791173779.719:634): avc: denied { open } for pid=9873 comm="syz.4.922" path="net:[4026532980]" dev="nsfs" ino=4026532980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 345.807915][ T30] audit: type=1400 audit(1791173780.619:635): avc: denied { write } for pid=9883 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.297178][ T984] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 346.647778][ T984] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.734862][ T984] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 346.734971][ T984] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.544887][ T984] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 347.544956][ T984] usb 6-1: Product: syz [ 347.545415][ T984] usb 6-1: Manufacturer: syz [ 347.603349][ T984] usb 6-1: SerialNumber: syz [ 348.022335][ T984] usb 6-1: config 0 descriptor?? [ 348.064071][ T984] usb 6-1: selecting invalid altsetting 0 [ 349.339414][ T984] usb 6-1: USB disconnect, device number 9 [ 349.602801][ T9889] udevd[9889]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.608894][ T9912] syzkaller0: entered promiscuous mode [ 349.608914][ T9912] syzkaller0: entered allmulticast mode [ 350.804382][ T5609] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 350.804839][ T5609] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 350.805039][ T5609] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 350.805230][ T5609] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 350.808391][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 352.789233][ T9944] ip_tables: iptables: counters copy to user failed while replacing table [ 356.525861][ T5720] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 356.826528][ T5720] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 356.827445][ T5720] usb 6-1: config 4 has an invalid interface number: 122 but max is 0 [ 356.827470][ T5720] usb 6-1: config 4 has no interface number 0 [ 356.827499][ T5720] usb 6-1: too many endpoints for config 4 interface 122 altsetting 16: 59, using maximum allowed: 30 [ 356.827534][ T5720] usb 6-1: config 4 interface 122 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 356.827564][ T5720] usb 6-1: config 4 interface 122 has no altsetting 0 [ 356.829400][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.829425][ T5720] usb 6-1: Product: syz [ 356.829442][ T5720] usb 6-1: Manufacturer: syz [ 356.829458][ T5720] usb 6-1: SerialNumber: syz [ 357.104425][ T5720] gspca_main: mars-2.14.0 probing 093a:050f [ 357.165695][ T5720] usb 6-1: USB disconnect, device number 10 [ 357.485063][T10003] bond0: (slave bond_slave_0): Releasing backup interface [ 357.803335][T10003] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 358.469043][T10020] netlink: 'syz.5.964': attribute type 28 has an invalid length. [ 358.469085][T10020] netlink: 'syz.5.964': attribute type 29 has an invalid length. [ 358.469115][T10020] netlink: 132 bytes leftover after parsing attributes in process `syz.5.964'. [ 359.283782][ T30] audit: type=1400 audit(1791173794.089:636): avc: denied { listen } for pid=10028 comm="syz.5.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 359.305604][ T30] audit: type=1400 audit(1791173794.099:637): avc: denied { accept } for pid=10028 comm="syz.5.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 359.509087][T10036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.572473][T10039] fuse: Bad value for 'fd' [ 359.784904][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 359.784926][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 359.812740][T10036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.859203][T10038] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 359.859245][T10038] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'. [ 359.863782][T10036] bond2: (slave bond0): making interface the new active one [ 359.864490][T10036] bond2: (slave bond0): Enslaving as an active interface with an up link [ 359.924778][T10038] .`: renamed from bond0 (while UP) [ 360.630845][T10054] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5603] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10054] [ 363.442889][T10077] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 363.518331][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 363.583659][T10077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.821303][T10083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.319238][T10084] bond1: (slave bridge2): making interface the new active one [ 365.337099][T10084] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 365.387795][T10087] bond2 (unregistering): Released all slaves [ 366.026232][T10102] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 366.026260][T10102] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 366.027221][T10102] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 366.027452][T10102] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 369.522841][ T30] audit: type=1400 audit(1791173804.329:638): avc: denied { write } for pid=10157 comm="syz.5.998" name="functions" dev="configfs" ino=17768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 369.524168][T10158] file system registered [ 369.596008][T10158] ffs_data_put(): freeing [ 373.209458][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.209552][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.723720][T10200] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 374.411648][T10199] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1009'. [ 374.628790][T10205] team_slave_1: Caught tx_queue_len zero misconfig [ 375.192682][T10207] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 375.192722][T10207] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 375.219774][ T30] audit: type=1400 audit(1791173810.019:639): avc: denied { firmware_load } for pid=10201 comm="syz.0.1012" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 375.219936][T10207] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 376.917118][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 379.276205][T10231] Î: renamed from bond_slave_0 [ 379.618355][T10258] fuse: Bad value for 'fd' [ 382.816925][ T30] audit: type=1400 audit(1791173817.619:640): avc: denied { mount } for pid=10283 comm="syz.5.1031" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 383.456995][ T30] audit: type=1400 audit(1791173818.219:641): avc: denied { shutdown } for pid=10290 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 383.457139][ T30] audit: type=1400 audit(1791173818.219:642): avc: denied { read } for pid=10290 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.217184][ T30] audit: type=1400 audit(1791173822.029:643): avc: denied { watch watch_reads } for pid=10314 comm="syz.4.1041" path="/" dev="ramfs" ino=23453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 388.881095][T10333] bond2: option mode: unable to set because the bond device has slaves [ 389.131949][T10338] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1046'. [ 389.165500][T10338] bond2: (slave .`): Releasing backup interface [ 389.196063][T10338] .` (unregistering): Released all slaves [ 389.215220][ T190] infiniband syz1: ib_query_port failed (-19) [ 389.407473][ T6351] smbdirect: ib_dev[syz1] removed [ 389.568042][T10343] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 389.568082][T10343] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 389.568105][T10343] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 389.905486][T10347] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1049'. [ 389.907840][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 389.913019][T10347] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 390.318317][ T30] audit: type=1800 audit(1791173825.129:644): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1041" name="bus" dev="ramfs" ino=23454 res=0 errno=0 [ 392.362536][T10371] bridgm_slave_0: renamed from bridge_slave_0 [ 392.536417][ T30] audit: type=1804 audit(1791173827.339:645): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1057" name="bus" dev="ramfs" ino=24313 res=1 errno=0 [ 392.539294][ T30] audit: type=1804 audit(1791173827.349:646): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1057" name="bus" dev="ramfs" ino=24313 res=1 errno=0 [ 393.563123][ T30] audit: type=1400 audit(1791173828.339:647): avc: denied { create } for pid=10381 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 397.083534][T10408] fuse: Bad value for 'fd' [ 397.180393][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 397.445063][T10420] xt_hashlimit: max too large, truncated to 1048576 [ 397.445223][T10420] xt_hashlimit: overflow, rate too high: 0 [ 398.174193][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 399.640936][T10438] xt_TPROXY: Can be used only with -p tcp or -p udp [ 399.651715][T10438] ip_tables: iptables: counters copy to user failed while replacing table [ 399.654756][T10438] ip_tables: iptables: counters copy to user failed while replacing table [ 399.904970][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 400.260988][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 406.877067][ T30] audit: type=1326 audit(1791173841.689:648): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.877433][ T30] audit: type=1326 audit(1791173841.689:649): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.879295][ T30] audit: type=1326 audit(1791173841.689:650): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.879897][ T30] audit: type=1326 audit(1791173841.689:651): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.880974][ T30] audit: type=1326 audit(1791173841.689:652): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.881365][ T30] audit: type=1326 audit(1791173841.689:653): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.882207][ T30] audit: type=1326 audit(1791173841.689:654): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.882548][ T30] audit: type=1326 audit(1791173841.689:655): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.883387][ T30] audit: type=1326 audit(1791173841.689:656): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033259e159 code=0x7ffc0000 [ 406.883860][ T30] audit: type=1326 audit(1791173841.689:657): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f033255e98e code=0x7ffc0000 [ 406.986479][T10528] ceph: separator ':' missing in source [ 409.399530][T10553] syz_tun (unregistering): left allmulticast mode [ 409.761005][T10563] __vm_enough_memory: pid: 10563, comm: syz.2.1109, bytes: 4503599627366400 not enough memory for the allocation [ 412.442614][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 412.442647][ T30] audit: type=1400 audit(1791173847.249:697): avc: denied { read } for pid=10596 comm="syz.4.1121" path="socket:[24844]" dev="sockfs" ino=24844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 414.489934][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 414.500933][ T30] audit: type=1400 audit(1791173849.309:698): avc: denied { bind } for pid=10623 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 414.539227][T10628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.735848][ T30] audit: type=1400 audit(1791173849.529:699): avc: denied { ioctl } for pid=10631 comm="syz.0.1140" path="socket:[24880]" dev="sockfs" ino=24880 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 416.057680][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1132'. [ 425.007555][ T30] audit: type=1326 audit(1791173859.819:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e639e159 code=0x7ffc0000 [ 425.007750][ T30] audit: type=1326 audit(1791173859.819:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e639e159 code=0x7ffc0000 [ 425.162440][ T30] audit: type=1326 audit(1791173859.969:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e639e159 code=0x7ffc0000 [ 425.162498][ T30] audit: type=1326 audit(1791173859.969:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e639e159 code=0x7ffc0000 [ 425.162545][ T30] audit: type=1326 audit(1791173859.969:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff5e639e159 code=0x7ffc0000 [ 425.214400][ T30] audit: type=1326 audit(1791173860.019:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5e635e98e code=0x7ffc0000 [ 425.217417][ T30] audit: type=1326 audit(1791173860.029:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5e635e98e code=0x7ffc0000 [ 425.218646][ T30] audit: type=1326 audit(1791173860.029:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5e635e98e code=0x7ffc0000 [ 425.219848][ T30] audit: type=1326 audit(1791173860.029:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5e635e98e code=0x7ffc0000 [ 425.223100][ T30] audit: type=1326 audit(1791173860.029:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.5.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5e635e98e code=0x7ffc0000 [ 427.063909][T10726] ip_tables: iptables: counters copy to user failed while replacing table [ 427.148691][T10726] ip_tables: iptables: counters copy to user failed while replacing table [ 429.632737][T10740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.495493][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 430.495519][ T30] audit: type=1400 audit(1791173865.299:738): avc: denied { ioctl } for pid=10743 comm="syz.2.1162" path="socket:[25055]" dev="sockfs" ino=25055 ioctlcmd=0x6184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 431.709420][ T30] audit: type=1400 audit(1791173866.519:739): avc: denied { shutdown } for pid=10750 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.729196][ T30] audit: type=1400 audit(1791173866.519:740): avc: denied { read } for pid=10750 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.416803][ T30] audit: type=1400 audit(1791173868.229:741): avc: denied { getopt } for pid=10780 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.029331][ T30] audit: type=1400 audit(1791173868.819:742): avc: denied { read write } for pid=10785 comm="syz.4.1174" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 434.030186][ T30] audit: type=1400 audit(1791173868.819:743): avc: denied { open } for pid=10785 comm="syz.4.1174" path="/212/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 434.030939][ T30] audit: type=1400 audit(1791173868.829:744): avc: denied { ioctl } for pid=10785 comm="syz.4.1174" path="/212/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 434.649058][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.649174][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.899527][ T30] audit: type=1400 audit(1791173869.709:745): avc: denied { listen } for pid=10799 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.902582][ T30] audit: type=1400 audit(1791173869.709:746): avc: denied { accept } for pid=10799 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.081607][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 435.279784][T10806] hsr_slave_1 (unregistering): left promiscuous mode [ 441.251076][T10845] fuse: fd is not a fuse device [ 441.721318][T10848] fuse: fd is not a fuse device [ 444.687278][T10873] fuse: Bad value for 'fd' [ 445.032850][T10873] orangefs_mount: mount request failed with -4 [ 447.490922][T10520] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 447.573921][ T30] audit: type=1400 audit(1791173882.379:747): avc: denied { setattr } for pid=10898 comm="syz.5.1207" name="TIPC" dev="sockfs" ino=25304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.648732][T10520] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.648804][T10520] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 447.652933][T10520] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 447.688356][T10520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.688382][T10520] usb 5-1: Product: syz [ 447.688392][T10520] usb 5-1: Manufacturer: syz [ 447.688410][T10520] usb 5-1: SerialNumber: syz [ 448.027024][T10520] kvaser_usb 5-1:4.0: error -ENODEV: Cannot get usb endpoint(s) [ 448.061561][T10520] usb 5-1: USB disconnect, device number 24 [ 450.985302][ T30] audit: type=1400 audit(1791173885.779:748): avc: denied { append } for pid=10936 comm="syz.4.1216" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.142718][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 452.664455][T10963] syz_tun: left allmulticast mode [ 452.664482][T10963] syz_tun: left promiscuous mode [ 452.664685][T10963] bridge0: port 3(syz_tun) entered disabled state [ 452.698571][T10963] bridge_slave_1: left allmulticast mode [ 452.698595][T10963] bridge_slave_1: left promiscuous mode [ 452.708492][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.945457][T10963] bridge_slave_0: left allmulticast mode [ 452.945512][T10963] bridge_slave_0: left promiscuous mode [ 452.947909][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.021354][T10974] CIFS mount error: No usable UNC path provided in device string! [ 453.021354][T10974] [ 453.021812][T10974] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 453.650455][T10970] ipvlan1: Caught tx_queue_len zero misconfig [ 453.745056][T10977] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1223'. [ 453.768781][T10978] tipc: Enabled bearer , priority 0 [ 453.771815][T10966] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1223'. [ 459.338200][T11041] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 459.338526][T11041] Error validating options; rc = [-22] [ 459.351634][T11041] vlan0: entered promiscuous mode [ 459.430184][T11041] team0: Port device vlan0 added [ 459.625015][T11040] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 460.810298][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 460.816105][T11047] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 460.866109][ T6063] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 460.899473][T11040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.066127][ T6063] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 461.640644][T11065] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 462.799456][ T30] audit: type=1800 audit(1791173897.609:749): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1251" name="nullb0" dev="tmpfs" ino=1518 res=0 errno=0 [ 463.884143][T11082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.320475][T11105] ip_tables: iptables: counters copy to user failed while replacing table [ 467.326085][T11105] tipc: New replicast peer: 172.20.20.187 [ 467.326610][T11105] tipc: Enabled bearer , priority 10 [ 468.814869][T11110] fuse: fd is not a fuse device [ 469.593168][ T30] audit: type=1400 audit(1791173904.089:750): avc: denied { kexec_image_load } for pid=11111 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 471.956043][T11137] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1268'. [ 473.364401][ T30] audit: type=1400 audit(1791173908.169:751): avc: denied { bind } for pid=11152 comm="syz.3.1275" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 473.399260][ T30] audit: type=1400 audit(1791173908.209:752): avc: denied { node_bind } for pid=11152 comm="syz.3.1275" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 474.066101][ T190] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 474.676807][ T190] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 474.678103][ T190] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 474.678130][ T190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.678210][ T190] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 474.680324][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.680350][ T190] usb 5-1: Product: syz [ 474.680366][ T190] usb 5-1: Manufacturer: syz [ 474.680383][ T190] usb 5-1: SerialNumber: syz [ 477.017290][ T6035] IPVS: starting estimator thread 0... [ 477.105824][T11190] IPVS: using max 33 ests per chain, 79200 per kthread [ 478.499650][ T44] usb 5-1: USB disconnect, device number 25 [ 487.646438][T11259] syzkaller0: entered promiscuous mode [ 487.646462][T11259] syzkaller0: entered allmulticast mode [ 487.660745][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 487.760363][T11263] vlan2: entered allmulticast mode [ 487.760385][T11263] bridge1: entered allmulticast mode [ 487.782553][T11263] bridge1: port 1(erspan0) entered blocking state [ 487.783333][T11263] bridge1: port 1(erspan0) entered disabled state [ 487.783453][T11263] erspan0: entered allmulticast mode [ 487.806413][T11263] erspan0: entered promiscuous mode [ 487.807289][T11263] bridge1: port 1(erspan0) entered blocking state [ 487.807389][T11263] bridge1: port 1(erspan0) entered forwarding state [ 487.867842][T11263] erspan0: left allmulticast mode [ 487.867867][T11263] erspan0: left promiscuous mode [ 487.868055][T11263] bridge1: port 1(erspan0) entered disabled state [ 487.907657][T11263] bridge_slave_0: left allmulticast mode [ 487.907682][T11263] bridge_slave_0: left promiscuous mode [ 487.909450][T11263] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.081468][T11263] bridge_slave_1: left allmulticast mode [ 490.081493][T11263] bridge_slave_1: left promiscuous mode [ 490.081659][T11263] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.171387][T11263] bond0: (slave bond_slave_0): Releasing backup interface [ 490.173907][T11263] bond_slave_0: left promiscuous mode [ 490.207563][T11263] bond0: (slave bond_slave_1): Releasing backup interface [ 490.209559][T11263] bond_slave_1: left promiscuous mode [ 490.238855][T11263] team0: Port device team_slave_0 removed [ 490.263670][T11263] team0: Port device team_slave_1 removed [ 490.348474][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.348498][T11263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.377498][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.377519][T11263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.410585][T11263] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 491.641830][T11288] macvlan1: entered allmulticast mode [ 491.641866][T11288] veth1_vlan: entered allmulticast mode [ 495.531753][T11321] team_slave_1: Caught tx_queue_len zero misconfig [ 495.558740][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 495.558907][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 495.594412][T11321] ceph: No mds server is up or the cluster is laggy [ 496.590546][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.590602][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.369076][T11353] veth0: Caught tx_queue_len zero misconfig [ 506.906974][T11431] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 508.507553][T11438] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11439] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11438] [ 509.656234][ T30] audit: type=1400 audit(1791173944.459:753): avc: denied { execute } for pid=11435 comm="syz.0.1347" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 514.082193][T11485] bond0: (slave bond_slave_0): Releasing backup interface [ 515.010380][ T30] audit: type=1326 audit(1791173949.769:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12a9d9e159 code=0x0 [ 515.931968][T11490] bond0: (slave bond_slave_1): Releasing backup interface [ 516.092482][T11498] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 516.094794][T10520] syz5: Port: 1 Link DOWN [ 516.109217][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'. [ 516.131793][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.145493][ T6027] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 516.256893][T11514] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1365'. [ 516.256917][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'. [ 516.256930][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 516.316898][ T6351] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 516.321550][ T30] audit: type=1400 audit(1791173951.129:755): avc: denied { getopt } for pid=11505 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 516.423998][ T984] syz5: Port: 1 Link ACTIVE [ 519.243703][T11542] netlink: zone id is out of range [ 519.243735][T11542] netlink: zone id is out of range [ 519.243761][T11542] netlink: zone id is out of range [ 519.243785][T11542] netlink: zone id is out of range [ 519.243810][T11542] netlink: zone id is out of range [ 519.243834][T11542] netlink: zone id is out of range [ 519.244212][T11542] netlink: zone id is out of range [ 519.244240][T11542] netlink: zone id is out of range [ 520.594353][T11550] overlayfs: failed to clone lowerpath [ 526.557855][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 526.558664][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 527.889064][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 527.889251][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 527.919516][T11617] ceph: No mds server is up or the cluster is laggy [ 530.212110][T11639] fuse: fd is not a fuse device [ 535.439154][T11661] tipc: Started in network mode [ 535.439184][T11661] tipc: Node identity 7f000001, cluster identity 4711 [ 535.439246][T11661] tipc: Enabling of bearer rejected, failed to enable media [ 536.406860][T11664] net_ratelimit: 149 callbacks suppressed [ 536.406886][T11664] ip_tables: iptables: counters copy to user failed while replacing table [ 541.382893][T11682] overlayfs: failed to clone lowerpath [ 542.523252][ T30] audit: type=1400 audit(1791173977.329:756): avc: denied { connect } for pid=11693 comm="syz.2.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 542.656270][ T30] audit: type=1400 audit(1791173977.469:757): avc: denied { setopt } for pid=11695 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 543.272485][ T30] audit: type=1400 audit(1791173978.079:758): avc: denied { ioctl } for pid=11700 comm="syz.5.1418" path="socket:[27577]" dev="sockfs" ino=27577 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 545.427280][T10520] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 546.509561][T10520] usb 5-1: Using ep0 maxpacket: 16 [ 546.517689][T10520] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 546.540803][T10520] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 546.540830][T10520] usb 5-1: config 0 has no interface number 0 [ 546.540864][T10520] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 546.540891][T10520] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 546.551553][T10520] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 546.551606][T10520] usb 5-1: Product: syz [ 546.551637][T10520] usb 5-1: Manufacturer: syz [ 546.551653][T10520] usb 5-1: SerialNumber: syz [ 546.612926][T10520] usb 5-1: config 0 descriptor?? [ 546.626891][T10520] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 546.627117][T10520] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 546.644946][T10520] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 546.670239][T10520] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 546.674168][T10520] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 546.699336][T10520] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 546.703138][T10520] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 546.732624][T10520] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 546.747295][T10520] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 546.754354][T10520] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 548.969069][ T5706] usb 5-1: USB disconnect, device number 26 [ 549.015029][ T5706] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 549.048417][ T5706] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 549.121492][ T5706] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 549.168364][ T5706] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 549.196073][ T5706] keyspan 5-1:0.107: device disconnected [ 550.169676][ T30] audit: type=1400 audit(1791173984.979:759): avc: denied { setopt } for pid=11752 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 550.178981][ T5609] Bluetooth: hci2: unexpected event for opcode 0x200a [ 550.272161][T11755] netlink: 'syz.4.1430': attribute type 1 has an invalid length. [ 550.428873][T11755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.685965][T11757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.687680][T11757] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 550.695177][T11757] bond3: (slave gre1): Error -95 calling set_mac_address [ 554.263966][ T5609] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 554.267964][ T5609] Bluetooth: hci2: Injecting HCI hardware error event [ 554.283823][ T5609] Bluetooth: hci2: hardware error 0x00 [ 554.769793][T11775] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 554.796007][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1435'. [ 554.796050][T11775] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 556.486058][ T5609] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 557.530193][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.530248][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.793270][ T30] audit: type=1400 audit(1791173992.599:760): avc: denied { connect } for pid=11809 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.819780][ T30] audit: type=1400 audit(1791173992.629:761): avc: denied { ioctl } for pid=11809 comm="syz.0.1442" path="socket:[28717]" dev="sockfs" ino=28717 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.887283][T11814] FAULT_INJECTION: forcing a failure. [ 557.887283][T11814] name failslab, interval 1, probability 0, space 0, times 0 [ 557.887321][T11814] CPU: 1 UID: 0 PID: 11814 Comm: syz.4.1443 Not tainted syzkaller #0 PREEMPT(full) [ 557.887338][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 557.887349][T11814] Call Trace: [ 557.887353][T11814] [ 557.887359][T11814] dump_stack_lvl+0x100/0x190 [ 557.887382][T11814] should_fail_ex.cold+0x5/0xa [ 557.887400][T11814] should_failslab+0xc2/0x120 [ 557.887417][T11814] __kmalloc_cache_noprof+0x91/0x6d0 [ 557.887429][T11814] ? gadget_bind_driver+0x100/0xbf0 [ 557.887445][T11814] ? dummy_alloc_request+0xa9/0x1b0 [ 557.887462][T11814] dummy_alloc_request+0xa9/0x1b0 [ 557.887476][T11814] usb_ep_alloc_request+0x6e/0x2e0 [ 557.887491][T11814] gadget_bind+0xe7/0x660 [ 557.887512][T11814] ? kernfs_create_link+0x1bd/0x240 [ 557.887533][T11814] gadget_bind_driver+0x28c/0xbf0 [ 557.887549][T11814] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 557.887564][T11814] ? __pfx_gadget_bind_driver+0x10/0x10 [ 557.887581][T11814] really_probe+0x241/0xa60 [ 557.887600][T11814] __driver_probe_device+0x210/0x460 [ 557.887615][T11814] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 557.887630][T11814] driver_probe_device+0x4a/0x140 [ 557.887647][T11814] __driver_attach+0x21f/0x5b0 [ 557.887664][T11814] ? __pfx___driver_attach+0x10/0x10 [ 557.887681][T11814] bus_for_each_dev+0x13e/0x1d0 [ 557.887695][T11814] ? __pfx_bus_for_each_dev+0x10/0x10 [ 557.887708][T11814] ? bus_add_driver+0x2b5/0x5b0 [ 557.887727][T11814] bus_add_driver+0x305/0x5b0 [ 557.887744][T11814] driver_register+0x1e2/0x360 [ 557.887761][T11814] ? rcu_is_watching+0x13/0xc0 [ 557.887779][T11814] usb_gadget_register_driver_owner+0x132/0x210 [ 557.887796][T11814] raw_ioctl+0x1a85/0x2b80 [ 557.887814][T11814] ? __pfx_raw_ioctl+0x10/0x10 [ 557.887827][T11814] ? selinux_file_ioctl+0x13b/0x290 [ 557.887843][T11814] ? selinux_file_ioctl+0xb6/0x290 [ 557.887859][T11814] ? __pfx_raw_ioctl+0x10/0x10 [ 557.887873][T11814] __x64_sys_ioctl+0x18e/0x210 [ 557.887889][T11814] do_syscall_64+0x123/0x790 [ 557.887904][T11814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.887917][T11814] RIP: 0033:0x7f12a9d9ddeb [ 557.887928][T11814] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 557.887941][T11814] RSP: 002b:00007f12aac37f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.887954][T11814] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f12a9d9ddeb [ 557.887962][T11814] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 557.887970][T11814] RBP: 00007f12aac38fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 557.887983][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.887995][T11814] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 557.888020][T11814] [ 557.888073][T11814] raw-gadget.0 gadget.4: usb_ep_alloc_request failed [ 557.888084][T11814] udc dummy_udc.4: failed to start USB Raw Gadget: -12 [ 557.888106][T11814] raw-gadget.0 gadget.4: probe with driver raw-gadget.0 failed with error -12 [ 557.891570][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.891917][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.318124][ T30] audit: type=1400 audit(1791173996.189:762): avc: denied { read } for pid=11839 comm="syz.4.1448" name="mouse0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 566.800612][T11884] SET target dimension over the limit! [ 568.784560][T11895] fuse: Bad value for 'fd' [ 574.308016][T11922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.223374][ T30] audit: type=1400 audit(1791174013.029:763): avc: denied { write } for pid=11944 comm="syz.4.1476" name="file0" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 578.224542][ T30] audit: type=1400 audit(1791174013.029:764): avc: denied { open } for pid=11944 comm="syz.4.1476" path="/268/file0" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 578.224992][ T30] audit: type=1400 audit(1791174013.029:765): avc: denied { ioctl } for pid=11944 comm="syz.4.1476" path="/268/file0" dev="tmpfs" ino=1449 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 580.087912][T11966] Illegal XDP return value 4294967294 on prog (id 129) dev N/A, expect packet loss! [ 586.132839][ T30] audit: type=1400 audit(1791174020.609:766): avc: denied { accept } for pid=12005 comm="syz.3.1490" lport=57551 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 588.913503][T12030] dummy0: left promiscuous mode [ 589.042124][T12035] tipc: Enabling of bearer rejected, failed to enable media [ 589.170244][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1481'. [ 589.733433][T12038] vlan3: entered allmulticast mode [ 589.733456][T12038] bridge2: entered allmulticast mode [ 589.764618][T12038] bridge2: port 1(erspan0) entered blocking state [ 589.764777][T12038] bridge2: port 1(erspan0) entered disabled state [ 589.764921][T12038] erspan0: entered allmulticast mode [ 589.798845][T12038] erspan0: entered promiscuous mode [ 589.799731][T12038] bridge2: port 1(erspan0) entered blocking state [ 589.799823][T12038] bridge2: port 1(erspan0) entered forwarding state [ 590.004357][T12038] erspan0: left allmulticast mode [ 590.004382][T12038] erspan0: left promiscuous mode [ 590.004575][T12038] bridge2: port 1(erspan0) entered disabled state [ 590.328680][T12038] bond0: (slave dummy0): Removing an active aggregator [ 590.383451][T12038] bond0: (slave dummy0): Releasing backup interface [ 590.730871][T12038] bridge_slave_0: left allmulticast mode [ 590.731024][T12038] bridge_slave_0: left promiscuous mode [ 590.731634][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.287381][T12038] bridge_slave_1: left allmulticast mode [ 591.287439][T12038] bridge_slave_1: left promiscuous mode [ 591.288209][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.677445][T12038] team0: Port device team_slave_0 removed [ 591.767240][T12038] team0: Port device team_slave_1 removed [ 591.768954][T12038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.771791][ T5706] syz5: Port: 1 Link DOWN [ 591.911398][T12049] syz.4.1498 (12049): drop_caches: 2 [ 594.491302][T12096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.358253][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 597.180644][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 598.415817][ T30] audit: type=1400 audit(1791174032.829:767): avc: denied { nlmsg_write } for pid=12120 comm="syz.2.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 598.415873][ T30] audit: type=1400 audit(1791174032.829:768): avc: denied { audit_write } for pid=12120 comm="syz.2.1516" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 598.415908][ T30] audit: type=1107 audit(1791174032.829:769): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 598.700972][T12118] vlan2: entered allmulticast mode [ 598.719592][T12118] bridge0: entered allmulticast mode [ 598.722881][T12127] bridge0: port 1(erspan0) entered blocking state [ 598.723045][T12127] bridge0: port 1(erspan0) entered disabled state [ 598.723168][T12127] erspan0: entered allmulticast mode [ 598.753487][T12127] erspan0: entered promiscuous mode [ 598.919876][T12118] erspan0: left allmulticast mode [ 598.919900][T12118] erspan0: left promiscuous mode [ 598.920091][T12118] bridge0: port 1(erspan0) entered disabled state [ 599.007671][T12118] team0: Port device xfrm0 removed [ 599.008000][T12118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.958312][T12144] netlink: 'syz.5.1521': attribute type 1 has an invalid length. [ 600.049501][T12144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.098757][T12146] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 600.254913][T12144] bridge2: entered promiscuous mode [ 600.260863][T12144] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 600.830274][T12156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1524'. [ 603.522117][T12174] lo: entered promiscuous mode [ 603.522282][T12174] tunl0: entered promiscuous mode [ 603.522425][T12174] gre0: entered promiscuous mode [ 603.522541][T12174] gretap0: entered promiscuous mode [ 603.522654][T12174] erspan0: entered promiscuous mode [ 603.525278][T12174] ip_vti0: entered promiscuous mode [ 603.525426][T12174] ip6_vti0: entered promiscuous mode [ 603.525537][T12174] sit0: entered promiscuous mode [ 603.525654][T12174] ip6tnl0: entered promiscuous mode [ 603.573870][T12174] ip6gre0: entered promiscuous mode [ 603.574536][T12174] syz_tun: entered promiscuous mode [ 603.574688][T12174] ip6gretap0: entered promiscuous mode [ 603.574794][T12174] vcan0: entered promiscuous mode [ 603.575018][T12174] team0: entered promiscuous mode [ 603.575151][T12174] dummy0: entered promiscuous mode [ 603.575288][T12174] nlmon0: entered promiscuous mode [ 603.575417][T12174] batadv0: entered promiscuous mode [ 603.575544][T12174] vxcan0: entered promiscuous mode [ 603.575678][T12174] vxcan1: entered promiscuous mode [ 603.635624][T12174] veth0: entered promiscuous mode [ 603.640894][T12174] veth1: entered promiscuous mode [ 603.641030][T12174] wg0: entered promiscuous mode [ 603.641158][T12174] wg1: entered promiscuous mode [ 603.641294][T12174] wg2: entered promiscuous mode [ 603.641422][T12174] veth0_to_bridge: entered promiscuous mode [ 603.641561][T12174] bridgm_slave_0: entered promiscuous mode [ 603.641693][T12174] veth1_to_bridge: entered promiscuous mode [ 603.641826][T12174] bridge_slave_1: entered promiscuous mode [ 603.641955][T12174] veth0_to_bond: entered promiscuous mode [ 603.642081][T12174] bond_slave_0: entered promiscuous mode [ 603.754141][T12174] veth1_to_bond: entered promiscuous mode [ 603.754401][T12174] bond_slave_1: entered promiscuous mode [ 603.754694][T12174] veth0_to_team: entered promiscuous mode [ 603.754931][T12174] team_slave_0: entered promiscuous mode [ 603.755185][T12174] veth1_to_team: entered promiscuous mode [ 603.755420][T12174] team_slave_1: entered promiscuous mode [ 603.760009][T12174] veth0_to_batadv: entered promiscuous mode [ 603.760277][T12174] batadv_slave_0: entered promiscuous mode [ 603.760506][T12174] veth1_to_batadv: entered promiscuous mode [ 603.760728][T12174] batadv_slave_1: entered promiscuous mode [ 603.760987][T12174] xfrm0: entered promiscuous mode [ 603.761212][T12174] veth0_to_hsr: entered promiscuous mode [ 603.761610][T12174] veth1_to_hsr: entered promiscuous mode [ 603.763287][T12174] hsr0: entered promiscuous mode [ 603.763512][T12174] veth1_virt_wifi: entered promiscuous mode [ 603.763735][T12174] veth0_virt_wifi: entered promiscuous mode [ 603.763977][T12174] virt_wifi0: entered promiscuous mode [ 603.765550][T12174] vlan0: entered promiscuous mode [ 603.765580][T12174] v: entered promiscuous mode [ 603.772913][T12174] vlan1: entered promiscuous mode [ 603.774534][T12174] macvlan0: entered promiscuous mode [ 603.774785][T12174] macvlan1: entered promiscuous mode [ 603.775052][T12174] ipvlan0: entered promiscuous mode [ 603.775288][T12174] ipvlan1: entered promiscuous mode [ 604.809602][T12174] macvtap0: entered promiscuous mode [ 604.809835][T12174] macsec0: entered promiscuous mode [ 604.810023][T12174] geneve0: entered promiscuous mode [ 604.810248][T12174] geneve1: entered promiscuous mode [ 604.810485][T12174] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 604.810680][T12174] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 604.810869][T12174] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 604.825913][T12174] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 604.826119][T12174] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 604.826350][T12174] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 604.826572][T12174] veth2: entered promiscuous mode [ 604.826780][T12174] veth3: entered promiscuous mode [ 604.827008][T12174] bond1: entered promiscuous mode [ 604.827038][T12174] geneve2: entered promiscuous mode [ 604.827536][T12174] ip6erspan0: entered promiscuous mode [ 604.827761][T12174] bond2: entered promiscuous mode [ 604.827953][T12174] syzkaller0: entered promiscuous mode [ 604.835983][T12174] ip6erspan1: entered promiscuous mode [ 604.931342][T12174] bridge0: entered promiscuous mode [ 604.960276][T12174] vlan2: entered promiscuous mode [ 604.974392][T12169] lo: Caught tx_queue_len zero misconfig [ 608.065091][T12213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1538'. [ 608.826026][ T30] audit: type=1400 audit(1791174043.499:770): avc: denied { setopt } for pid=12216 comm="syz.3.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 608.962583][T12222] overlayfs: failed to clone upperpath [ 609.699034][T12223] overlayfs: failed to clone upperpath [ 614.167284][T12261] veth0: Caught tx_queue_len zero misconfig [ 615.612332][T12264] lo: entered promiscuous mode [ 615.921561][T12276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1552'. [ 618.155497][T12264] tunl0: entered promiscuous mode [ 618.165381][T12264] gre0: entered promiscuous mode [ 618.217780][T12264] gretap0: entered promiscuous mode [ 618.237804][T12264] erspan0: entered promiscuous mode [ 618.284573][T12264] ip_vti0: entered promiscuous mode [ 618.305956][T12264] ip6_vti0: entered promiscuous mode [ 618.315958][T12264] sit0: entered promiscuous mode [ 618.320900][T12264] ip6tnl0: entered promiscuous mode [ 618.324165][T12264] ip6gre0: entered promiscuous mode [ 618.350362][T12264] ip6gretap0: entered promiscuous mode [ 618.354679][T12264] bridge0: entered promiscuous mode [ 618.365958][T12264] vcan0: entered promiscuous mode [ 618.369690][T12264] bond0: entered promiscuous mode [ 618.386968][T12264] team0: entered promiscuous mode [ 619.277663][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.277771][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.309186][T12264] nlmon0: entered promiscuous mode [ 619.332954][T12264] batadv0: entered promiscuous mode [ 619.367360][T12264] veth0: entered promiscuous mode [ 619.399264][T12264] veth1: entered promiscuous mode [ 619.467299][T12264] wg0: entered promiscuous mode [ 619.495260][T12264] wg1: entered promiscuous mode [ 619.510139][T12264] wg2: entered promiscuous mode [ 619.511842][T12264] veth0_to_bridge: entered promiscuous mode [ 619.514232][T12264] bridge_slave_0: entered promiscuous mode [ 619.516095][T12264] veth1_to_bridge: entered promiscuous mode [ 619.519105][T12264] bridge_slave_1: entered promiscuous mode [ 619.520804][T12264] veth0_to_bond: entered promiscuous mode [ 619.708547][T12264] bond_slave_0: entered promiscuous mode [ 619.711030][T12264] veth1_to_bond: entered promiscuous mode [ 619.713997][T12264] bond_slave_1: entered promiscuous mode [ 619.714300][T12264] veth0_to_team: entered promiscuous mode [ 619.719569][T12264] team_slave_0: entered promiscuous mode [ 619.720110][T12264] veth1_to_team: entered promiscuous mode [ 619.722515][T12264] team_slave_1: entered promiscuous mode [ 619.722768][T12264] veth0_to_batadv: entered promiscuous mode [ 619.725079][T12264] batadv_slave_0: entered promiscuous mode [ 619.728669][T12264] veth1_to_batadv: entered promiscuous mode [ 619.731126][T12264] batadv_slave_1: entered promiscuous mode [ 619.733334][T12264] xfrm0: entered promiscuous mode [ 619.735058][T12264] veth1_to_hsr: entered promiscuous mode [ 619.740223][T12264] hsr0: entered promiscuous mode [ 619.742438][T12264] veth1_virt_wifi: entered promiscuous mode [ 619.744629][T12264] veth0_virt_wifi: entered promiscuous mode [ 619.749554][T12264] virt_wifi0: entered promiscuous mode [ 619.755338][T12264] vlan0: entered promiscuous mode [ 619.760058][T12264] vlan1: entered promiscuous mode [ 619.763030][T12264] macvlan0: entered promiscuous mode [ 619.775353][T12264] macvlan1: entered promiscuous mode [ 620.725930][T12264] ipvlan0: entered promiscuous mode [ 620.842647][T12264] ipvlan1: entered promiscuous mode [ 620.848701][T12264] geneve0: entered promiscuous mode [ 620.851265][T12264] geneve1: entered promiscuous mode [ 620.853801][T12264] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 621.548007][T12264] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 621.608524][T12264] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 621.642023][T12264] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 621.689979][T12264] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 621.711249][T12264] ip6erspan0: entered promiscuous mode [ 621.724554][T12264] vxlan0: entered promiscuous mode [ 621.738906][T12264] bond1: entered promiscuous mode [ 621.738925][T12264] bond2: entered promiscuous mode [ 621.742182][T12264] gretap1: entered promiscuous mode [ 621.770651][T12264] erspan0.1: entered promiscuous mode [ 621.781643][T12264] bridge1: entered promiscuous mode [ 621.784109][T12264] vlan2: entered promiscuous mode [ 621.786396][ T6003] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.786457][ T6003] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.788486][ T6167] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.788530][ T6167] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.788595][ T6167] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.788650][ T6167] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.788714][ T6167] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.788756][ T6167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.769270][T12326] lo: entered promiscuous mode [ 623.770037][T12326] tunl0: entered promiscuous mode [ 623.791682][T12328] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 623.792265][T12326] gre0: entered promiscuous mode [ 623.929230][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 624.055585][T12326] 0ªî{X¹¦: entered promiscuous mode [ 624.996939][T12326] erspan0: entered promiscuous mode [ 625.756391][T12326] ip_vti0: entered promiscuous mode [ 625.763469][T12326] ip6_vti0: entered promiscuous mode [ 625.788248][T12326] sit0: entered promiscuous mode [ 625.805921][T12326] ip6tnl0: entered promiscuous mode [ 625.812567][T12326] ip6gre0: entered promiscuous mode [ 625.843834][T12326] syz_tun: entered promiscuous mode [ 625.867847][T12326] ip6gretap0: entered promiscuous mode [ 625.884641][T12326] vcan0: entered promiscuous mode [ 625.886949][T12326] bond0: entered promiscuous mode [ 625.886984][T12326] bond_slave_1: entered promiscuous mode [ 625.887295][T12326] dummy0: entered promiscuous mode [ 625.932942][T12326] team0: entered promiscuous mode [ 626.220825][T12326] team_slave_0: entered promiscuous mode [ 626.221184][T12326] team_slave_1: entered promiscuous mode [ 626.285969][T12326] nlmon0: entered promiscuous mode [ 626.297469][T12326] batadv0: entered promiscuous mode [ 626.906827][T12326] vxcan0: entered promiscuous mode [ 626.907738][T12326] vxcan1: entered promiscuous mode [ 626.914300][T12326] veth0: entered promiscuous mode [ 626.948113][T12326] veth1: entered promiscuous mode [ 626.989290][T12326] wg0: entered promiscuous mode [ 627.006334][T12326] wg1: entered promiscuous mode [ 627.027021][T12326] wg2: entered promiscuous mode [ 627.029915][T12326] veth0_to_bridge: entered promiscuous mode [ 627.035107][T12326] bridge_slave_0: entered promiscuous mode [ 627.055467][T12326] veth1_to_bridge: entered promiscuous mode [ 627.068780][T12326] bridge_slave_1: entered promiscuous mode [ 627.081900][T12326] veth0_to_bond: entered promiscuous mode [ 627.096024][T12326] Î: entered promiscuous mode [ 627.098349][T12326] veth1_to_bond: entered promiscuous mode [ 627.117584][T12326] veth0_to_team: entered promiscuous mode [ 627.133771][T12326] veth1_to_team: entered promiscuous mode [ 627.162086][T12326] veth0_to_batadv: entered promiscuous mode [ 627.175585][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.175674][T12326] batadv_slave_0: entered promiscuous mode [ 627.223956][T12326] veth1_to_batadv: entered promiscuous mode [ 627.244307][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.244404][T12326] batadv_slave_1: entered promiscuous mode [ 627.263530][T12326] xfrm0: entered promiscuous mode [ 627.296008][T12326] veth1_virt_wifi: entered promiscuous mode [ 627.300303][T12326] veth0_virt_wifi: entered promiscuous mode [ 627.316460][T12326] virt_wifi0: entered promiscuous mode [ 627.341922][T12326] vlan0: entered promiscuous mode [ 627.358991][T12326] vlan1: entered promiscuous mode [ 627.368918][T12326] macvlan0: entered promiscuous mode [ 627.396929][T12326] veth1_vlan: left allmulticast mode [ 627.398059][T12326] macvlan1: entered promiscuous mode [ 627.399725][T12326] ipvlan0: entered promiscuous mode [ 627.399859][T12326] ipvlan1: entered promiscuous mode [ 627.445407][T12326] macvtap0: entered promiscuous mode [ 627.485150][T12326] macsec0: entered promiscuous mode [ 627.502555][T12326] geneve0: entered promiscuous mode [ 627.521124][T12326] geneve1: entered promiscuous mode [ 627.545537][T12326] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 627.607803][T12326] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 627.627955][T12326] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 627.651775][T12326] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 627.734398][T12326] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 627.804643][T12326] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 627.829756][T12326] macvtap1: entered promiscuous mode [ 627.834924][T12326] bridge1: entered promiscuous mode [ 627.859925][T12326] vxlan0: entered promiscuous mode [ 627.911778][T12326] bond1: entered promiscuous mode [ 627.911827][T12326] bridge2: entered promiscuous mode [ 627.922394][T12326] vlan2: entered promiscuous mode [ 627.951191][T12326] bond2: entered promiscuous mode [ 627.951225][T12326] ip6gretap1: entered promiscuous mode [ 627.987199][T12326] bond3: entered promiscuous mode [ 627.990505][T12328] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 627.994278][T12331] veth0_to_bond: left promiscuous mode [ 628.033614][T12334] bridge2: entered promiscuous mode [ 628.275817][ T6035] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.275852][ T6035] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.275889][ T6035] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.275916][ T6035] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.275950][ T6035] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.275978][ T6035] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.276012][ T6035] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.276040][ T6035] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.934850][T11772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.950988][T11772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.953088][T11772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.975053][T11772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.989605][T11772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.368493][T12421] gtp0: entered allmulticast mode [ 635.516667][ T984] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 635.715744][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 635.716719][ T984] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 635.721299][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.721339][ T984] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.721406][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.782203][ T984] usb 5-1: config 0 descriptor?? [ 637.072957][ T5609] Bluetooth: hci1: command tx timeout [ 637.193718][ T984] usb 5-1: USB disconnect, device number 27 [ 637.720848][ T30] audit: type=1400 audit(1791174072.519:771): avc: denied { write } for pid=12431 comm="syz.4.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 639.685806][ T5609] Bluetooth: hci1: command tx timeout [ 640.256468][T12443] lo: Caught tx_queue_len zero misconfig [ 641.661809][ T5609] Bluetooth: hci3: ISO packet for unknown connection handle 201 [ 641.766033][ T5609] Bluetooth: hci1: command tx timeout [ 642.189947][T12465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 643.943604][ T5609] Bluetooth: hci1: command tx timeout [ 644.137144][T12481] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.1596'. [ 644.943518][ T30] audit: type=1400 audit(1791174079.749:772): avc: denied { write } for pid=12464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.325777][ T30] audit: type=1400 audit(1791174082.129:773): avc: denied { write } for pid=12494 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.428797][ T6063] bond1 (unregistering): (slave geneve2): Releasing active interface [ 647.520756][ T6063] bond1 (unregistering): Released all slaves [ 647.543834][ T6063] bond2 (unregistering): Released all slaves [ 647.664596][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 648.335607][T12509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.337004][ T6063] tipc: Disabling bearer [ 648.354107][ T6063] tipc: Disabling bearer [ 648.354416][ T6063] tipc: Disabling bearer [ 648.355467][ T6063] tipc: Left network mode [ 648.457086][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 648.457115][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 648.532343][T12509] bond0: left promiscuous mode [ 648.592611][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.606424][T12509] bond5: (slave bond0): making interface the new active one [ 648.607725][T12509] bond5: (slave bond0): Enslaving as an active interface with an up link [ 648.791192][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.791413][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.791612][T12407] bridge_slave_0: entered allmulticast mode [ 648.806741][T12407] bridge_slave_0: entered promiscuous mode [ 648.808769][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.810192][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.810305][T12407] bridge_slave_1: entered allmulticast mode [ 648.840450][T12407] bridge_slave_1: entered promiscuous mode [ 649.000219][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.020891][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.157135][T12541] loop9: detected capacity change from 0 to 2640 [ 649.172966][T12541] buffer_io_error: 138 callbacks suppressed [ 649.172983][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173017][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173046][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173074][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173101][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173145][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173192][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173221][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173236][T12541] ldm_validate_partition_table(): Disk read failed. [ 649.173263][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173291][T12541] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.173336][T12541] Dev loop9: unable to read RDB block 0 [ 649.173482][T12541] loop9: unable to read partition table [ 649.173664][T12541] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 649.791231][ T30] audit: type=1400 audit(1791174084.599:774): avc: denied { write } for pid=12520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.109278][T12407] team0: Port device team_slave_0 added [ 650.139758][T12407] team0: Port device team_slave_1 added [ 650.402250][T12548] FAULT_INJECTION: forcing a failure. [ 650.402250][T12548] name failslab, interval 1, probability 0, space 0, times 0 [ 650.402284][T12548] CPU: 0 UID: 0 PID: 12548 Comm: syz.4.1608 Not tainted syzkaller #0 PREEMPT(full) [ 650.402314][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.402329][T12548] Call Trace: [ 650.402337][T12548] [ 650.402346][T12548] dump_stack_lvl+0x100/0x190 [ 650.402388][T12548] should_fail_ex.cold+0x5/0xa [ 650.402422][T12548] should_failslab+0xc2/0x120 [ 650.402456][T12548] kmem_cache_alloc_noprof+0x92/0x6a0 [ 650.402485][T12548] ? __kernfs_new_node+0xd2/0xa10 [ 650.402514][T12548] __kernfs_new_node+0xd2/0xa10 [ 650.402542][T12548] ? __pfx___kernfs_new_node+0x10/0x10 [ 650.402568][T12548] ? lock_acquire+0x1d1/0x380 [ 650.402594][T12548] ? kernfs_root+0x23/0x2a0 [ 650.402628][T12548] ? find_held_lock+0x2b/0x80 [ 650.402660][T12548] ? kernfs_root+0xee/0x2a0 [ 650.402691][T12548] ? kernfs_root+0xee/0x2a0 [ 650.402732][T12548] kernfs_new_node+0x117/0x150 [ 650.402761][T12548] kernfs_create_link+0xcc/0x240 [ 650.402793][T12548] sysfs_do_create_link_sd+0x90/0x140 [ 650.402829][T12548] sysfs_create_link+0x61/0xc0 [ 650.402864][T12548] driver_sysfs_add+0x112/0x2d0 [ 650.402895][T12548] really_probe+0x146/0xa60 [ 650.402931][T12548] __driver_probe_device+0x210/0x460 [ 650.402961][T12548] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 650.402988][T12548] driver_probe_device+0x4a/0x140 [ 650.403022][T12548] __driver_attach+0x21f/0x5b0 [ 650.403053][T12548] ? __pfx___driver_attach+0x10/0x10 [ 650.403093][T12548] bus_for_each_dev+0x13e/0x1d0 [ 650.403119][T12548] ? __pfx_bus_for_each_dev+0x10/0x10 [ 650.403142][T12548] ? bus_add_driver+0x2b5/0x5b0 [ 650.403177][T12548] bus_add_driver+0x305/0x5b0 [ 650.403208][T12548] driver_register+0x1e2/0x360 [ 650.403239][T12548] ? rcu_is_watching+0x13/0xc0 [ 650.403274][T12548] usb_gadget_register_driver_owner+0x132/0x210 [ 650.403309][T12548] raw_ioctl+0x1a85/0x2b80 [ 650.403344][T12548] ? __pfx_raw_ioctl+0x10/0x10 [ 650.403369][T12548] ? selinux_file_ioctl+0x13b/0x290 [ 650.403398][T12548] ? selinux_file_ioctl+0xb6/0x290 [ 650.403430][T12548] ? __pfx_raw_ioctl+0x10/0x10 [ 650.403459][T12548] __x64_sys_ioctl+0x18e/0x210 [ 650.403488][T12548] do_syscall_64+0x123/0x790 [ 650.403517][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.403541][T12548] RIP: 0033:0x7f12a9d9ddeb [ 650.403561][T12548] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 650.403584][T12548] RSP: 002b:00007f12aac37f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.403608][T12548] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f12a9d9ddeb [ 650.403623][T12548] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 650.403637][T12548] RBP: 00007f12aac38fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 650.403651][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.403665][T12548] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 650.403696][T12548] [ 650.404139][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.404153][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.404178][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.875563][T12548] raw-gadget.0 gadget.4: really_probe: driver_sysfs_add failed [ 650.985252][ T30] audit: type=1400 audit(1791174085.789:775): avc: denied { write } for pid=12552 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.989055][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.989612][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.014115][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.014129][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.014154][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.264168][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 652.375054][T12407] hsr_slave_0: entered promiscuous mode [ 652.386221][ T30] audit: type=1804 audit(1791174087.199:776): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1613" name="bus" dev="ramfs" ino=29541 res=1 errno=0 [ 652.388530][T12407] hsr_slave_1: entered promiscuous mode [ 652.390544][T12407] debugfs: 'hsr0' already exists in 'hsr' [ 652.390568][T12407] Cannot create hsr debugfs directory [ 652.395099][ T30] audit: type=1804 audit(1791174087.199:777): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1613" name="bus" dev="ramfs" ino=29541 res=1 errno=0 [ 652.507906][T12580] futex_wake_op: syz.0.1615 tries to shift op by 144; fix this program [ 653.443445][T12567] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 658.290879][T12583] tipc: Enabling of bearer rejected, failed to enable media [ 658.694736][T12618] ip_tables: iptables: counters copy to user failed while replacing table [ 659.845933][T12618] tipc: Started in network mode [ 659.845963][T12618] tipc: Node identity ac1414aa, cluster identity 4711 [ 659.846207][T12618] tipc: New replicast peer: 172.20.20.187 [ 659.846823][T12618] tipc: Enabled bearer , priority 10 [ 660.351560][ T6063] IPVS: stop unused estimator thread 0... [ 660.442485][ T30] audit: type=1400 audit(1791174095.249:778): avc: denied { shutdown } for pid=12628 comm="iou-wrk-12629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 660.986760][T12358] tipc: Node number set to 2886997162 [ 661.042559][T12407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 661.188408][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.214178][T12407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.252069][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.261215][T12407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.311319][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.326144][T12407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 661.361416][T12407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 663.099268][T12407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.184390][T12407] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.208205][T12277] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.208306][T12277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.266424][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.266565][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.077774][ T30] audit: type=1400 audit(1791174099.879:779): avc: denied { write } for pid=12635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.599451][ T30] audit: type=1400 audit(1791174101.409:780): avc: denied { write } for pid=12684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.655892][ T30] audit: type=1400 audit(1791174101.459:781): avc: denied { bind } for pid=12686 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 667.938014][T12706] netlink: 'syz.2.1625': attribute type 10 has an invalid length. [ 668.633232][T12692] bridge0: port 1(netdevsim0) entered blocking state [ 668.633402][T12692] bridge0: port 1(netdevsim0) entered disabled state [ 668.659135][T12692] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 668.730042][T12692] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 670.769553][T12706] bond0: (slave bridge0): Enslaving as a backup interface with a down link [ 670.772298][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 672.261485][ T30] audit: type=1400 audit(1791174107.069:782): avc: denied { create } for pid=12747 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 672.376031][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.757219][ T44] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 673.186160][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 673.201749][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 673.201829][ T44] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 673.632974][ T44] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 673.633029][ T44] usb 5-1: config 0 has no interface number 0 [ 673.633168][ T44] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 673.633225][ T44] usb 5-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 673.633267][ T44] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 673.633320][ T44] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 673.633360][ T44] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 673.633397][ T44] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 673.633448][ T44] usb 5-1: config 0 interface 122 has no altsetting 0 [ 673.826045][ T30] audit: type=1400 audit(1791174108.629:783): avc: denied { write } for pid=12734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.998498][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.998541][ T44] usb 5-1: Product: syz [ 673.998573][ T44] usb 5-1: Manufacturer: syz [ 674.027213][ T44] usb 5-1: config 0 descriptor?? [ 674.027990][ T44] usb 5-1: can't set config #0, error -71 [ 674.050415][ T44] usb 5-1: USB disconnect, device number 28 [ 674.121249][T12774] netlink: 'syz.0.1647': attribute type 12 has an invalid length. [ 674.326921][ T30] audit: type=1400 audit(1791174109.139:784): avc: denied { write } for pid=12778 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.337577][T12407] veth0_vlan: entered promiscuous mode [ 674.362800][T12407] veth1_vlan: entered promiscuous mode [ 674.497275][T12407] veth0_macvtap: entered promiscuous mode [ 674.513554][T12407] veth1_macvtap: entered promiscuous mode [ 674.564909][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.592150][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.647283][T12708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.648337][ T5912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.648378][ T5912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.648415][ T5912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.372660][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 675.544803][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.544824][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.736866][T12707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.736887][T12707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.407857][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.407982][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.939244][ T30] audit: type=1400 audit(1791174115.749:785): avc: denied { write } for pid=12792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.371327][ T30] audit: type=1400 audit(1791174116.179:786): avc: denied { write } for pid=12836 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.712772][T12852] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7062] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12852] [ 684.273564][T12805] syz.4.1653 (12805): drop_caches: 2 [ 685.839322][ T30] audit: type=1400 audit(1791174120.649:787): avc: denied { write } for pid=12841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.261328][ T30] audit: type=1400 audit(1791174122.069:788): avc: denied { write } for pid=12880 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.708237][T12899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.722008][T12899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.594375][T12899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.604383][T12899] veth1_vlan: left promiscuous mode [ 689.605312][T12899] veth0_vlan: left promiscuous mode [ 689.606751][T12899] veth0_vlan: entered promiscuous mode [ 689.608488][T12899] veth1_vlan: entered promiscuous mode [ 689.612067][T12899] veth1_macvtap: left promiscuous mode [ 689.612863][T12899] veth0_macvtap: left promiscuous mode [ 689.613927][T12899] veth0_macvtap: entered promiscuous mode [ 689.614715][T12899] veth1_macvtap: entered promiscuous mode [ 689.620796][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.621682][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.622583][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.623415][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.628117][T12899] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 689.628674][T12899] bond1: left promiscuous mode [ 689.628685][T12899] bridge1: left promiscuous mode [ 689.628821][T12899] bond1: left allmulticast mode [ 689.628839][T12899] bridge1: left allmulticast mode [ 689.633633][T12899] bridge2: left promiscuous mode [ 689.646070][ T6167] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.646103][ T6167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.646178][ T6167] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.646206][ T6167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.646275][ T6167] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.646304][ T6167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.646373][ T6167] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.646401][ T6167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.914440][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.914598][T12705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.951529][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.951610][T12705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.774579][ T30] audit: type=1400 audit(1791174128.579:789): avc: denied { write } for pid=12893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.678723][T12934] lo: left promiscuous mode [ 694.678886][T12934] tunl0: left promiscuous mode [ 694.679022][T12934] gre0: left promiscuous mode [ 694.679125][T12934] 0ªî{X¹¦: left promiscuous mode [ 694.679229][T12934] erspan0: left promiscuous mode [ 694.679343][T12934] ip_vti0: left promiscuous mode [ 694.679475][T12934] ip6_vti0: left promiscuous mode [ 694.679577][T12934] sit0: left promiscuous mode [ 694.679692][T12934] ip6tnl0: left promiscuous mode [ 694.679804][T12934] ip6gre0: left promiscuous mode [ 694.679906][T12934] syz_tun: left promiscuous mode [ 694.680036][T12934] ip6gretap0: left promiscuous mode [ 694.846173][T12934] vcan0: left promiscuous mode [ 694.846457][T12934] bond0: left promiscuous mode [ 694.846854][T12934] team0: left promiscuous mode [ 694.847278][T12934] dummy0: left promiscuous mode [ 694.847413][T12934] nlmon0: left promiscuous mode [ 694.847547][T12934] batadv0: left promiscuous mode [ 694.848851][T12934] vxcan0: left promiscuous mode [ 694.848971][T12934] vxcan1: left promiscuous mode [ 694.849796][T12934] veth0: left promiscuous mode [ 694.851078][T12934] veth1: left promiscuous mode [ 694.851185][T12934] wg0: left promiscuous mode [ 694.851309][T12934] wg1: left promiscuous mode [ 694.851412][T12934] wg2: left promiscuous mode [ 694.851566][T12934] veth0_to_bridge: left promiscuous mode [ 694.851667][T12934] bridge_slave_0: left promiscuous mode [ 694.851771][T12934] veth1_to_bridge: left promiscuous mode [ 694.851873][T12934] bridge_slave_1: left promiscuous mode [ 694.851998][T12934] veth0_to_bond: left promiscuous mode [ 694.863171][T12934] Î: left promiscuous mode [ 694.866508][T12934] veth1_to_bond: left promiscuous mode [ 694.866753][T12934] bond_slave_1: left promiscuous mode [ 694.867003][T12934] veth0_to_team: left promiscuous mode [ 694.867212][T12934] team_slave_0: left promiscuous mode [ 694.867436][T12934] veth1_to_team: left promiscuous mode [ 694.867656][T12934] team_slave_1: left promiscuous mode [ 694.867868][T12934] veth0_to_batadv: left promiscuous mode [ 694.868087][T12934] batadv_slave_0: left promiscuous mode [ 694.876212][T12934] veth1_to_batadv: left promiscuous mode [ 694.876451][T12934] batadv_slave_1: left promiscuous mode [ 694.876674][T12934] xfrm0: left promiscuous mode [ 694.876911][T12934] veth1_virt_wifi: left promiscuous mode [ 694.877156][T12934] veth0_virt_wifi: left promiscuous mode [ 694.877370][T12934] virt_wifi0: left promiscuous mode [ 694.888765][T12934] vlan0: left promiscuous mode [ 694.889250][T12934] vlan1: left promiscuous mode [ 694.889712][T12934] macvlan0: left promiscuous mode [ 694.889948][T12934] macvlan1: left promiscuous mode [ 694.890180][T12934] ipvlan0: left promiscuous mode [ 694.900200][T12934] ipvlan1: left promiscuous mode [ 694.902921][T12934] macvtap0: left promiscuous mode [ 694.903153][T12934] macsec0: left promiscuous mode [ 694.903344][T12934] geneve0: left promiscuous mode [ 694.903573][T12934] geneve1: left promiscuous mode [ 694.903810][T12934] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 694.938709][T12934] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 694.938857][T12934] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 694.938943][T12934] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 694.939038][T12934] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 694.939155][T12934] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 694.939258][T12934] macvtap1: left promiscuous mode [ 694.939365][T12934] bridge1: left promiscuous mode [ 694.939463][T12934] vxlan0: left promiscuous mode [ 694.939632][T12934] vlan2: left promiscuous mode [ 694.939650][T12934] bond1: left promiscuous mode [ 694.939942][T12934] bridge2: left promiscuous mode [ 694.940025][T12934] bond2: left promiscuous mode [ 694.940235][T12934] ip6gretap1: left promiscuous mode [ 694.940317][T12934] bond3: left promiscuous mode [ 694.950825][ T30] audit: type=1400 audit(1791174129.749:790): avc: denied { write } for pid=12942 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.602389][ T30] audit: type=1400 audit(1791174131.129:791): avc: denied { setattr } for pid=12959 comm="syz.0.1684" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 697.643728][T12978] overlayfs: failed to resolve './file0': -2 [ 699.188591][ T30] audit: type=1400 audit(1791174133.999:792): avc: denied { write } for pid=12951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.574464][ T30] audit: type=1400 audit(1791174135.379:793): avc: denied { write } for pid=12999 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.029048][ T30] audit: type=1400 audit(1791174136.839:794): avc: denied { read } for pid=13008 comm="syz.4.1692" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 702.029328][ T30] audit: type=1400 audit(1791174136.839:795): avc: denied { open } for pid=13008 comm="syz.4.1692" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 702.108135][ T30] audit: type=1400 audit(1791174136.919:796): avc: denied { watch } for pid=13008 comm="syz.4.1692" path="/307/file1" dev="tmpfs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 706.657680][ T30] audit: type=1400 audit(1791174141.189:797): avc: denied { getopt } for pid=13041 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 707.620113][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1703'. [ 707.633712][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1703'. [ 707.636104][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1703'. [ 707.671722][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1703'. [ 715.405833][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1228 jiffies old. [ 716.036181][ T30] audit: type=1400 audit(1791174150.839:798): avc: denied { write } for pid=13078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.632472][ T30] audit: type=1400 audit(1791174152.439:799): avc: denied { write } for pid=13125 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.480716][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'. [ 721.131995][ T30] audit: type=1400 audit(1791174155.939:800): avc: denied { setopt } for pid=13154 comm="syz.5.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 721.592371][ T30] audit: type=1326 audit(1791174156.399:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.5.1726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5e639e159 code=0x0 [ 723.189844][ T30] audit: type=1400 audit(1791174157.979:802): avc: denied { unmount } for pid=12407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 723.242114][ T30] audit: type=1400 audit(1791174158.049:803): avc: denied { lock } for pid=13177 comm="syz.0.1729" path="socket:[32076]" dev="sockfs" ino=32076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 724.209063][T13188] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 724.209063][T13188] The task syz.6.1732 (13188) triggered the difference, watch for misbehavior. [ 831.505634][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 831.512614][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13140/1:b..l P12864/1:b..l [ 831.521832][ C0] rcu: (detected by 0, t=10502 jiffies, g=68045, q=696 ncpus=2) [ 831.529540][ C0] task:syz.2.1663 state:R running task stack:23352 pid:12864 tgid:12864 ppid:5605 task_flags:0x40064c flags:0x00080001 [ 831.543038][ C0] Call Trace: [ 831.546303][ C0] [ 831.549232][ C0] __schedule+0x1259/0x6920 [ 831.553743][ C0] ? unwind_next_frame+0xbd/0x2090 [ 831.558865][ C0] ? __pfx___schedule+0x10/0x10 [ 831.563712][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 831.568912][ C0] ? rcu_is_watching+0x13/0xc0 [ 831.573686][ C0] preempt_schedule_irq+0x4e/0x90 [ 831.578703][ C0] irqentry_exit+0x205/0xa10 [ 831.583290][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 831.588741][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 831.593934][ C0] Code: 05 cf aa a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de e7 5d 0f 0f 82 c9 02 00 00 8b 35 7e 19 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d aa a5 12 0f 85 09 03 00 00 48 83 c4 [ 831.613533][ C0] RSP: 0018:ffffc90003416ea8 EFLAGS: 00000206 [ 831.619592][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 831.627548][ C0] RDX: 0000000000000000 RSI: ffffffff8e36911a RDI: ffffffff8c623a80 [ 831.635505][ C0] RBP: ffffffff8edec5a0 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 831.643463][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 831.651426][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.659406][ C0] ? unwind_next_frame+0x3be/0x2090 [ 831.664607][ C0] ? unwind_next_frame+0x3be/0x2090 [ 831.669808][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.675959][ C0] unwind_next_frame+0xd1/0x2090 [ 831.680895][ C0] ? unwind_next_frame+0xbd/0x2090 [ 831.686010][ C0] ? dentry_kill+0x25d/0xc20 [ 831.690596][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.696746][ C0] arch_stack_walk+0x94/0xf0 [ 831.701339][ C0] ? dentry_kill+0x25d/0xc20 [ 831.705927][ C0] stack_trace_save+0x8e/0xc0 [ 831.710598][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 831.715966][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 831.720901][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 831.726699][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 831.731892][ C0] save_stack+0x162/0x1e0 [ 831.736223][ C0] ? __pfx_save_stack+0x10/0x10 [ 831.741075][ C0] ? free_unref_folios+0xa4a/0x1790 [ 831.746264][ C0] ? folios_put_refs+0x585/0xaa0 [ 831.751200][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 831.756300][ C0] ? shmem_evict_inode+0x3b1/0xca0 [ 831.761399][ C0] ? evict+0x3c2/0xad0 [ 831.765455][ C0] ? iput.part.0+0x989/0x1050 [ 831.770126][ C0] ? iput+0x35/0x40 [ 831.773923][ C0] ? dentry_unlink_inode+0x284/0x470 [ 831.779209][ C0] ? dentry_kill+0x25d/0xc20 [ 831.783798][ C0] ? page_ext_put+0x3e/0xd0 [ 831.788305][ C0] __reset_page_owner+0x84/0x190 [ 831.793245][ C0] free_unref_folios+0xa4a/0x1790 [ 831.798270][ C0] ? folios_put_refs+0x51d/0xaa0 [ 831.803206][ C0] ? folios_put_refs+0x51d/0xaa0 [ 831.808149][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 831.813949][ C0] folios_put_refs+0x585/0xaa0 [ 831.818724][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 831.824015][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 831.830341][ C0] shmem_undo_range+0x5e5/0x1570 [ 831.835287][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 831.840680][ C0] ? lock_acquire+0x1d1/0x380 [ 831.845355][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 831.850589][ C0] shmem_evict_inode+0x3b1/0xca0 [ 831.855523][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 831.860975][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 831.867041][ C0] ? lock_acquire+0x1d1/0x380 [ 831.871720][ C0] ? find_held_lock+0x2b/0x80 [ 831.876399][ C0] ? evict+0x37e/0xad0 [ 831.880462][ C0] ? evict+0x37e/0xad0 [ 831.884525][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 831.889977][ C0] evict+0x3c2/0xad0 [ 831.893860][ C0] ? fsnotify_grab_connector+0x4b/0x290 [ 831.899406][ C0] ? __pfx_evict+0x10/0x10 [ 831.903815][ C0] ? lock_acquire+0x1d1/0x380 [ 831.908495][ C0] ? iput.part.0+0x981/0x1050 [ 831.913171][ C0] iput.part.0+0x989/0x1050 [ 831.917675][ C0] iput+0x35/0x40 [ 831.921302][ C0] dentry_unlink_inode+0x284/0x470 [ 831.926420][ C0] dentry_kill+0x25d/0xc20 [ 831.930837][ C0] dput.part.0+0xd7/0x240 [ 831.935164][ C0] dput+0x1f/0x30 [ 831.938789][ C0] __fput+0x519/0xb50 [ 831.942785][ C0] task_work_run+0x150/0x240 [ 831.947382][ C0] ? __pfx_task_work_run+0x10/0x10 [ 831.952499][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 831.957704][ C0] do_exit+0x8da/0x2a50 [ 831.961863][ C0] ? __pfx_do_exit+0x10/0x10 [ 831.966453][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 831.972435][ C0] do_group_exit+0xd5/0x2a0 [ 831.976945][ C0] get_signal+0x1ec7/0x21e0 [ 831.981461][ C0] ? __pfx_get_signal+0x10/0x10 [ 831.986318][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 831.991870][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 831.998048][ C0] irqentry_exit+0x402/0xa10 [ 832.002641][ C0] asm_exc_page_fault+0x26/0x30 [ 832.007484][ C0] RIP: 0033:0x7f033259e161 [ 832.011886][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 832.017941][ C0] RAX: 0000000000000000 RBX: 00007f0332826090 RCX: 00007f033259e159 [ 832.025902][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 832.033859][ C0] RBP: 00007f033263506b R08: 0000000000000000 R09: 0000000000000000 [ 832.041818][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.049780][ C0] R13: 00007f0332826128 R14: 00007f0332826090 R15: 00007ffe8e037208 [ 832.057759][ C0] [ 832.060768][ C0] task:udevd state:R running task stack:27608 pid:13140 tgid:13140 ppid:4975 task_flags:0x400140 flags:0x00080000 [ 832.074263][ C0] Call Trace: [ 832.077530][ C0] [ 832.080453][ C0] __schedule+0x1259/0x6920 [ 832.084948][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 832.091127][ C0] ? __pfx___schedule+0x10/0x10 [ 832.095964][ C0] ? irqentry_exit+0x24d/0xa10 [ 832.100727][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 832.106794][ C0] preempt_schedule_notrace+0x57/0xd0 [ 832.112158][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 832.118056][ C0] rcu_is_watching+0x90/0xc0 [ 832.122650][ C0] ? unwind_next_frame+0x3be/0x2090 [ 832.127850][ C0] lock_release+0x24d/0x310 [ 832.132354][ C0] unwind_next_frame+0x3c3/0x2090 [ 832.137377][ C0] ? arch_stack_walk+0x73/0xf0 [ 832.142151][ C0] __unwind_start+0x3cd/0x7e0 [ 832.146830][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.152976][ C0] arch_stack_walk+0x73/0xf0 [ 832.157568][ C0] ? stack_trace_save+0x8e/0xc0 [ 832.162410][ C0] ? tomoyo_realpath_from_path+0x19c/0x690 [ 832.168231][ C0] stack_trace_save+0x8e/0xc0 [ 832.172903][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 832.178269][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 832.183203][ C0] ? security_path_rename+0x18e/0x3c0 [ 832.188573][ C0] ? filename_renameat2+0x731/0xa60 [ 832.193765][ C0] ? __x64_sys_rename+0x81/0xb0 [ 832.198604][ C0] kasan_save_stack+0x30/0x50 [ 832.203328][ C0] kasan_save_track+0x14/0x30 [ 832.208004][ C0] kasan_save_free_info+0x3b/0x70 [ 832.213018][ C0] __kasan_slab_free+0x5f/0x80 [ 832.217779][ C0] ? tomoyo_realpath_from_path+0xb0/0x690 [ 832.223497][ C0] kfree+0x22b/0x6d0 [ 832.227388][ C0] tomoyo_realpath_from_path+0x19c/0x690 [ 832.233031][ C0] tomoyo_path2_perm+0x29f/0x700 [ 832.237962][ C0] ? tomoyo_path2_perm+0x291/0x700 [ 832.243070][ C0] ? find_held_lock+0x2b/0x80 [ 832.247748][ C0] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 832.253203][ C0] ? try_to_unlazy+0x296/0x910 [ 832.258007][ C0] tomoyo_path_rename+0xfc/0x1a0 [ 832.262949][ C0] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 832.268499][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 832.273702][ C0] security_path_rename+0x18e/0x3c0 [ 832.278908][ C0] filename_renameat2+0x731/0xa60 [ 832.283933][ C0] ? __pfx_filename_renameat2+0x10/0x10 [ 832.289472][ C0] ? lock_acquire+0x1d1/0x380 [ 832.294141][ C0] ? __might_fault+0xc5/0x140 [ 832.298812][ C0] ? __might_fault+0xc5/0x140 [ 832.303498][ C0] ? do_getname+0x191/0x390 [ 832.307995][ C0] __x64_sys_rename+0x81/0xb0 [ 832.312664][ C0] do_syscall_64+0x123/0x790 [ 832.317256][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.323146][ C0] RIP: 0033:0x7f76c7e7acc7 [ 832.327549][ C0] RSP: 002b:00007ffd507213c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 832.335953][ C0] RAX: ffffffffffffffda RBX: 0000558e9b472b20 RCX: 00007f76c7e7acc7 [ 832.343912][ C0] RDX: 0000558e9b220010 RSI: 00007ffd507213e0 RDI: 00007ffd507217e0 [ 832.351872][ C0] RBP: 0000558e9b466320 R08: 00000000000001e0 R09: 0000000000000000 [ 832.359831][ C0] R10: 00000000000001b6 R11: 0000000000000206 R12: 00007ffd507213e0 [ 832.367790][ C0] R13: 00007ffd507217e0 R14: 0000558e92def100 R15: 0000558e92def140 [ 832.376029][ C0] [ 832.379036][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g68045 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 832.390041][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 832.399992][ C0] rcu: RCU grace-period kthread stack dump: [ 832.405861][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 832.419356][ C0] Call Trace: [ 832.422620][ C0] [ 832.425541][ C0] __schedule+0x1259/0x6920 [ 832.430039][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 832.434989][ C0] ? __pfx___schedule+0x10/0x10 [ 832.439828][ C0] ? find_held_lock+0x2b/0x80 [ 832.444509][ C0] ? schedule+0x225/0x2c0 [ 832.448833][ C0] schedule+0xdd/0x2c0 [ 832.452895][ C0] schedule_timeout+0x127/0x280 [ 832.457745][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 832.463122][ C0] ? __pfx_process_timeout+0x10/0x10 [ 832.468410][ C0] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 832.474209][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 832.479669][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 832.484429][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 832.489714][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 832.494649][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 832.499839][ C0] ? rcu_is_watching+0x13/0xc0 [ 832.504604][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 832.510410][ C0] rcu_gp_kthread+0x17a/0x220 [ 832.515084][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 832.520273][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 832.526078][ C0] ? __kthread_parkme+0x18f/0x230 [ 832.531102][ C0] ? kthread+0x13a/0x450 [ 832.535344][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 832.540540][ C0] kthread+0x373/0x450 [ 832.544612][ C0] ? __pfx_kthread+0x10/0x10 [ 832.549203][ C0] ret_from_fork+0x730/0xd60 [ 832.553790][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 832.558899][ C0] ? __switch_to+0x800/0x10f0 [ 832.563581][ C0] ? __pfx_kthread+0x10/0x10 [ 832.568175][ C0] ret_from_fork_asm+0x1a/0x30 [ 832.572948][ C0] [ 832.575954][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 832.582271][ C0] Sending NMI from CPU 0 to CPUs 1: [ 832.587472][ C1] NMI backtrace for cpu 1 [ 832.587488][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 832.587511][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.587523][ C1] RIP: 0010:mark_lock+0x51/0x1020 [ 832.587547][ C1] Code: 68 89 d3 83 fa 08 74 70 41 bc 01 00 00 00 89 d9 41 d3 e4 4d 63 e4 41 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 ef a5 aa 14 <73> 5f 48 8d 04 80 48 8d 04 80 48 8d 04 c5 a0 ed 91 96 4c 89 e1 48 [ 832.587565][ C1] RSP: 0018:ffffc90000a18be0 EFLAGS: 00000003 [ 832.587581][ C1] RAX: 0000000000000007 RBX: 0000000000000009 RCX: 0000000000000001 [ 832.587593][ C1] RDX: 0000000000000008 RSI: ffff88801f6856d8 RDI: ffff88801f684b00 [ 832.587606][ C1] RBP: ffffc90000a18c80 R08: 0000000000000000 R09: 0000000000000001 [ 832.587618][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000200 [ 832.587630][ C1] R13: 0000000000020000 R14: ffff88801f684b00 R15: ffff88801f6856d8 [ 832.587643][ C1] FS: 0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 832.587662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.587675][ C1] CR2: 00007f7f06d87780 CR3: 00000000725ec000 CR4: 00000000003526f0 [ 832.587687][ C1] Call Trace: [ 832.587694][ C1] [ 832.587702][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 832.587739][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 832.587764][ C1] __lock_acquire+0x5c0/0x1f40 [ 832.587788][ C1] ? do_raw_spin_lock+0x128/0x260 [ 832.587816][ C1] lock_acquire+0x1d1/0x380 [ 832.587837][ C1] ? advance_sched+0x707/0xd20 [ 832.587856][ C1] ? advance_sched+0x6a2/0xd20 [ 832.587876][ C1] advance_sched+0x718/0xd20 [ 832.587897][ C1] ? advance_sched+0x707/0xd20 [ 832.587918][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 832.587944][ C1] ? __pfx_advance_sched+0x10/0x10 [ 832.587961][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 832.587996][ C1] hrtimer_interrupt+0x441/0xaa0 [ 832.588021][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 832.588049][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 832.588070][ C1] [ 832.588076][ C1] [ 832.588083][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 832.588105][ C1] RIP: 0010:sched_core_balance+0xa7/0xff0 [ 832.588135][ C1] Code: 00 e8 3d 7c fa 09 41 5b 85 c0 0f 85 3d 0b 00 00 e9 01 0a 00 00 49 8d 7c 24 48 e8 34 75 fd 09 e8 ff 49 3c 00 fb 48 63 44 24 58 <48> c7 c3 00 df 8e 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 6c [ 832.588152][ C1] RSP: 0018:ffffc900001a7b70 EFLAGS: 00000206 [ 832.588167][ C1] RAX: 0000000000000001 RBX: ffff88801f684b00 RCX: 0000000000000000 [ 832.588179][ C1] RDX: 0000000000000002 RSI: ffffffff8e38f5e4 RDI: ffffffff8c623a80 [ 832.588192][ C1] RBP: ffffc900001a7c90 R08: 0000000000000001 R09: 0000000000000000 [ 832.588204][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b853bf00 [ 832.588216][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b853bf00 [ 832.588238][ C1] ? lock_acquire+0x1d1/0x380 [ 832.588259][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 832.588288][ C1] finish_task_switch.isra.0+0x535/0x10d0 [ 832.588315][ C1] __schedule+0x1261/0x6920 [ 832.588341][ C1] ? __pfx___schedule+0x10/0x10 [ 832.588359][ C1] ? rcu_is_watching+0x13/0xc0 [ 832.588386][ C1] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 832.588413][ C1] schedule_idle+0x54/0x80 [ 832.588431][ C1] do_idle+0x365/0x5b0 [ 832.588456][ C1] ? __pfx_do_idle+0x10/0x10 [ 832.588481][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 832.588508][ C1] cpu_startup_entry+0x4f/0x60 [ 832.588535][ C1] start_secondary+0x21d/0x2d0 [ 832.588555][ C1] ? __pfx_start_secondary+0x10/0x10 [ 832.588578][ C1] common_startup_64+0x13e/0x158 [ 832.588611][ C1]