last executing test programs: 9.220988009s ago: executing program 0 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 9.185398743s ago: executing program 1 (id=294): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.990642271s ago: executing program 1 (id=295): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/206, 0xce}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000004b00)=""/200, 0xc8}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000005d00)=""/199, 0xc7}], 0x7}}], 0x1, 0x2020, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000005c0)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000600)={0x40000008}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000640)={0xa0002008}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r5 = io_uring_setup(0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r5, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="00b2e6dd1638628b103d9cf3ff00000000000000", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x8) 8.886630057s ago: executing program 2 (id=296): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0xfffffffd, 0x5, 0x7, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xff, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 7.791190004s ago: executing program 1 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000001300)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000001340)="0802110000010802110000000800", 0xe) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 7.790724361s ago: executing program 0 (id=298): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = getpid() r5 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000300), 0x80000) close_range(r5, r1, 0x0) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) connect$inet(r3, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) sendmsg$inet(r3, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) setregid(r7, r7) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) setgroups(0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) fchmodat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0xa2) socket$inet6_udp(0xa, 0x2, 0x0) 7.409634962s ago: executing program 3 (id=300): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xc00}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000480)={0x0, 0x1a87}, 0x8) socket$kcm(0x1e, 0x5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc1) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000340)='.\x00', 0x0, 0x0) 7.161208469s ago: executing program 4 (id=301): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/irq/default_smp_affinity\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000500)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4263, 0x80000, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x1, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6.795253182s ago: executing program 0 (id=302): close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0x0, &(0x7f0000000fc0), 0x0, 0x1, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="18000000010003", 0x7) mmap(&(0x7f0000795000/0x2000)=nil, 0x2000, 0x0, 0x101051, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') 6.307889168s ago: executing program 1 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_usbip_server_init(0x1) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x402, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) write(r0, &(0x7f00000001c0)='100', 0x3) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r3 = syz_open_procfs(0x0, 0x0) statx(r3, 0x0, 0x1000, 0x4, 0x0) sendto$inet6(r2, &(0x7f00000003c0)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 6.275855229s ago: executing program 2 (id=304): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xffff, 0x2, 0x30314742, 0x7, 0x6, 0x0, 0x1, 0x800, 0x0, 0x8, 0x2, 0x6}}) 5.599235024s ago: executing program 3 (id=305): epoll_create(0x40000002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', &(0x7f0000000b40)={0x474082, 0x5c, 0x8}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x6}, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) 5.447498442s ago: executing program 4 (id=306): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.422953044s ago: executing program 3 (id=307): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d52957", 0xd7}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)='?', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x34d}], 0x1) 5.315028423s ago: executing program 2 (id=308): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x2020, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000005c0)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000600)={0x40000008}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000640)={0xa0002008}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r5 = io_uring_setup(0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r5, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="00b2e6dd1638628b103d9cf3ff00000000000000", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x8) 5.227351903s ago: executing program 1 (id=309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000042000000000000000000ea0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000fffffff07b9af8ff00000000b6090000000000117baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.224996242s ago: executing program 3 (id=310): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="00f1947c00"/14, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = getpid() r4 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000300), 0x80000) close_range(r4, r1, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) connect$inet(r2, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) sendmsg$inet(r2, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) setgroups(0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) fchmodat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0xa2) socket$inet6_udp(0xa, 0x2, 0x0) 5.15010872s ago: executing program 4 (id=311): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @unmapped=0xf0000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x89}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x11) 4.277039918s ago: executing program 3 (id=312): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = getpid() r5 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000300), 0x80000) close_range(r5, r1, 0x0) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) connect$inet(r3, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) sendmsg$inet(r3, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) setregid(r7, r7) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) setgroups(0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) fchmodat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0xa2) socket$inet6_udp(0xa, 0x2, 0x0) 2.975905349s ago: executing program 1 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x9102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000ac0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', 0x1}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000d40)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="27030200591114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 2.270399636s ago: executing program 2 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x800003fffffffffd, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.196546003s ago: executing program 4 (id=315): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xc00}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000480)={0x0, 0x1a87}, 0x8) socket$kcm(0x1e, 0x5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000380)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000'], 0xc1) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000340)='.\x00', 0x0, 0x0) 1.963844271s ago: executing program 0 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 1.389919154s ago: executing program 2 (id=317): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da"}}}}, 0x0) 1.222851049s ago: executing program 0 (id=318): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="000086dd0000110000080000000046250fc000642c00010144047e71000004d60000000201000fff00008001000000000000100000002cc9000000c27ae85a"], 0xfce) 415.398802ms ago: executing program 4 (id=319): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x28, 0x5, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 180.546848ms ago: executing program 3 (id=320): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./cgrp2\x00', &(0x7f0000000600)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./cgrp2/p1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./cgrp2/p0/cpuset.cpus\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='root', 0x4) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 179.077039ms ago: executing program 2 (id=321): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/root\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1'}, {'timeo=1'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 2.503789ms ago: executing program 4 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000001900)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0xdb03}}, @nested_load_code={0x12e, 0x59, {0x0, "f30f0966b8a3000f00d02664440f00900000000064420f38cd220f38f68a08000000c4c27930aae47d35f1c481756305bde10000660ffb1f66b801008ed83646f4"}}], 0xa9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001020000102505a1a440000102020109"], 0xfffffffffffffffc) writev(r4, 0x0, 0x0) 0s ago: executing program 0 (id=323): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="00f1947c000000000000000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = getpid() r5 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000300), 0x80000) close_range(r5, r1, 0x0) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) connect$inet(r3, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) sendmsg$inet(r3, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) setregid(r7, r7) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) setgroups(0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) fchmodat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0xa2) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): ce batadv_slave_0 (retrying later): interface not active [ 79.388820][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.388836][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.388857][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.389622][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.389664][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.389683][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.393234][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.393254][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.393274][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.404534][ T5618] hsr_slave_0: entered promiscuous mode [ 79.406972][ T5618] hsr_slave_1: entered promiscuous mode [ 79.415915][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.415931][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.415952][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.438427][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.438444][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.438466][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.581094][ T5619] hsr_slave_0: entered promiscuous mode [ 79.581929][ T5619] hsr_slave_1: entered promiscuous mode [ 79.582456][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 79.582474][ T5619] Cannot create hsr debugfs directory [ 79.615342][ T5627] hsr_slave_0: entered promiscuous mode [ 79.617503][ T5627] hsr_slave_1: entered promiscuous mode [ 79.617960][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 79.617972][ T5627] Cannot create hsr debugfs directory [ 79.667549][ T5622] hsr_slave_0: entered promiscuous mode [ 79.668375][ T5622] hsr_slave_1: entered promiscuous mode [ 79.668977][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 79.668991][ T5622] Cannot create hsr debugfs directory [ 80.050865][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.061265][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.068362][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.080787][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.083113][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.103523][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.119355][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.122509][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.208760][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.208906][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.209190][ T5631] bridge_slave_0: entered allmulticast mode [ 80.211986][ T5631] bridge_slave_0: entered promiscuous mode [ 80.214443][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.214553][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.214644][ T5631] bridge_slave_1: entered allmulticast mode [ 80.215958][ T5631] bridge_slave_1: entered promiscuous mode [ 80.238469][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.240773][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.261365][ T5631] team0: Port device team_slave_0 added [ 80.263373][ T5631] team0: Port device team_slave_1 added [ 80.294351][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.303728][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.305269][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.316578][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.329783][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.329800][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.329867][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.332070][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.341665][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.345169][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.345184][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.345204][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.357568][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.369445][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.484227][ T5631] hsr_slave_0: entered promiscuous mode [ 80.484756][ T5631] hsr_slave_1: entered promiscuous mode [ 80.485076][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 80.485090][ T5631] Cannot create hsr debugfs directory [ 80.560648][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.562548][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.563485][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.571419][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.573850][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.581182][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.608130][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.610612][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.717451][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.719998][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.740480][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.743059][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.768448][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.771780][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.790671][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.793903][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.805818][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.835538][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.837511][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.838161][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.840717][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.841423][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.843628][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.847434][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.853601][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.909387][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.918970][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.957314][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.957396][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.988353][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.988428][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.990063][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.994225][ T5637] Bluetooth: hci1: command tx timeout [ 80.994253][ T5637] Bluetooth: hci3: command tx timeout [ 80.994271][ T5637] Bluetooth: hci2: command tx timeout [ 81.029425][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.029506][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.055475][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.055545][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.078814][ T5626] Bluetooth: hci0: command tx timeout [ 81.080054][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.131372][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.154098][ T5626] Bluetooth: hci4: command tx timeout [ 81.155027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.155106][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.171899][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.172032][ T4843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.231403][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.234877][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.250306][ T5622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.250329][ T5622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.362085][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.369851][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.392848][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.392936][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.435960][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.436057][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.443319][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.443396][ T4843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.503430][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.503518][ T4843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.097549][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.197824][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.269956][ T5622] veth0_vlan: entered promiscuous mode [ 82.296931][ T5622] veth1_vlan: entered promiscuous mode [ 82.309745][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.423379][ T5622] veth0_macvtap: entered promiscuous mode [ 82.429283][ T5622] veth1_macvtap: entered promiscuous mode [ 82.478952][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.493907][ T5619] veth0_vlan: entered promiscuous mode [ 82.509346][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.565601][ T5619] veth1_vlan: entered promiscuous mode [ 82.621992][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.669188][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.694270][ T4843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694415][ T4843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694448][ T4843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694484][ T4843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.729171][ T5631] veth0_vlan: entered promiscuous mode [ 82.761585][ T5619] veth0_macvtap: entered promiscuous mode [ 82.766598][ T5619] veth1_macvtap: entered promiscuous mode [ 82.787578][ T5631] veth1_vlan: entered promiscuous mode [ 82.802709][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.816903][ T4843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.816944][ T4843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.839846][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.872808][ T4843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.872830][ T4843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.896010][ T4843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.896056][ T4843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.896085][ T4843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.896115][ T4843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.947206][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 82.947224][ T30] audit: type=1400 audit(1793901989.853:158): avc: denied { mounton } for pid=5622 comm="syz-executor" path="/root/syzkaller.SBjJTk/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 82.953219][ T5618] veth0_vlan: entered promiscuous mode [ 82.972411][ T5627] veth0_vlan: entered promiscuous mode [ 82.979821][ T30] audit: type=1400 audit(1793901989.893:159): avc: denied { mount } for pid=5622 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.982353][ T30] audit: type=1400 audit(1793901989.893:160): avc: denied { mounton } for pid=5622 comm="syz-executor" path="/root/syzkaller.SBjJTk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.990932][ T30] audit: type=1400 audit(1793901989.893:161): avc: denied { mount } for pid=5622 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.998590][ T30] audit: type=1400 audit(1793901989.893:162): avc: denied { mounton } for pid=5622 comm="syz-executor" path="/root/syzkaller.SBjJTk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.000227][ T30] audit: type=1400 audit(1793901989.893:163): avc: denied { mounton } for pid=5622 comm="syz-executor" path="/root/syzkaller.SBjJTk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.004974][ T30] audit: type=1400 audit(1793901989.893:164): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.043764][ T30] audit: type=1400 audit(1793901989.953:165): avc: denied { mounton } for pid=5622 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.051181][ T30] audit: type=1400 audit(1793901989.953:166): avc: denied { mount } for pid=5622 comm="syz-executor" name="/" dev="gadgetfs" ino=7140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.074229][ T5627] veth1_vlan: entered promiscuous mode [ 83.094523][ T5637] Bluetooth: hci3: command tx timeout [ 83.094554][ T5637] Bluetooth: hci1: command tx timeout [ 83.094645][ T5626] Bluetooth: hci2: command tx timeout [ 83.104379][ T5631] veth0_macvtap: entered promiscuous mode [ 83.112056][ T5618] veth1_vlan: entered promiscuous mode [ 83.163581][ T5631] veth1_macvtap: entered promiscuous mode [ 83.164406][ T5623] Bluetooth: hci0: command tx timeout [ 83.234929][ T5623] Bluetooth: hci4: command tx timeout [ 83.252127][ T30] audit: type=1400 audit(1793901990.153:167): avc: denied { mounton } for pid=5622 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.279082][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.294945][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.302522][ T328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.302543][ T328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.310523][ T5627] veth0_macvtap: entered promiscuous mode [ 83.323114][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.358622][ T5627] veth1_macvtap: entered promiscuous mode [ 83.379714][ T5618] veth0_macvtap: entered promiscuous mode [ 83.409715][ T5618] veth1_macvtap: entered promiscuous mode [ 83.430698][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.430722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.438569][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.439581][ T328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.439633][ T328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.439675][ T328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.456655][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.472210][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.480896][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.515210][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.584177][ T4843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.584224][ T4843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.584256][ T4843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.584285][ T4843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623523][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624008][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.716038][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.716167][ T328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.716181][ T328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.773522][ T4843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.773537][ T4843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.795949][ T328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.835777][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.835797][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.877824][ T328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.877846][ T328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.971398][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.971419][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.031672][ T5828] kvm: user requested TSC rate below hardware speed [ 84.076792][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.076816][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.204024][ T5623] Bluetooth: hci2: command tx timeout [ 85.204059][ T5623] Bluetooth: hci1: command tx timeout [ 85.204081][ T5623] Bluetooth: hci3: command tx timeout [ 85.234709][ T5623] Bluetooth: hci0: command tx timeout [ 85.314172][ T5626] Bluetooth: hci4: command tx timeout [ 85.365221][ T5759] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.538716][ T5759] usb 1-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 85.563727][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.623860][ T5759] usb 1-1: config 0 descriptor?? [ 85.717351][ T5759] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 86.141378][ T5759] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 86.484275][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.663855][ T5759] gspca_cpia1: usb_control_msg 02, error -32 [ 86.667879][ T24] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 86.708442][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.708539][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.708579][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.708600][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.708644][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.708683][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.713201][ T5759] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 86.800753][ T5873] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 86.836363][ T24] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 86.865783][ T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 86.865907][ T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 86.896749][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 86.903891][ T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 86.925718][ T24] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 86.946267][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 86.995667][ T5717] usb 1-1: USB disconnect, device number 2 [ 87.394861][ T5716] usb 4-1: USB disconnect, device number 2 [ 87.414086][ T5716] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 87.438092][ T5716] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 87.441221][ T5716] keyspan 4-1:1.0: device disconnected [ 87.802179][ T5897] ip_tables: iptables: counters copy to user failed while replacing table [ 87.805869][ T5897] ip_tables: iptables: counters copy to user failed while replacing table [ 87.826070][ T5896] FAULT_INJECTION: forcing a failure. [ 87.826070][ T5896] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 87.826186][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) [ 87.826210][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 87.826227][ T5896] Call Trace: [ 87.826255][ T5896] [ 87.826264][ T5896] dump_stack_lvl+0x100/0x190 [ 87.826330][ T5896] should_fail_ex.cold+0x5/0xa [ 87.826391][ T5896] should_fail_alloc_page+0xeb/0x140 [ 87.826418][ T5896] prepare_alloc_pages+0x1f0/0x5b0 [ 87.826447][ T5896] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 87.826483][ T5896] ? __pfx_get_page_from_freelist+0x10/0x10 [ 87.826512][ T5896] ? rcu_is_watching+0x13/0xc0 [ 87.826548][ T5896] ? trace_mm_page_alloc+0x164/0x1c0 [ 87.826571][ T5896] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 87.826601][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 87.826633][ T5896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.826667][ T5896] ? rcu_is_watching+0x13/0xc0 [ 87.826693][ T5896] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.826730][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.826751][ T5896] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.826784][ T5896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.826820][ T5896] ? __kasan_slab_alloc+0x89/0x90 [ 87.826840][ T5896] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 87.826871][ T5896] ? alloc_vmap_area+0x643/0x2bc0 [ 87.826897][ T5896] ? __get_vm_area_node+0x1ed/0x350 [ 87.826914][ T5896] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 87.826933][ T5896] ? __vmalloc_node_noprof+0xad/0xf0 [ 87.826951][ T5896] ? __vmalloc_noprof+0xa3/0x120 [ 87.826969][ T5896] ? do_replace+0x1c6/0x490 [ 87.826984][ T5896] ? do_ebt_set_ctl+0x55a/0x670 [ 87.826998][ T5896] ? nf_setsockopt+0x8d/0xf0 [ 87.827022][ T5896] ? ip_setsockopt+0xcb/0xf0 [ 87.827043][ T5896] ? udp_setsockopt+0x64/0xb0 [ 87.827061][ T5896] ? do_sock_setsockopt+0xf3/0x1d0 [ 87.827083][ T5896] ? __sys_setsockopt+0x195/0x220 [ 87.827111][ T5896] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 87.827152][ T5896] ? policy_nodemask+0xed/0x5e0 [ 87.827181][ T5896] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 87.827227][ T5896] __kasan_populate_vmalloc+0xf0/0x210 [ 87.827266][ T5896] alloc_vmap_area+0x963/0x2bc0 [ 87.827306][ T5896] ? kasan_save_track+0x14/0x30 [ 87.827324][ T5896] ? __kasan_kmalloc+0xaa/0xb0 [ 87.827343][ T5896] ? __pfx_alloc_vmap_area+0x10/0x10 [ 87.827375][ T5896] ? __get_vm_area_node+0x124/0x350 [ 87.827398][ T5896] __get_vm_area_node+0x1ed/0x350 [ 87.827423][ T5896] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 87.827446][ T5896] ? do_replace+0x1c6/0x490 [ 87.827464][ T5896] ? rcu_is_watching+0x13/0xc0 [ 87.827485][ T5896] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 87.827520][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.827543][ T5896] ? do_replace+0x1c6/0x490 [ 87.827566][ T5896] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.827599][ T5896] ? do_replace+0x1c6/0x490 [ 87.827616][ T5896] __vmalloc_node_noprof+0xad/0xf0 [ 87.827635][ T5896] ? do_replace+0x1c6/0x490 [ 87.827658][ T5896] __vmalloc_noprof+0xa3/0x120 [ 87.827679][ T5896] ? __pfx___vmalloc_noprof+0x10/0x10 [ 87.827709][ T5896] do_replace+0x1c6/0x490 [ 87.827728][ T5896] ? __pfx_do_replace+0x10/0x10 [ 87.827744][ T5896] ? hook_capable+0x1bc/0x500 [ 87.827781][ T5896] ? bpf_lsm_capable+0x9/0x10 [ 87.827800][ T5896] ? security_capable+0x80/0x260 [ 87.827828][ T5896] do_ebt_set_ctl+0x55a/0x670 [ 87.827882][ T5896] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 87.827906][ T5896] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 87.827938][ T5896] ? nf_sockopt_find.isra.0+0x222/0x290 [ 87.827971][ T5896] nf_setsockopt+0x8d/0xf0 [ 87.828003][ T5896] ip_setsockopt+0xcb/0xf0 [ 87.828030][ T5896] udp_setsockopt+0x64/0xb0 [ 87.828051][ T5896] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 87.828093][ T5896] do_sock_setsockopt+0xf3/0x1d0 [ 87.828123][ T5896] __sys_setsockopt+0x195/0x220 [ 87.828157][ T5896] __x64_sys_setsockopt+0xbd/0x160 [ 87.828178][ T5896] ? do_syscall_64+0xae/0x790 [ 87.828200][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.828220][ T5896] do_syscall_64+0x123/0x790 [ 87.828244][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.828272][ T5896] RIP: 0033:0x7f403259fb19 [ 87.828289][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.828306][ T5896] RSP: 002b:00007f40333ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.828350][ T5896] RAX: ffffffffffffffda RBX: 00007f4032825fa0 RCX: 00007f403259fb19 [ 87.828362][ T5896] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 87.828373][ T5896] RBP: 00007f4032637b70 R08: 0000000000000108 R09: 0000000000000000 [ 87.828383][ T5896] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 87.828393][ T5896] R13: 00007f4032826038 R14: 00007f4032825fa0 R15: 00007ffe712c39b8 [ 87.828417][ T5896] [ 87.828718][ T5896] syz.1.21: vmalloc error: size 536870912, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 87.828949][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) [ 87.828971][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 87.828981][ T5896] Call Trace: [ 87.828988][ T5896] [ 87.828996][ T5896] dump_stack_lvl+0x100/0x190 [ 87.829028][ T5896] warn_alloc.cold+0x9e/0xb2 [ 87.829049][ T5896] ? __pfx_warn_alloc+0x10/0x10 [ 87.829075][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.829096][ T5896] ? __get_vm_area_node+0x2f0/0x350 [ 87.829171][ T5896] ? __get_vm_area_node+0x22b/0x350 [ 87.829201][ T5896] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 87.829233][ T5896] ? rcu_is_watching+0x13/0xc0 [ 87.829254][ T5896] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 87.829283][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.829306][ T5896] ? do_replace+0x1c6/0x490 [ 87.829331][ T5896] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.829362][ T5896] ? do_replace+0x1c6/0x490 [ 87.829378][ T5896] __vmalloc_node_noprof+0xad/0xf0 [ 87.829399][ T5896] ? do_replace+0x1c6/0x490 [ 87.829452][ T5896] __vmalloc_noprof+0xa3/0x120 [ 87.829475][ T5896] ? __pfx___vmalloc_noprof+0x10/0x10 [ 87.829505][ T5896] do_replace+0x1c6/0x490 [ 87.829524][ T5896] ? __pfx_do_replace+0x10/0x10 [ 87.829551][ T5896] ? hook_capable+0x1bc/0x500 [ 87.829584][ T5896] ? bpf_lsm_capable+0x9/0x10 [ 87.829604][ T5896] ? security_capable+0x80/0x260 [ 87.829630][ T5896] do_ebt_set_ctl+0x55a/0x670 [ 87.829653][ T5896] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 87.829675][ T5896] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 87.829702][ T5896] ? nf_sockopt_find.isra.0+0x222/0x290 [ 87.829732][ T5896] nf_setsockopt+0x8d/0xf0 [ 87.829758][ T5896] ip_setsockopt+0xcb/0xf0 [ 87.829781][ T5896] udp_setsockopt+0x64/0xb0 [ 87.829799][ T5896] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 87.829827][ T5896] do_sock_setsockopt+0xf3/0x1d0 [ 87.829855][ T5896] __sys_setsockopt+0x195/0x220 [ 87.829879][ T5896] __x64_sys_setsockopt+0xbd/0x160 [ 87.829897][ T5896] ? do_syscall_64+0xae/0x790 [ 87.829917][ T5896] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.829938][ T5896] do_syscall_64+0x123/0x790 [ 87.829960][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.829981][ T5896] RIP: 0033:0x7f403259fb19 [ 87.829997][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.830011][ T5896] RSP: 002b:00007f40333ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.830027][ T5896] RAX: ffffffffffffffda RBX: 00007f4032825fa0 RCX: 00007f403259fb19 [ 87.830037][ T5896] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 87.830046][ T5896] RBP: 00007f4032637b70 R08: 0000000000000108 R09: 0000000000000000 [ 87.830056][ T5896] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 87.830065][ T5896] R13: 00007f4032826038 R14: 00007f4032825fa0 R15: 00007ffe712c39b8 [ 87.830087][ T5896] [ 87.830104][ T5896] Mem-Info: [ 87.830136][ T5896] active_anon:7717 inactive_anon:0 isolated_anon:0 [ 87.830136][ T5896] active_file:0 inactive_file:54883 isolated_file:0 [ 87.830136][ T5896] unevictable:0 dirty:1957 writeback:0 [ 87.830136][ T5896] slab_reclaimable:11707 slab_unreclaimable:97145 [ 87.830136][ T5896] mapped:29871 shmem:530 pagetables:1172 [ 87.830136][ T5896] sec_pagetables:0 bounce:0 [ 87.830136][ T5896] kernel_misc_reclaimable:0 [ 87.830136][ T5896] free:1288242 free_pcp:28343 free_cma:0 [ 87.830204][ T5896] Node 0 active_anon:30868kB inactive_anon:0kB active_file:0kB inactive_file:219328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119484kB dirty:7812kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 87.830262][ T5896] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 87.830320][ T5896] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.830375][ T5896] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 87.830408][ T5896] Node 0 DMA32 free:1201112kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30868kB inactive_anon:0kB active_file:0kB inactive_file:219328kB unevictable:0kB writepending:7812kB zspages:0kB present:3129332kB managed:2506256kB mlocked:0kB bounce:0kB free_pcp:113172kB local_pcp:38380kB free_cma:0kB [ 87.830458][ T5896] lowmem_reserve[]: 0 0 1 1 1 [ 87.830485][ T5896] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1752kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 87.830530][ T5896] lowmem_reserve[]: 0 0 0 0 0 [ 87.830558][ T5896] Node 1 Normal free:3936484kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 87.830608][ T5896] lowmem_reserve[]: 0 0 0 0 0 [ 87.830637][ T5896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.830742][ T5896] Node 0 DMA32: 542*4kB (UM) 142*8kB (UME) 13*16kB (UM) 5*32kB (UME) 3*64kB (UME) 3*128kB (ME) 1*256kB (M) 3*512kB (UME) 1*1024kB (U) 1*2048kB (M) 291*4096kB (M) = 1201048kB [ 87.830883][ T5896] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 87.830986][ T5896] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 5*32kB (UM) 7*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936536kB [ 87.831131][ T5896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.831177][ T5896] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.831193][ T5896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.831227][ T5896] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.831243][ T5896] 55409 total pagecache pages [ 87.831251][ T5896] 0 pages in swap cache [ 87.831274][ T5896] Free swap = 124996kB [ 87.831282][ T5896] Total swap = 124996kB [ 87.831290][ T5896] 2097051 pages RAM [ 87.831297][ T5896] 0 pages HighMem/MovableOnly [ 87.831304][ T5896] 438433 pages reserved [ 87.831315][ T5896] 0 pages cma reserved [ 87.856909][ T5717] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.926285][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.015329][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 88.020445][ T5717] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.026280][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.026329][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.028754][ T5717] usb 3-1: config 0 descriptor?? [ 88.048992][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 88.049011][ T30] audit: type=1400 audit(1793901994.953:220): avc: denied { mounton } for pid=5905 comm="syz.3.29" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.219555][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 88.219591][ T24] usb 1-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 88.257661][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.262459][ T30] audit: type=1400 audit(1793901995.173:221): avc: denied { block_suspend } for pid=5900 comm="syz.4.27" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.417271][ T24] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 88.417300][ T24] usb 1-1: Product: syz [ 88.417315][ T24] usb 1-1: Manufacturer: syz [ 88.548255][ T30] audit: type=1400 audit(1793901995.463:222): avc: denied { ioctl } for pid=5900 comm="syz.4.27" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.590552][ T30] audit: type=1400 audit(1793901995.503:223): avc: denied { name_bind } for pid=5913 comm="syz.3.31" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 88.768082][ T30] audit: type=1400 audit(1793901995.673:224): avc: denied { mount } for pid=5916 comm="syz.1.32" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.781179][ T30] audit: type=1400 audit(1793901995.673:225): avc: denied { create } for pid=5918 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.800685][ T5717] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 88.809526][ T30] audit: type=1400 audit(1793901995.713:226): avc: denied { setopt } for pid=5918 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.831512][ T30] audit: type=1400 audit(1793901995.713:227): avc: denied { read } for pid=5918 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.839508][ T24] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 88.839598][ T24] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 88.863847][ T5756] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.882660][ T24] usb 1-1: USB disconnect, device number 3 [ 88.982966][ T30] audit: type=1400 audit(1793901995.883:228): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.112517][ T30] audit: type=1400 audit(1793901996.013:229): avc: denied { search } for pid=5920 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.128425][ T5933] ALSA: mixer_oss: invalid OSS volume '' [ 90.135726][ T5933] can0: slcan on ttyS3. [ 90.195444][ T1230] cfg80211: failed to load regulatory.db [ 90.283430][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5928 comm=syz.3.35 [ 90.450673][ T5933] can0 (unregistered): slcan off ttyS3. [ 91.040411][ T5717] usb 3-1: USB disconnect, device number 2 [ 91.576718][ T5957] can0: slcan on ttyS3. [ 92.034190][ T5957] can0 (unregistered): slcan off ttyS3. [ 93.499910][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 93.500017][ T30] audit: type=1400 audit(1793902000.403:245): avc: denied { write } for pid=5970 comm="syz.0.46" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.593564][ T30] audit: type=1400 audit(1793902000.493:246): avc: denied { ioctl } for pid=5969 comm="syz.3.45" path="socket:[9356]" dev="sockfs" ino=9356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.771120][ T30] audit: type=1400 audit(1793902001.673:247): avc: denied { read write } for pid=5982 comm="syz.0.49" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.771374][ T30] audit: type=1400 audit(1793902001.673:248): avc: denied { open } for pid=5982 comm="syz.0.49" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.895891][ T1230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.903795][ T30] audit: type=1400 audit(1793902001.803:249): avc: denied { read write } for pid=5989 comm="syz.1.51" name="video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.937374][ T30] audit: type=1400 audit(1793902001.853:250): avc: denied { open } for pid=5989 comm="syz.1.51" path="/dev/video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.938772][ T30] audit: type=1400 audit(1793902001.853:251): avc: denied { unmount } for pid=5631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.949403][ T30] audit: type=1400 audit(1793902001.853:252): avc: denied { ioctl } for pid=5989 comm="syz.1.51" path="/dev/video0" dev="devtmpfs" ino=924 ioctlcmd=0xc0145608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.044106][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 95.045379][ T1230] usb 4-1: New USB device found: idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 95.048461][ T1230] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 95.048505][ T1230] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 95.048529][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 95.050456][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.050482][ T1230] usb 4-1: Product: syz [ 95.050496][ T1230] usb 4-1: Manufacturer: syz [ 95.050510][ T1230] usb 4-1: SerialNumber: syz [ 95.057514][ T1230] usb 4-1: config 0 descriptor?? [ 95.065695][ T1230] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 95.075891][ T30] audit: type=1400 audit(1793902001.983:253): avc: denied { read write } for pid=5993 comm="syz.0.54" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.076238][ T30] audit: type=1400 audit(1793902001.983:254): avc: denied { open } for pid=5993 comm="syz.0.54" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.182323][ T5717] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 95.192331][ T1230] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.238717][ T1230] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.456790][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.457228][ T5717] usb 5-1: not running at top speed; connect to a high speed hub [ 95.457255][ T5717] usb 5-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 95.458143][ T5717] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 95.460324][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.460348][ T5717] usb 5-1: Product: syz [ 95.460362][ T5717] usb 5-1: Manufacturer: syz [ 95.460376][ T5717] usb 5-1: SerialNumber: syz [ 95.622495][ T6005] can0: slcan on ttyS3. [ 95.996491][ T6005] can0 (unregistered): slcan off ttyS3. [ 96.172064][ T5717] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.291795][ T6020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.352840][ T6022] grow_buffers: requested out-of-range block 8404203460312500479 for device sda1 [ 96.352883][ T6022] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 96.468621][ T5717] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 96.468650][ T5717] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 96.939380][ T5717] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 96.939412][ T5717] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 97.155725][ T5717] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 97.438571][ T5717] usb 5-1: USB disconnect, device number 2 [ 97.518439][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.556390][ T6036] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 97.691759][ T1230] usb 4-1: USB disconnect, device number 3 [ 97.824424][ T5759] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.162370][ T5759] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 98.175448][ T5759] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.183600][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.183628][ T5759] usb 3-1: SerialNumber: syz [ 98.759615][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 99.319333][ T6057] can0: slcan on ttyS3. [ 99.372060][ T5759] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 99.387326][ T6060] can0 (unregistered): slcan off ttyS3. [ 99.528568][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 99.528608][ T30] audit: type=1400 audit(1793902006.433:274): avc: denied { map_read map_write } for pid=6067 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.324239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.394637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.804181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.183639][ T5741] usb 3-1: USB disconnect, device number 3 [ 103.968208][ T30] audit: type=1400 audit(1793902010.833:275): avc: denied { write } for pid=6072 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.643340][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 105.066515][ T30] audit: type=1400 audit(1793902011.963:276): avc: denied { write } for pid=6091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.143469][ T30] audit: type=1400 audit(1793902012.043:277): avc: denied { write } for pid=6110 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.483230][ T30] audit: type=1400 audit(1793902013.383:278): avc: denied { read write } for pid=6121 comm="syz.3.89" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.510073][ T30] audit: type=1400 audit(1793902013.423:279): avc: denied { open } for pid=6121 comm="syz.3.89" path="/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.541703][ T30] audit: type=1400 audit(1793902013.453:280): avc: denied { ioctl } for pid=6121 comm="syz.3.89" path="/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.654913][ T5741] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 106.727012][ T6126] device-mapper: table: 248:0: ram6 too small for target: start=8191, len=8192, dev_size=8192 [ 106.727051][ T6126] device-mapper: core: Cannot calculate initial queue limits [ 106.727060][ T6126] device-mapper: ioctl: unable to set up device queue for new table. [ 107.276659][ T2298] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 108.136262][ T2298] usb 5-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 108.278224][ T30] audit: type=1400 audit(1793902015.183:281): avc: denied { write } for pid=6135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.296902][ T2298] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 108.296934][ T2298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.296961][ T2298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.722321][ T2298] usb 5-1: config 0 descriptor?? [ 108.733741][ T6129] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.046698][ T30] audit: type=1400 audit(1793902015.953:282): avc: denied { write } for pid=6158 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.706905][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x3 [ 109.706937][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.706958][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.706978][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.707003][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.707022][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.707042][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.707073][ T2298] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 109.710088][ T2298] hid-steam 0003:28DE:1205.0002: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 109.710644][ T2298] hid-steam 0003:28DE:1205.0002: steam_register:steam_get_attributes failed with error -22 [ 109.710681][ T2298] hid-steam 0003:28DE:1205.0002: Steam Deck 'XXXXXXXXXX' connected [ 109.924888][ T2298] input: Steam Deck as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0002/input/input5 [ 110.547266][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.841109][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 110.843257][ T24] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.864095][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.864125][ T24] usb 1-1: config 179 has no interface number 0 [ 110.864369][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.864402][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.864434][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.864464][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.864649][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.864917][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.289838][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.385531][ T2298] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0002/input/input6 [ 111.444264][ T2298] hid-steam 0003:28DE:1205.0003: unknown main item tag 0x3 [ 111.444301][ T2298] hid-steam 0003:28DE:1205.0003: unknown main item tag 0x0 [ 111.501500][ T2298] hid-steam 0003:28DE:1205.0003: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 111.558688][ T2298] usb 5-1: USB disconnect, device number 3 [ 111.698605][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 111.713551][ T2298] hid-steam 0003:28DE:1205.0002: Steam Deck 'XXXXXXXXXX' disconnected [ 111.788816][ T30] audit: type=1400 audit(1793902018.693:283): avc: denied { write } for pid=6161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.327743][ T6182] fido_id[6182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 112.474461][ T30] audit: type=1400 audit(1793902019.373:284): avc: denied { read } for pid=6169 comm="syz.0.95" name="event4" dev="devtmpfs" ino=2820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.474568][ T30] audit: type=1400 audit(1793902019.373:285): avc: denied { open } for pid=6169 comm="syz.0.95" path="/dev/input/event4" dev="devtmpfs" ino=2820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.582366][ T30] audit: type=1400 audit(1793902019.483:286): avc: denied { ioctl } for pid=6169 comm="syz.0.95" path="/dev/input/event4" dev="devtmpfs" ino=2820 ioctlcmd=0x40304580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.816735][ T24] usb 1-1: USB disconnect, device number 4 [ 112.816789][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.816870][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.835045][ T30] audit: type=1400 audit(1793902019.733:287): avc: denied { write } for pid=6191 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.914217][ T6193] gadgetfs: bound to dummy_udc driver [ 112.946051][ T30] audit: type=1400 audit(1793902019.853:288): avc: denied { read write } for pid=6198 comm="syz.3.103" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.958100][ T30] audit: type=1400 audit(1793902019.853:289): avc: denied { open } for pid=6198 comm="syz.3.103" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.965241][ T30] audit: type=1400 audit(1793902019.853:290): avc: denied { ioctl } for pid=6198 comm="syz.3.103" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.061756][ T30] audit: type=1400 audit(1793902019.963:291): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 113.309072][ T6206] Illegal XDP return value 4294967274 on prog (id 16) dev syz_tun, expect packet loss! [ 114.321659][ T2298] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.127217][ T30] audit: type=1400 audit(1793902022.033:292): avc: denied { write } for pid=6203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.129913][ T6226] gadgetfs: bound to dummy_udc driver [ 116.277257][ T6255] syzkaller1: entered promiscuous mode [ 116.277285][ T6255] syzkaller1: entered allmulticast mode [ 116.446593][ T6263] ip_tables: iptables: counters copy to user failed while replacing table [ 116.465435][ T6263] syz.3.115 uses obsolete (PF_INET,SOCK_PACKET) [ 116.694577][ T2298] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 117.056680][ T2298] usb 3-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 117.116752][ T2298] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.116787][ T2298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.116851][ T2298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 117.260872][ T2298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.260911][ T2298] usb 3-1: Product: syz [ 117.260926][ T2298] usb 3-1: Manufacturer: syz [ 117.260941][ T2298] usb 3-1: SerialNumber: syz [ 118.075311][ T2298] usb 3-1: config 0 descriptor?? [ 118.092510][ T6260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.885677][ T2298] rc_core: IR keymap rc-streamzap not found [ 118.885732][ T2298] Registered IR keymap rc-empty [ 118.895678][ T2298] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 118.931400][ T2298] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 119.008869][ T2298] usb 3-1: USB disconnect, device number 4 [ 119.218437][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 119.218451][ T30] audit: type=1400 audit(1793902026.123:298): avc: denied { write } for pid=6259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.262812][ T30] audit: type=1800 audit(1793902026.113:297): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.123" name="bus" dev="sda1" ino=2047 res=0 errno=-22 [ 119.314451][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.091648][ T9] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.131706][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.131754][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.173233][ T9] usb 1-1: config 0 descriptor?? [ 120.206841][ T30] audit: type=1400 audit(1793902027.113:299): avc: denied { write } for pid=6298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.211723][ T6281] nvme nvme0: rdma_resolve_addr failed (-99). [ 120.238023][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 120.252944][ T6304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6304 comm=syz.4.124 [ 121.265483][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 122.283270][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.658472][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 122.660364][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 122.661031][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 122.661375][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 122.662231][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 122.662619][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 122.662979][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 122.663349][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 122.666239][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.672927][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.674450][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.676504][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.677159][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.678457][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.768616][ T9] pwc: Registered as video103. [ 122.790084][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 122.877410][ T9] usb 1-1: USB disconnect, device number 5 [ 123.759919][ T30] audit: type=1400 audit(1793902030.663:300): avc: denied { mounton } for pid=6336 comm="syz.2.130" path="/22/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 123.842942][ T30] audit: type=1800 audit(1793902030.743:301): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.130" name=08 dev="sda1" ino=2048 res=0 errno=-22 [ 124.131589][ T30] audit: type=1400 audit(1793902031.033:302): avc: denied { mount } for pid=6340 comm="syz.0.132" name="/" dev="pstore" ino=4196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 124.182390][ T30] audit: type=1400 audit(1793902031.083:303): avc: denied { write } for pid=6313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.338377][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 124.451143][ T30] audit: type=1400 audit(1793902031.353:304): avc: denied { write } for pid=6351 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.605310][ T6359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.684331][ T30] audit: type=1400 audit(1793902031.583:305): avc: denied { load_policy } for pid=6352 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.710636][ T6353] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 124.710864][ T6353] SELinux: failed to load policy [ 124.843787][ T6357] rxe_eth0 speed is unknown, defaulting to 1000 [ 125.005854][ T30] audit: type=1400 audit(1793902031.913:306): avc: denied { connect } for pid=6372 comm="syz.0.141" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.008943][ T30] audit: type=1400 audit(1793902031.913:307): avc: denied { write } for pid=6372 comm="syz.0.141" path="socket:[10002]" dev="sockfs" ino=10002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.761713][ T6379] can0: slcan on ttyS3. [ 125.781951][ T6383] JFS: charset not found [ 125.836736][ T61] IPVS: starting estimator thread 0... [ 125.884250][ T6380] can0 (unregistered): slcan off ttyS3. [ 125.925202][ T6384] IPVS: using max 42 ests per chain, 100800 per kthread [ 126.088459][ T30] audit: type=1400 audit(1793902032.993:308): avc: denied { mount } for pid=6391 comm="syz.4.147" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.112934][ T30] audit: type=1400 audit(1793902033.013:309): avc: denied { search } for pid=6391 comm="syz.4.147" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.152168][ T30] audit: type=1400 audit(1793902033.053:310): avc: denied { search } for pid=6391 comm="syz.4.147" name="instances" dev="tracefs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.154067][ T30] audit: type=1400 audit(1793902033.053:311): avc: denied { write search } for pid=6391 comm="syz.4.147" name="instances" dev="tracefs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.207747][ T30] audit: type=1400 audit(1793902033.113:312): avc: denied { add_name } for pid=6391 comm="syz.4.147" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.217871][ T30] audit: type=1400 audit(1793902033.113:313): avc: denied { create } for pid=6391 comm="syz.4.147" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 126.314715][ T6392] FAULT_INJECTION: forcing a failure. [ 126.314715][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 126.314750][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.4.147 Not tainted syzkaller #0 PREEMPT(full) [ 126.314776][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 126.314789][ T6392] Call Trace: [ 126.314798][ T6392] [ 126.314806][ T6392] dump_stack_lvl+0x100/0x190 [ 126.314861][ T6392] should_fail_ex.cold+0x5/0xa [ 126.314895][ T6392] should_failslab+0xc2/0x120 [ 126.314921][ T6392] __kmalloc_node_noprof+0xff/0x870 [ 126.314956][ T6392] ? __rb_allocate_pages+0x241/0xff0 [ 126.314999][ T6392] __rb_allocate_pages+0x241/0xff0 [ 126.315027][ T6392] ? rb_allocate_cpu_buffer+0x431/0x2780 [ 126.315065][ T6392] rb_allocate_cpu_buffer+0x9d1/0x2780 [ 126.315108][ T6392] ? __pfx_rb_allocate_cpu_buffer+0x10/0x10 [ 126.315140][ T6392] ? __kasan_kmalloc+0xaa/0xb0 [ 126.315163][ T6392] ? __kmalloc_noprof+0x350/0x840 [ 126.315195][ T6392] ? alloc_buffer+0x2f0/0x1610 [ 126.315231][ T6392] alloc_buffer+0x4ad/0x1610 [ 126.315278][ T6392] __ring_buffer_alloc+0x2d/0x40 [ 126.315311][ T6392] allocate_trace_buffer+0x150/0xa30 [ 126.315346][ T6392] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 126.315380][ T6392] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 126.315414][ T6392] ? lockdep_init_map_type+0x5c/0x250 [ 126.315449][ T6392] trace_array_create_systems+0x582/0xc30 [ 126.315524][ T6392] instance_mkdir+0xca/0x140 [ 126.315558][ T6392] tracefs_syscall_mkdir+0x10e/0x180 [ 126.315604][ T6392] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 126.315642][ T6392] vfs_mkdir+0x36d/0x8a0 [ 126.315681][ T6392] filename_mkdirat+0x4c4/0x630 [ 126.315711][ T6392] ? __pfx_filename_mkdirat+0x10/0x10 [ 126.315739][ T6392] ? strncpy_from_user+0x19d/0x2d0 [ 126.315773][ T6392] ? do_getname+0x191/0x390 [ 126.315805][ T6392] __x64_sys_mkdirat+0x89/0xc0 [ 126.315880][ T6392] do_syscall_64+0x123/0x790 [ 126.315913][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.315936][ T6392] RIP: 0033:0x7facb739fb19 [ 126.315953][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.315972][ T6392] RSP: 002b:00007facb8235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.316020][ T6392] RAX: ffffffffffffffda RBX: 00007facb7625fa0 RCX: 00007facb739fb19 [ 126.316035][ T6392] RDX: 00000000000001ff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 126.316048][ T6392] RBP: 00007facb7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 126.316062][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.316075][ T6392] R13: 00007facb7626038 R14: 00007facb7625fa0 R15: 00007ffd81e5bad8 [ 126.316104][ T6392] [ 127.111967][ T6406] loop7: detected capacity change from 0 to 7 [ 127.280252][ T6406] Dev loop7: unable to read RDB block 7 [ 127.280304][ T6406] loop7: unable to read partition table [ 127.280461][ T6406] loop7: partition table beyond EOD, truncated [ 127.280483][ T6406] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 127.367350][ T6416] CIFS: Attempting to mount //127.0.0.1/share [ 127.386818][ T5741] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.420621][ T6417] CIFS: VFS: Invalid response size 0 for command 0 [ 127.434390][ T6416] CIFS: VFS: cifs_mount failed w/return code = -5 [ 127.536740][ T5741] usb 2-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 127.543259][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.543288][ T5741] usb 2-1: Product: syz [ 127.543303][ T5741] usb 2-1: Manufacturer: syz [ 127.543317][ T5741] usb 2-1: SerialNumber: syz [ 128.379890][ T6428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6428 comm=syz.2.157 [ 128.558994][ T5741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.858213][ T6437] FAULT_INJECTION: forcing a failure. [ 128.858213][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 128.858244][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT(full) [ 128.858267][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 128.858279][ T6437] Call Trace: [ 128.858286][ T6437] [ 128.858293][ T6437] dump_stack_lvl+0x100/0x190 [ 128.858332][ T6437] should_fail_ex.cold+0x5/0xa [ 128.858371][ T6437] should_failslab+0xc2/0x120 [ 128.858394][ T6437] __kmalloc_noprof+0xfc/0x840 [ 128.858459][ T6437] ? find_held_lock+0x2b/0x80 [ 128.858482][ T6437] ? bpf_test_init.isra.0+0x88/0x100 [ 128.858509][ T6437] bpf_test_init.isra.0+0x88/0x100 [ 128.858534][ T6437] bpf_prog_test_run_nf+0x26f/0xb10 [ 128.858563][ T6437] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 128.858586][ T6437] ? __rcu_read_unlock+0x27f/0x5a0 [ 128.858618][ T6437] ? fput+0x7c/0x100 [ 128.858641][ T6437] ? __bpf_prog_get+0x97/0x290 [ 128.858671][ T6437] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 128.858693][ T6437] __sys_bpf+0x1d13/0x4b60 [ 128.858719][ T6437] ? __pfx___sys_bpf+0x10/0x10 [ 128.858735][ T6437] ? find_held_lock+0x2b/0x80 [ 128.858754][ T6437] ? futex_wake+0x4ea/0x5e0 [ 128.858800][ T6437] ? find_held_lock+0x2b/0x80 [ 128.858821][ T6437] ? __fget_files+0x215/0x3d0 [ 128.858843][ T6437] ? __fget_files+0x215/0x3d0 [ 128.858878][ T6437] ? __x64_sys_futex+0x34f/0x4d0 [ 128.858898][ T6437] ? __x64_sys_futex+0x358/0x4d0 [ 128.858922][ T6437] ? xfd_validate_state+0x129/0x190 [ 128.858957][ T6437] ? __x64_sys_bpf+0xce/0x140 [ 128.858975][ T6437] __x64_sys_bpf+0xce/0x140 [ 128.858994][ T6437] ? do_syscall_64+0xae/0x790 [ 128.859032][ T6437] do_syscall_64+0x123/0x790 [ 128.859057][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.859078][ T6437] RIP: 0033:0x7f0a4419fb19 [ 128.859097][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.859114][ T6437] RSP: 002b:00007f0a450c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.859135][ T6437] RAX: ffffffffffffffda RBX: 00007f0a44425fa0 RCX: 00007f0a4419fb19 [ 128.859145][ T6437] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 128.859155][ T6437] RBP: 00007f0a44237b70 R08: 0000000000000000 R09: 0000000000000000 [ 128.859165][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.859176][ T6437] R13: 00007f0a44426038 R14: 00007f0a44425fa0 R15: 00007ffc83b7a568 [ 128.859200][ T6437] [ 129.195332][ T5741] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 129.203730][ T5741] usb 2-1: USB disconnect, device number 2 [ 129.290358][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.705885][ T6452] ALSA: mixer_oss: invalid OSS volume '' [ 129.734988][ T6452] can0: slcan on ttyS3. [ 129.885554][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 129.885574][ T30] audit: type=1400 audit(1793902036.783:323): avc: denied { write } for pid=6447 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.156026][ T6452] can0 (unregistered): slcan off ttyS3. [ 133.464895][ T6478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6478 comm=syz.3.174 [ 133.490669][ T6454] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.515192][ T6454] syzkaller0: entered promiscuous mode [ 133.515221][ T6454] syzkaller0: entered allmulticast mode [ 133.719419][ T6471] FAULT_INJECTION: forcing a failure. [ 133.719419][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 133.719460][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT(full) [ 133.719501][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 133.719514][ T6471] Call Trace: [ 133.719522][ T6471] [ 133.719530][ T6471] dump_stack_lvl+0x100/0x190 [ 133.719569][ T6471] should_fail_ex.cold+0x5/0xa [ 133.719604][ T6471] should_failslab+0xc2/0x120 [ 133.719629][ T6471] __kmalloc_cache_noprof+0x91/0x6d0 [ 133.719656][ T6471] ? kasan_save_track+0x14/0x30 [ 133.719676][ T6471] ? slhc_init+0x7d/0x570 [ 133.719701][ T6471] slhc_init+0x7d/0x570 [ 133.719729][ T6471] slip_open+0x900/0x1120 [ 133.719766][ T6471] ? __pfx_slip_open+0x10/0x10 [ 133.719797][ T6471] ? down_write+0x141/0x1f0 [ 133.719824][ T6471] ? __pfx_slip_open+0x10/0x10 [ 133.719861][ T6471] tty_ldisc_open+0xa2/0x120 [ 133.719892][ T6471] tty_set_ldisc+0x325/0x740 [ 133.719927][ T6471] tty_ioctl+0x699/0x1870 [ 133.719948][ T6471] ? __pfx_tty_ioctl+0x10/0x10 [ 133.719966][ T6471] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 133.720004][ T6471] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 133.720039][ T6471] ? __fget_files+0x34/0x3d0 [ 133.720075][ T6471] ? selinux_file_ioctl+0x1e0/0x290 [ 133.720104][ T6471] ? selinux_file_ioctl+0x1e7/0x290 [ 133.720136][ T6471] ? __pfx_tty_ioctl+0x10/0x10 [ 133.720156][ T6471] __x64_sys_ioctl+0x18e/0x210 [ 133.720179][ T6471] do_syscall_64+0x123/0x790 [ 133.720202][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.720223][ T6471] RIP: 0033:0x7f095fd9fb19 [ 133.720243][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.720262][ T6471] RSP: 002b:00007f0960d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.720284][ T6471] RAX: ffffffffffffffda RBX: 00007f0960025fa0 RCX: 00007f095fd9fb19 [ 133.720297][ T6471] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 133.720309][ T6471] RBP: 00007f095fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 133.720321][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.720332][ T6471] R13: 00007f0960026038 R14: 00007f0960025fa0 R15: 00007ffdbe8472e8 [ 133.720359][ T6471] [ 134.690717][ T6485] xt_hashlimit: size too large, truncated to 1048576 [ 134.818678][ T6490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6490 comm=syz.2.172 [ 135.946499][ T30] audit: type=1400 audit(1793902042.853:324): avc: denied { create } for pid=6496 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.982402][ T30] audit: type=1400 audit(1793902042.883:325): avc: denied { write } for pid=6496 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.982652][ T30] audit: type=1400 audit(1793902042.883:326): avc: denied { nlmsg_write } for pid=6496 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.261224][ T6505] ALSA: mixer_oss: invalid OSS volume '' [ 136.282826][ T6505] can0: slcan on ttyS3. [ 136.444787][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.444880][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.778795][ T6505] can0 (unregistered): slcan off ttyS3. [ 138.988304][ T30] audit: type=1400 audit(1793902045.893:327): avc: denied { unlink } for pid=6518 comm="syz.0.184" name="#3" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.251162][ T6528] FAULT_INJECTION: forcing a failure. [ 139.251162][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 139.251187][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT(full) [ 139.251202][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 139.251210][ T6528] Call Trace: [ 139.251215][ T6528] [ 139.251221][ T6528] dump_stack_lvl+0x100/0x190 [ 139.251245][ T6528] should_fail_ex.cold+0x5/0xa [ 139.251265][ T6528] should_failslab+0xc2/0x120 [ 139.251280][ T6528] kmem_cache_alloc_noprof+0x92/0x6a0 [ 139.251299][ T6528] ? stack_depot_save_flags+0x49a/0xa10 [ 139.251318][ T6528] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 139.251343][ T6528] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 139.251365][ T6528] ? shrinker_alloc+0xf7/0xc50 [ 139.251380][ T6528] radix_tree_extend+0x1a2/0x4d0 [ 139.251403][ T6528] idr_get_free+0x5ec/0xa00 [ 139.251422][ T6528] idr_alloc_u32+0x1ac/0x320 [ 139.251438][ T6528] ? __pfx_idr_alloc_u32+0x10/0x10 [ 139.251458][ T6528] idr_alloc+0xc0/0x130 [ 139.251471][ T6528] ? __pfx_idr_alloc+0x10/0x10 [ 139.251484][ T6528] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 139.251500][ T6528] ? shrinker_alloc+0xf7/0xc50 [ 139.251515][ T6528] shrinker_alloc+0x3ae/0xc50 [ 139.251530][ T6528] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 139.251550][ T6528] ? rcu_is_watching+0x13/0xc0 [ 139.251564][ T6528] ? __pfx_shrinker_alloc+0x10/0x10 [ 139.251579][ T6528] ? lockdep_init_map_type+0x5c/0x250 [ 139.251596][ T6528] ? lockdep_init_map_type+0x5c/0x250 [ 139.251614][ T6528] ? __raw_spin_lock_init+0x3a/0x110 [ 139.251625][ T6528] ? __init_rwsem+0x10e/0x180 [ 139.251645][ T6528] sget_fc+0x983/0x1e10 [ 139.251663][ T6528] ? __pfx_set_anon_super_fc+0x10/0x10 [ 139.251696][ T6528] ? __pfx_sget_fc+0x10/0x10 [ 139.251707][ T6528] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 139.251724][ T6528] ? __kasan_kmalloc+0xaa/0xb0 [ 139.251735][ T6528] ? hook_capable+0x1bc/0x500 [ 139.251755][ T6528] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 139.251769][ T6528] get_tree_nodev+0x28/0x190 [ 139.251783][ T6528] hugetlbfs_get_tree+0x1e7/0x2b0 [ 139.251797][ T6528] vfs_get_tree+0x92/0x320 [ 139.251815][ T6528] path_mount+0x7d0/0x2850 [ 139.251835][ T6528] ? __pfx_path_mount+0x10/0x10 [ 139.251858][ T6528] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.251902][ T6528] ? putname+0xb1/0x110 [ 139.251919][ T6528] ? kmem_cache_free+0x127/0x6c0 [ 139.251942][ T6528] ? __x64_sys_mount+0x293/0x310 [ 139.251962][ T6528] __x64_sys_mount+0x293/0x310 [ 139.251992][ T6528] ? __pfx___x64_sys_mount+0x10/0x10 [ 139.252015][ T6528] do_syscall_64+0x123/0x790 [ 139.252030][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.252044][ T6528] RIP: 0033:0x7f095fd9fb19 [ 139.252058][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.252070][ T6528] RSP: 002b:00007f0960d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.252086][ T6528] RAX: ffffffffffffffda RBX: 00007f0960025fa0 RCX: 00007f095fd9fb19 [ 139.252094][ T6528] RDX: 0000200000000f00 RSI: 0000200000000ec0 RDI: 0000000000000000 [ 139.252112][ T6528] RBP: 00007f095fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 139.252119][ T6528] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 139.252126][ T6528] R13: 00007f0960026038 R14: 00007f0960025fa0 R15: 00007ffdbe8472e8 [ 139.252142][ T6528] [ 139.621896][ T30] audit: type=1400 audit(1793902046.523:328): avc: denied { name_bind } for pid=6529 comm="syz.2.188" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 139.728582][ T30] audit: type=1400 audit(1793902046.633:329): avc: denied { bind } for pid=6531 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.759769][ T6536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6536 comm=syz.0.190 [ 140.616521][ T30] audit: type=1400 audit(1793902047.513:330): avc: denied { create } for pid=6531 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.912368][ T30] audit: type=1400 audit(1793902047.803:331): avc: denied { write } for pid=6531 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.765179][ T6558] ALSA: mixer_oss: invalid OSS volume '' [ 142.788249][ T6558] can0: slcan on ttyS3. [ 143.266613][ T6558] can0 (unregistered): slcan off ttyS3. [ 143.522895][ T6565] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 143.608891][ T6568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.614163][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.636195][ T6568] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 143.765876][ T9] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 143.768704][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 143.768738][ T9] usb 5-1: config 0 has no interface number 0 [ 143.768771][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.772099][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.772122][ T9] usb 5-1: Product: syz [ 143.772136][ T9] usb 5-1: Manufacturer: syz [ 143.772148][ T9] usb 5-1: SerialNumber: syz [ 143.777284][ T9] usb 5-1: config 0 descriptor?? [ 143.807621][ T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 143.975497][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.036362][ T30] audit: type=1400 audit(1793902050.943:332): avc: denied { mount } for pid=6560 comm="syz.4.197" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 145.125493][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 145.127295][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.127344][ T24] usb 3-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 145.128264][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 145.131444][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.131473][ T24] usb 3-1: Product: syz [ 145.131487][ T24] usb 3-1: Manufacturer: syz [ 145.131501][ T24] usb 3-1: SerialNumber: syz [ 145.632761][ T6582] ALSA: mixer_oss: invalid OSS volume '' [ 145.640839][ T6582] can0: slcan on ttyS3. [ 145.748497][ T6582] can0 (unregistered): slcan off ttyS3. [ 145.751058][ T24] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 145.751563][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 145.780876][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6584 comm=syz.0.203 [ 145.814079][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.966577][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 145.969179][ T5759] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 145.997190][ T5759] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 145.997226][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.030621][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.031001][ T5759] usb 2-1: SerialNumber: syz [ 146.114195][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 146.136947][ C0] usb 5-1: yurex_control_callback - control failed: -32 [ 146.193408][ T29] usb 5-1: USB disconnect, device number 4 [ 146.377375][ T5759] usb 2-1: 0:2 : does not exist [ 146.792736][ T29] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 147.177138][ T5759] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 147.435865][ T5759] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 147.703828][ T5759] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 147.898318][ T30] audit: type=1400 audit(1793902054.803:333): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 148.550975][ T5759] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 148.551066][ T5759] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 148.551084][ T5759] usb 2-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1 [ 148.582000][ T5759] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 148.582031][ T5759] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 148.582046][ T5759] usb 2-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 148.585902][ T5759] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 148.589698][ T5759] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 148.593380][ T5759] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 148.597584][ T5759] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 148.601223][ T5759] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 148.667517][ T5759] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 148.687376][ T5759] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 148.702625][ T5759] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 148.806203][ T5759] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 148.821330][ T5759] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 148.838236][ T5759] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 148.847612][ T5759] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 148.924102][ T6602] ALSA: mixer_oss: invalid OSS volume '' [ 148.943438][ T6602] can0: slcan on ttyS3. [ 149.114200][ T29] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.265565][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 149.302441][ T29] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 149.352107][ T29] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 149.352128][ T29] usb 1-1: config 0 has no interface number 0 [ 149.352151][ T29] usb 1-1: config 0 interface 12 has no altsetting 0 [ 149.390278][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.390330][ T29] usb 1-1: Product: syz [ 149.390339][ T29] usb 1-1: Manufacturer: syz [ 149.390347][ T29] usb 1-1: SerialNumber: syz [ 149.423220][ T29] usb 1-1: config 0 descriptor?? [ 149.455838][ T5759] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 149.462530][ T5759] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 149.464260][ T6602] can0 (unregistered): slcan off ttyS3. [ 149.538752][ T5759] usb 2-1: USB disconnect, device number 3 [ 149.602628][ T30] audit: type=1400 audit(1793902056.503:334): avc: denied { create } for pid=6606 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.640196][ T30] audit: type=1400 audit(1793902056.543:335): avc: denied { write } for pid=6606 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.666835][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.666870][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.671666][ T24] usb 3-1: USB disconnect, device number 5 [ 149.807070][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.837061][ T5741] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.881036][ T30] audit: type=1400 audit(1793902056.783:336): avc: denied { bind } for pid=6614 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.885984][ T30] audit: type=1400 audit(1793902056.793:337): avc: denied { listen } for pid=6614 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.891236][ T30] audit: type=1400 audit(1793902056.793:338): avc: denied { connect } for pid=6614 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.920205][ T30] audit: type=1400 audit(1793902056.813:339): avc: denied { write } for pid=6614 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.931173][ T30] audit: type=1400 audit(1793902056.833:340): avc: denied { accept } for pid=6614 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.934654][ T30] audit: type=1400 audit(1793902056.833:341): avc: denied { read } for pid=6614 comm="syz.4.212" path="socket:[12635]" dev="sockfs" ino=12635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.015657][ T5741] usb 4-1: Using ep0 maxpacket: 16 [ 150.020431][ T5741] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 150.021421][ T5741] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 150.021444][ T5741] usb 4-1: config 0 has no interface number 0 [ 150.021474][ T5741] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 150.021496][ T5741] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 150.021517][ T5741] usb 4-1: config 0 interface 41 has no altsetting 0 [ 150.023349][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.023371][ T5741] usb 4-1: Product: syz [ 150.023384][ T5741] usb 4-1: Manufacturer: syz [ 150.023397][ T5741] usb 4-1: SerialNumber: syz [ 150.026895][ T5741] usb 4-1: config 0 descriptor?? [ 150.029537][ T6608] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.029630][ T6608] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.166702][ T30] audit: type=1400 audit(1793902057.073:342): avc: denied { create } for pid=6612 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.167907][ T30] audit: type=1400 audit(1793902057.073:343): avc: denied { getopt } for pid=6612 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.211733][ T6620] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 150.282125][ T6608] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.282247][ T6608] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.661032][ T6636] FAULT_INJECTION: forcing a failure. [ 150.661032][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 150.661067][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.4.219 Not tainted syzkaller #0 PREEMPT(full) [ 150.661091][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 150.661102][ T6636] Call Trace: [ 150.661109][ T6636] [ 150.661117][ T6636] dump_stack_lvl+0x100/0x190 [ 150.661194][ T6636] should_fail_ex.cold+0x5/0xa [ 150.661229][ T6636] should_failslab+0xc2/0x120 [ 150.661254][ T6636] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 150.661288][ T6636] ? kstrdup_const+0x63/0x80 [ 150.661314][ T6636] kstrdup+0x51/0xe0 [ 150.661340][ T6636] kstrdup_const+0x63/0x80 [ 150.661360][ T6636] __kernfs_new_node+0x9b/0xa10 [ 150.661384][ T6636] ? __pfx___kernfs_new_node+0x10/0x10 [ 150.661406][ T6636] ? lock_acquire+0x1d1/0x380 [ 150.661432][ T6636] ? kernfs_root+0x23/0x2a0 [ 150.661462][ T6636] ? find_held_lock+0x2b/0x80 [ 150.661482][ T6636] ? kernfs_root+0xee/0x2a0 [ 150.661511][ T6636] ? kernfs_root+0xee/0x2a0 [ 150.661545][ T6636] kernfs_new_node+0x194/0x200 [ 150.661568][ T6636] ? __pfx_kernfs_new_node+0x10/0x10 [ 150.661587][ T6636] ? kernfs_create_link+0xe4/0x280 [ 150.661611][ T6636] ? kernfs_create_link+0xe4/0x280 [ 150.661647][ T6636] kernfs_create_link+0x100/0x280 [ 150.661674][ T6636] sysfs_do_create_link_sd+0x90/0x140 [ 150.661712][ T6636] sysfs_create_link+0x61/0xc0 [ 150.661768][ T6636] device_add+0x675/0x1970 [ 150.661798][ T6636] ? __pfx_device_add+0x10/0x10 [ 150.661822][ T6636] ? __pfx___might_resched+0x10/0x10 [ 150.661859][ T6636] __add_disk+0x592/0xf10 [ 150.661891][ T6636] add_disk_fwnode+0x118/0x480 [ 150.661917][ T6636] null_add_dev+0x129d/0x1df0 [ 150.661936][ T6636] ? __pfx_null_add_dev+0x10/0x10 [ 150.661947][ T6636] ? __lock_acquire+0xe8b/0x1f40 [ 150.661997][ T6636] ? __pfx___might_resched+0x10/0x10 [ 150.662030][ T6636] nullb_device_power_store+0x29d/0x350 [ 150.662056][ T6636] ? __pfx_nullb_device_power_store+0x10/0x10 [ 150.662076][ T6636] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 150.662094][ T6636] ? configfs_write_iter+0x388/0x4e0 [ 150.662109][ T6636] configfs_write_iter+0x302/0x4e0 [ 150.662126][ T6636] vfs_write+0x6af/0x1050 [ 150.662145][ T6636] ? __pfx_configfs_write_iter+0x10/0x10 [ 150.662167][ T6636] ? __pfx_vfs_write+0x10/0x10 [ 150.662183][ T6636] ? find_held_lock+0x2b/0x80 [ 150.662219][ T6636] ksys_write+0x12a/0x250 [ 150.662231][ T6636] ? __pfx_ksys_write+0x10/0x10 [ 150.662247][ T6636] do_syscall_64+0x123/0x790 [ 150.662262][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.662275][ T6636] RIP: 0033:0x7facb739fb19 [ 150.662294][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.662312][ T6636] RSP: 002b:00007facb8235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.662333][ T6636] RAX: ffffffffffffffda RBX: 00007facb7625fa0 RCX: 00007facb739fb19 [ 150.662346][ T6636] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 150.662367][ T6636] RBP: 00007facb7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 150.662374][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.662381][ T6636] R13: 00007facb7626038 R14: 00007facb7625fa0 R15: 00007ffd81e5bad8 [ 150.662398][ T6636] [ 150.715319][ T6634] kvm: pic: non byte write [ 151.157748][ T29] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 151.157964][ T29] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 151.157992][ T29] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 151.158395][ T29] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 151.529642][ T29] usb 1-1: USB disconnect, device number 6 [ 152.965787][ T5741] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 8e:3e:7a:7c:88:d4 [ 152.977566][ T5741] usb 4-1: USB disconnect, device number 4 [ 152.981019][ T5741] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 153.062358][ T6649] FAULT_INJECTION: forcing a failure. [ 153.062358][ T6649] name fail_futex, interval 1, probability 0, space 0, times 1 [ 153.062383][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(full) [ 153.062405][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.062416][ T6649] Call Trace: [ 153.062423][ T6649] [ 153.062431][ T6649] dump_stack_lvl+0x100/0x190 [ 153.062471][ T6649] should_fail_ex.cold+0x5/0xa [ 153.062504][ T6649] get_futex_key+0x1c9/0x13e0 [ 153.062531][ T6649] ? __pfx_get_futex_key+0x10/0x10 [ 153.062550][ T6649] ? __local_bh_enable_ip+0xa5/0x120 [ 153.062588][ T6649] ? sockopt_release_sock+0x5c/0x70 [ 153.062616][ T6649] futex_wake+0xf4/0x5e0 [ 153.062649][ T6649] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 153.062683][ T6649] ? __pfx_futex_wake+0x10/0x10 [ 153.062714][ T6649] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 153.062751][ T6649] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 153.062787][ T6649] do_futex+0x2b2/0x440 [ 153.062809][ T6649] ? __pfx_do_futex+0x10/0x10 [ 153.062831][ T6649] ? rcu_is_watching+0x13/0xc0 [ 153.062852][ T6649] ? do_sock_setsockopt+0x101/0x1d0 [ 153.062878][ T6649] ? kfree+0x1e5/0x6d0 [ 153.062906][ T6649] __x64_sys_futex+0x34f/0x4d0 [ 153.062934][ T6649] ? __pfx___x64_sys_futex+0x10/0x10 [ 153.062968][ T6649] do_syscall_64+0x123/0x790 [ 153.062992][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.063013][ T6649] RIP: 0033:0x7f0a4419fb19 [ 153.063030][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.063049][ T6649] RSP: 002b:00007f0a450c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.063069][ T6649] RAX: ffffffffffffffda RBX: 00007f0a44425fa8 RCX: 00007f0a4419fb19 [ 153.063082][ T6649] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a44425fac [ 153.063094][ T6649] RBP: 00007f0a44425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 153.063106][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.063118][ T6649] R13: 00007f0a44426038 R14: 00007ffc83b7a480 R15: 00007ffc83b7a568 [ 153.063143][ T6649] [ 154.207883][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.2.226'. [ 154.243333][ T6662] syzkaller1: entered promiscuous mode [ 154.243359][ T6662] syzkaller1: entered allmulticast mode [ 154.441970][ T6667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.629995][ T5741] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.085048][ T5741] usb 4-1: Using ep0 maxpacket: 16 [ 155.086701][ T5741] usb 4-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 155.098571][ T5741] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 155.098600][ T5741] usb 4-1: config 0 has no interface number 0 [ 155.098635][ T5741] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 155.098659][ T5741] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 155.126324][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.126349][ T5741] usb 4-1: Product: syz [ 155.126364][ T5741] usb 4-1: Manufacturer: syz [ 155.126377][ T5741] usb 4-1: SerialNumber: syz [ 155.159484][ T5741] usb 4-1: config 0 descriptor?? [ 155.161517][ T6659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.161618][ T6659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.278665][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 155.278684][ T30] audit: type=1400 audit(1793902062.183:357): avc: denied { create } for pid=6676 comm="syz.2.233" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.312096][ T30] audit: type=1400 audit(1793902062.203:358): avc: denied { read } for pid=6675 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.312147][ T30] audit: type=1400 audit(1793902062.203:359): avc: denied { ioctl } for pid=6675 comm="syz.0.231" path="socket:[12819]" dev="sockfs" ino=12819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.332930][ T30] audit: type=1400 audit(1793902062.223:360): avc: denied { read write } for pid=6676 comm="syz.2.233" name="md0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.332985][ T30] audit: type=1400 audit(1793902062.223:361): avc: denied { open } for pid=6676 comm="syz.2.233" path="/43/md0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.400362][ T6659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.400467][ T6659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.443269][ T6683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6683 comm=syz.0.234 [ 155.482085][ T6677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.493831][ T6677] block device autoloading is deprecated and will be removed. [ 156.065683][ T5741] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 156.128214][ T30] audit: type=1400 audit(1793902063.033:362): avc: denied { unlink } for pid=5622 comm="syz-executor" name="md0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.181616][ T6690] loop2: detected capacity change from 0 to 7 [ 156.209868][ T6690] Dev loop2: unable to read RDB block 7 [ 156.209907][ T6690] loop2: AHDI p1 p2 p3 [ 156.209927][ T6690] loop2: partition table partially beyond EOD, truncated [ 156.210555][ T6690] loop2: p1 start 1818582900 is beyond EOD, truncated [ 156.210577][ T6690] loop2: p3 start 335544320 is beyond EOD, truncated [ 156.439843][ T30] audit: type=1400 audit(1793902063.343:363): avc: denied { read write } for pid=6694 comm="syz.4.237" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 156.440059][ T30] audit: type=1400 audit(1793902063.343:364): avc: denied { open } for pid=6694 comm="syz.4.237" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.658236][ T5741] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 157.658319][ T5741] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 157.658553][ T5741] asix 4-1:0.34: probe with driver asix failed with error -71 [ 157.667615][ T5741] usb 4-1: USB disconnect, device number 5 [ 157.854225][ T30] audit: type=1400 audit(1793902064.763:365): avc: denied { bind } for pid=6703 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.858194][ T30] audit: type=1400 audit(1793902064.763:366): avc: denied { setopt } for pid=6703 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.865012][ T6706] FAULT_INJECTION: forcing a failure. [ 157.865012][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 157.865065][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(full) [ 157.865088][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 157.865100][ T6706] Call Trace: [ 157.865106][ T6706] [ 157.865114][ T6706] dump_stack_lvl+0x100/0x190 [ 157.865149][ T6706] should_fail_ex.cold+0x5/0xa [ 157.865183][ T6706] should_failslab+0xc2/0x120 [ 157.865206][ T6706] __kmalloc_cache_noprof+0x91/0x6d0 [ 157.865231][ T6706] ? tcf_pedit_init+0x412/0x1980 [ 157.865257][ T6706] tcf_pedit_init+0x412/0x1980 [ 157.865282][ T6706] ? __pfx_tcf_pedit_init+0x10/0x10 [ 157.865316][ T6706] ? tcf_action_init_1+0x2d8/0x6c0 [ 157.865345][ T6706] ? __asan_memcpy+0x3c/0x60 [ 157.865374][ T6706] tcf_action_init_1+0x466/0x6c0 [ 157.865401][ T6706] ? __pfx_tcf_action_init_1+0x10/0x10 [ 157.865435][ T6706] ? tcf_action_fill_size+0x110/0x340 [ 157.865463][ T6706] tcf_action_init+0x43a/0xb50 [ 157.865543][ T6706] ? __pfx_tcf_action_init+0x10/0x10 [ 157.865593][ T6706] ? __kernel_text_address+0xd/0x30 [ 157.865614][ T6706] ? unwind_get_return_address+0x59/0xa0 [ 157.865638][ T6706] ? arch_stack_walk+0xa6/0xf0 [ 157.865690][ T6706] ? __lock_acquire+0x5c0/0x1f40 [ 157.865720][ T6706] tcf_action_add+0xef/0x750 [ 157.865747][ T6706] ? __pfx_tcf_action_add+0x10/0x10 [ 157.865809][ T6706] ? __nla_parse+0x40/0x60 [ 157.865832][ T6706] tc_ctl_action+0x2e3/0x470 [ 157.865857][ T6706] ? __pfx_tc_ctl_action+0x10/0x10 [ 157.865890][ T6706] ? __pfx_tc_ctl_action+0x10/0x10 [ 157.865914][ T6706] rtnetlink_rcv_msg+0x3c9/0xe90 [ 157.865941][ T6706] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.865975][ T6706] netlink_rcv_skb+0x159/0x420 [ 157.865997][ T6706] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.866024][ T6706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.866046][ T6706] ? __asan_memcpy+0x3c/0x60 [ 157.866080][ T6706] ? netlink_deliver_tap+0x1ae/0xb50 [ 157.866105][ T6706] netlink_unicast+0x668/0x950 [ 157.866131][ T6706] ? __pfx_netlink_unicast+0x10/0x10 [ 157.866159][ T6706] netlink_sendmsg+0x9ac/0x10c0 [ 157.866185][ T6706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.866212][ T6706] ? selinux_socket_sendmsg+0x198/0x2f0 [ 157.866239][ T6706] ? ____sys_sendmsg+0xa99/0xc30 [ 157.866263][ T6706] ____sys_sendmsg+0xa99/0xc30 [ 157.866286][ T6706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.866311][ T6706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.866347][ T6706] ___sys_sendmsg+0x190/0x1e0 [ 157.866373][ T6706] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.866398][ T6706] ? futex_wait+0x11e/0x370 [ 157.866452][ T6706] ? find_held_lock+0x2b/0x80 [ 157.866489][ T6706] __sys_sendmsg+0x160/0x210 [ 157.866511][ T6706] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.866548][ T6706] do_syscall_64+0x123/0x790 [ 157.866571][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.866594][ T6706] RIP: 0033:0x7f095fd9fb19 [ 157.866612][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.866630][ T6706] RSP: 002b:00007f0960d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.866650][ T6706] RAX: ffffffffffffffda RBX: 00007f0960025fa0 RCX: 00007f095fd9fb19 [ 157.866667][ T6706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 157.866679][ T6706] RBP: 00007f095fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 157.866691][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.866713][ T6706] R13: 00007f0960026038 R14: 00007f0960025fa0 R15: 00007ffdbe8472e8 [ 157.866739][ T6706] [ 158.297009][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 158.701055][ T6726] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 158.701099][ T6726] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 158.701181][ T6726] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 158.718403][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.767529][ T6727] netlink: 'syz.3.249': attribute type 4 has an invalid length. [ 158.767556][ T6727] netlink: 152 bytes leftover after parsing attributes in process `syz.3.249'. [ 158.813143][ T5759] syz1: Port: 1 Link DOWN [ 158.904030][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 158.905292][ T24] usb 2-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 158.906213][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.906243][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.908073][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.908096][ T24] usb 2-1: Product: syz [ 158.908110][ T24] usb 2-1: Manufacturer: syz [ 158.908124][ T24] usb 2-1: SerialNumber: syz [ 159.280735][ T24] usb 2-1: config 0 descriptor?? [ 160.096401][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 160.336914][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 160.364409][ T24] imon:send_packet: packet tx failed (-71) [ 160.384106][ T24] imon 2-1:0.0: panel buttons/knobs setup failed [ 160.474730][ T24] rc_core: IR keymap rc-imon-pad not found [ 160.474750][ T24] Registered IR keymap rc-empty [ 160.474875][ T24] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 160.474892][ T24] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 160.476226][ T24] imon:send_packet: packet tx failed (-71) [ 160.495368][ T24] imon 2-1:0.0: remote input dev register failed [ 160.495547][ T24] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 160.548669][ T24] imon 2-1:0.0: unable to initialize intf0, err 0 [ 160.555269][ T24] usb 2-1: USB disconnect, device number 4 [ 160.663728][ T6756] tipc: Started in network mode [ 160.663757][ T6756] tipc: Node identity 7a44cf8f6ed5, cluster identity 4711 [ 160.679492][ T6756] tipc: Enabled bearer , priority 0 [ 160.729565][ T6756] syzkaller0: entered promiscuous mode [ 160.729599][ T6756] syzkaller0: entered allmulticast mode [ 160.730227][ T6756] tipc: Resetting bearer [ 160.862252][ T6755] tipc: Resetting bearer [ 160.990704][ T6763] ALSA: mixer_oss: invalid OSS volume '' [ 160.997155][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 161.186460][ T24] usb 2-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 161.208631][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 161.208760][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 161.208865][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.320085][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.320305][ T24] usb 2-1: Product: syz [ 161.320638][ T24] usb 2-1: Manufacturer: syz [ 161.320814][ T24] usb 2-1: SerialNumber: syz [ 161.375777][ T24] usb 2-1: config 0 descriptor?? [ 161.377690][ T6724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.434618][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 161.439252][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 161.443732][ T24] imon:send_packet: packet tx failed (-71) [ 161.788374][ T24] imon 2-1:0.0: panel buttons/knobs setup failed [ 162.428494][ T6763] slcan: can't register candev [ 162.905760][ T24] rc_core: IR keymap rc-imon-pad not found [ 162.905780][ T24] Registered IR keymap rc-empty [ 162.905853][ T24] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 162.905871][ T24] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 162.907521][ T24] imon:send_packet: packet tx failed (-71) [ 162.940686][ T24] imon 2-1:0.0: remote input dev register failed [ 162.940811][ T24] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 162.981648][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 162.981668][ T30] audit: type=1400 audit(1793902069.883:374): avc: denied { create } for pid=6780 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.984326][ T24] imon 2-1:0.0: unable to initialize intf0, err 0 [ 162.991929][ T24] usb 2-1: USB disconnect, device number 5 [ 163.009954][ T30] audit: type=1400 audit(1793902069.923:375): avc: denied { bind } for pid=6780 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.041477][ T30] audit: type=1400 audit(1793902069.933:376): avc: denied { listen } for pid=6780 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.042136][ T30] audit: type=1400 audit(1793902069.953:377): avc: denied { create } for pid=6783 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.061580][ T30] audit: type=1400 audit(1793902069.953:378): avc: denied { accept } for pid=6780 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.107639][ T30] audit: type=1400 audit(1793902070.013:379): avc: denied { setopt } for pid=6780 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.116370][ T30] audit: type=1400 audit(1793902070.013:380): avc: denied { bind } for pid=6783 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.135735][ T30] audit: type=1400 audit(1793902070.033:381): avc: denied { connect } for pid=6780 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.375883][ T6773] slcan: can't register candev [ 163.867061][ T30] audit: type=1400 audit(1793902070.773:382): avc: denied { create } for pid=6796 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.893671][ T30] audit: type=1400 audit(1793902070.793:383): avc: denied { bind } for pid=6796 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.520006][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 165.356444][ T6808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6808 comm=syz.1.272 [ 166.376873][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6816 comm=syz.3.273 [ 168.255290][ T6755] tipc: Disabling bearer [ 168.258501][ T45] tipc: Node number set to 345100175 [ 168.461305][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 168.461325][ T30] audit: type=1400 audit(1793902075.363:387): avc: denied { create } for pid=6829 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.466415][ T30] audit: type=1400 audit(1793902075.373:388): avc: denied { setopt } for pid=6829 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.466784][ T30] audit: type=1400 audit(1793902075.373:389): avc: denied { write } for pid=6829 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.473603][ T30] audit: type=1400 audit(1793902075.373:390): avc: denied { bind } for pid=6829 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.630083][ T30] audit: type=1400 audit(1793902075.533:391): avc: denied { create } for pid=6841 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 168.655393][ T30] audit: type=1400 audit(1793902075.533:392): avc: denied { write } for pid=6841 comm="syz.3.282" path="socket:[12232]" dev="sockfs" ino=12232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 168.691176][ T6839] TC_ACT_REPEAT abuse ? [ 168.829623][ T5740] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.985497][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 168.987630][ T5740] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.988895][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.990942][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.990966][ T5740] usb 1-1: Product: syz [ 168.990987][ T5740] usb 1-1: Manufacturer: syz [ 168.991001][ T5740] usb 1-1: SerialNumber: syz [ 169.000310][ T5740] usb 1-1: config 0 descriptor?? [ 169.010442][ T5740] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.010491][ T5740] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 169.192471][ T6867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6867 comm=syz.1.287 [ 169.387310][ T6870] can0: slcan on ttyS3. [ 169.495873][ T5626] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 170.197797][ T5740] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 171.315167][ T6870] can0 (unregistered): slcan off ttyS3. [ 171.585196][ T6833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.032300][ T30] audit: type=1400 audit(1793902078.933:393): avc: denied { append } for pid=6880 comm="syz.2.290" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.072442][ T5740] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.072567][ T5740] em28xx 1-1:0.0: board has no eeprom [ 172.145793][ T5740] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.145883][ T5740] em28xx 1-1:0.0: dvb set to bulk mode. [ 172.147166][ T5741] em28xx 1-1:0.0: Binding DVB extension [ 172.167056][ T5740] usb 1-1: USB disconnect, device number 7 [ 172.173127][ T5740] em28xx 1-1:0.0: Disconnecting em28xx [ 172.200842][ T6881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.255046][ T6890] io-wq is not configured for unbound workers [ 172.277243][ T5741] em28xx 1-1:0.0: Registering input extension [ 172.303230][ T5740] em28xx 1-1:0.0: Closing input extension [ 172.391280][ T5740] em28xx: Freeing device [ 172.540187][ T6898] can0: slcan on ttyS3. [ 173.396251][ T6898] can0 (unregistered): slcan off ttyS3. [ 174.451026][ T6919] ALSA: mixer_oss: invalid OSS volume '' [ 174.521855][ T30] audit: type=1400 audit(1793902081.423:394): avc: denied { read } for pid=6902 comm="syz.2.296" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.523811][ T30] audit: type=1400 audit(1793902081.423:395): avc: denied { open } for pid=6902 comm="syz.2.296" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.930779][ T6919] can0: slcan on ttyS3. [ 175.004383][ T6920] can0 (unregistered): slcan off ttyS3. [ 175.115533][ T6927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 175.115599][ T6927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.122895][ T6927] vhci_hcd vhci_hcd.0: Device attached [ 175.135566][ T30] audit: type=1400 audit(1793902082.043:396): avc: denied { connect } for pid=6926 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.139978][ T30] audit: type=1400 audit(1793902082.043:397): avc: denied { write } for pid=6926 comm="syz.1.303" laddr=fe80::c68:bdff:fed8:1593 lport=40408 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.164091][ T6928] vhci_hcd: connection closed [ 175.169459][ T287] vhci_hcd vhci_hcd.1: stop threads [ 175.170971][ T287] vhci_hcd vhci_hcd.1: release socket [ 175.171002][ T287] vhci_hcd vhci_hcd.1: disconnect device [ 175.854432][ T6935] ip6gre1: entered promiscuous mode [ 175.854464][ T6935] ip6gre1: entered allmulticast mode [ 176.061366][ T30] audit: type=1400 audit(1793902082.963:398): avc: denied { write } for pid=6943 comm="syz.0.302" path="socket:[13458]" dev="sockfs" ino=13458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.061560][ T6944] Bluetooth: MGMT ver 1.23 [ 176.128199][ T6946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6946 comm=syz.2.308 [ 178.014019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.419561][ T6974] can0: slcan on ttyS3. [ 179.884977][ T6974] can0 (unregistered): slcan off ttyS3. [ 179.940075][ T6979] bridge0: port 3(syz_tun) entered blocking state [ 179.940298][ T6979] bridge0: port 3(syz_tun) entered disabled state [ 179.940448][ T6979] syz_tun: entered allmulticast mode [ 179.942615][ T6979] FAULT_INJECTION: forcing a failure. [ 179.942615][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 179.942646][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT(full) [ 179.942669][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 179.942680][ T6979] Call Trace: [ 179.942687][ T6979] [ 179.942695][ T6979] dump_stack_lvl+0x100/0x190 [ 179.942734][ T6979] should_fail_ex.cold+0x5/0xa [ 179.942763][ T6979] should_failslab+0xc2/0x120 [ 179.942786][ T6979] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.942815][ T6979] ? __kernfs_new_node+0xd2/0xa10 [ 179.942838][ T6979] __kernfs_new_node+0xd2/0xa10 [ 179.942859][ T6979] ? __pfx___kernfs_new_node+0x10/0x10 [ 179.942886][ T6979] ? lock_acquire+0x1d1/0x380 [ 179.942913][ T6979] ? kernfs_root+0x23/0x2a0 [ 179.942938][ T6979] ? find_held_lock+0x2b/0x80 [ 179.942957][ T6979] ? kernfs_root+0xee/0x2a0 [ 179.942981][ T6979] ? kernfs_root+0xee/0x2a0 [ 179.943013][ T6979] kernfs_new_node+0x194/0x200 [ 179.943035][ T6979] ? __pfx_kernfs_new_node+0x10/0x10 [ 179.943062][ T6979] __kernfs_create_file+0x53/0x350 [ 179.943088][ T6979] sysfs_add_file_mode_ns+0x207/0x3c0 [ 179.943121][ T6979] sysfs_create_file_ns+0x145/0x1e0 [ 179.943149][ T6979] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 179.943191][ T6979] ? kernfs_create_link+0x1f1/0x280 [ 179.943216][ T6979] ? kernfs_put+0x3f/0x60 [ 179.943245][ T6979] ? sysfs_do_create_link_sd+0xbb/0x140 [ 179.943276][ T6979] br_sysfs_addif+0xe4/0x210 [ 179.943319][ T6979] br_add_if+0x82c/0x1c80 [ 179.943350][ T6979] ? __pfx_br_add_slave+0x10/0x10 [ 179.943378][ T6979] do_set_master+0x40f/0x730 [ 179.943404][ T6979] do_setlink.isra.0+0xb2b/0x3f50 [ 179.943435][ T6979] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 179.943457][ T6979] ? clockevents_program_event+0x23e/0x820 [ 179.943480][ T6979] ? find_held_lock+0x2b/0x80 [ 179.943499][ T6979] ? clockevents_program_event+0x23e/0x820 [ 179.943523][ T6979] ? clockevents_program_event+0x23e/0x820 [ 179.943550][ T6979] ? ktime_get+0x9f/0x320 [ 179.943574][ T6979] ? ktime_get+0x1a4/0x320 [ 179.943601][ T6979] ? lapic_next_event+0x10/0x20 [ 179.943629][ T6979] ? clockevents_program_event+0x1ef/0x820 [ 179.943650][ T6979] ? lock_acquire+0x111/0x380 [ 179.943678][ T6979] ? __pfx_clockevents_program_event+0x10/0x10 [ 179.943702][ T6979] ? find_held_lock+0x2b/0x80 [ 179.943720][ T6979] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 179.943743][ T6979] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 179.943773][ T6979] ? irqentry_exit+0x202/0xab0 [ 179.943791][ T6979] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.943810][ T6979] ? irqentry_exit+0x202/0xab0 [ 179.943844][ T6979] rtnl_setlink+0x61f/0xaf0 [ 179.943870][ T6979] ? __pfx_rtnl_setlink+0x10/0x10 [ 179.943897][ T6979] ? kasan_save_stack+0x30/0x50 [ 179.943914][ T6979] ? kasan_save_track+0x14/0x30 [ 179.943930][ T6979] ? kasan_save_free_info+0x3b/0x70 [ 179.943958][ T6979] ? dev_hard_start_xmit+0x121/0x760 [ 179.943987][ T6979] ? __dev_queue_xmit+0x1bef/0x48d0 [ 179.944005][ T6979] ? netlink_deliver_tap+0x9b8/0xb50 [ 179.944026][ T6979] ? netlink_unicast+0x708/0x950 [ 179.944047][ T6979] ? netlink_sendmsg+0x9ac/0x10c0 [ 179.944112][ T6979] ? __lock_acquire+0x5c0/0x1f40 [ 179.944137][ T6979] ? hook_capable+0x1bc/0x500 [ 179.944168][ T6979] ? lock_acquire+0x1d1/0x380 [ 179.944196][ T6979] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 179.944219][ T6979] ? find_held_lock+0x2b/0x80 [ 179.944237][ T6979] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 179.944259][ T6979] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 179.944305][ T6979] ? __pfx_rtnl_setlink+0x10/0x10 [ 179.944330][ T6979] rtnetlink_rcv_msg+0x95e/0xe90 [ 179.944357][ T6979] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.944518][ T6979] netlink_rcv_skb+0x159/0x420 [ 179.944568][ T6979] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.944600][ T6979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.944624][ T6979] ? __asan_memcpy+0x3c/0x60 [ 179.944659][ T6979] ? netlink_deliver_tap+0x1ae/0xb50 [ 179.944695][ T6979] netlink_unicast+0x668/0x950 [ 179.944721][ T6979] ? __pfx_netlink_unicast+0x10/0x10 [ 179.944750][ T6979] netlink_sendmsg+0x9ac/0x10c0 [ 179.944778][ T6979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.944915][ T6979] ? selinux_socket_sendmsg+0x198/0x2f0 [ 179.944952][ T6979] ? ____sys_sendmsg+0xa99/0xc30 [ 179.944979][ T6979] ____sys_sendmsg+0xa99/0xc30 [ 179.945012][ T6979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.945037][ T6979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.945069][ T6979] ? plist_check_list+0x1b8/0x280 [ 179.945098][ T6979] ? plist_del+0x308/0x510 [ 179.945128][ T6979] ___sys_sendmsg+0x190/0x1e0 [ 179.945158][ T6979] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.945185][ T6979] ? futex_wake+0x220/0x5e0 [ 179.945219][ T6979] ? find_held_lock+0x2b/0x80 [ 179.945254][ T6979] __sys_sendmsg+0x160/0x210 [ 179.945276][ T6979] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.945309][ T6979] do_syscall_64+0x123/0x790 [ 179.945330][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.945350][ T6979] RIP: 0033:0x7f095fd9fb19 [ 179.945367][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.945384][ T6979] RSP: 002b:00007f0960d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.945403][ T6979] RAX: ffffffffffffffda RBX: 00007f0960025fa0 RCX: 00007f095fd9fb19 [ 179.945417][ T6979] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 179.945429][ T6979] RBP: 00007f095fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 179.945441][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.945452][ T6979] R13: 00007f0960026038 R14: 00007f0960025fa0 R15: 00007ffdbe8472e8 [ 179.945478][ T6979] [ 179.955156][ T6979] syz_tun: left allmulticast mode [ 181.409411][ T6994] NFS: callback service start failed [ 181.409732][ T6994] ------------[ cut here ]------------ [ 181.409743][ T6994] SVC: permsocks remain for NFSv4 callback [ 181.409759][ T6994] WARNING: net/sunrpc/svc.c:532 at svc_destroy+0x299/0x330, CPU#1: syz.2.321/6994 [ 181.436492][ T6994] Modules linked in: [ 181.440428][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.2.321 Not tainted syzkaller #0 PREEMPT(full) [ 181.449806][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 181.459964][ T6994] RIP: 0010:svc_destroy+0x29d/0x330 [ 181.465430][ T6994] Code: 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 00 48 8d 7b 18 48 89 fa 48 c1 ea 03 80 3c 02 00 75 67 48 8d 3d 17 5e 78 07 48 8b 73 18 <67> 48 0f b9 3a e9 d0 fd ff ff 48 8b 7c 24 08 e8 bf 13 86 f7 e9 a5 [ 181.485253][ T6994] RSP: 0018:ffffc900042af860 EFLAGS: 00010246 [ 181.491349][ T6994] RAX: dffffc0000000000 RBX: ffffffff9040ba80 RCX: ffffc900063d9000 [ 181.499786][ T6994] RDX: 1ffffffff2081753 RSI: ffffffff8c37e800 RDI: ffffffff927aee30 [ 181.508197][ T6994] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 181.516331][ T6994] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888035744000 [ 181.524390][ T6994] R13: ffff888055f04c00 R14: ffff88802de30000 R15: ffffffff9cd5b540 [ 181.532381][ T6994] FS: 00007ff81118f6c0(0000) GS:ffff88812257c000(0000) knlGS:0000000000000000 [ 181.541455][ T6994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.549099][ T6994] CR2: 000000110c29af61 CR3: 0000000056a04000 CR4: 00000000003526f0 [ 181.557387][ T6994] Call Trace: [ 181.560692][ T6994] [ 181.563643][ T6994] ? xprt_svc_destroy_nullify_bc+0x14e/0x1a0 [ 181.569910][ T6994] nfs_callback_up+0x511/0xad0 [ 181.574757][ T6994] nfs4_init_client+0x236/0x420 [ 181.579645][ T6994] ? __pfx_nfs4_init_client+0x10/0x10 [ 181.585094][ T6994] nfs_get_client+0xf38/0x1230 [ 181.589884][ T6994] ? rcu_is_watching+0x13/0xc0 [ 181.594804][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.601097][ T6994] nfs4_set_client+0x3f6/0x640 [ 181.606231][ T6994] nfs4_init_server.isra.0+0x5be/0xf80 [ 181.611721][ T6994] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 181.617656][ T6994] ? __pfx_nfs4_init_server.isra.0+0x10/0x10 [ 181.623715][ T6994] ? __rpc_init_priority_wait_queue+0x38a/0x500 [ 181.630081][ T6994] nfs4_create_server+0x185/0x2b0 [ 181.635202][ T6994] nfs4_try_get_tree+0x93/0x140 [ 181.640081][ T6994] nfs_get_tree+0xa61/0x1440 [ 181.644815][ T6994] vfs_get_tree+0x92/0x320 [ 181.649262][ T6994] path_mount+0x7d0/0x2850 [ 181.653709][ T6994] ? __pfx_path_mount+0x10/0x10 [ 181.658667][ T6994] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.663940][ T6994] ? putname+0xb1/0x110 [ 181.668121][ T6994] ? kmem_cache_free+0x127/0x6c0 [ 181.673099][ T6994] ? __x64_sys_mount+0x293/0x310 [ 181.678133][ T6994] __x64_sys_mount+0x293/0x310 [ 181.682932][ T6994] ? __pfx___x64_sys_mount+0x10/0x10 [ 181.688314][ T6994] do_syscall_64+0x123/0x790 [ 181.692926][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.698916][ T6994] RIP: 0033:0x7ff81039fb19 [ 181.703699][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.723726][ T6994] RSP: 002b:00007ff81118f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.732231][ T6994] RAX: ffffffffffffffda RBX: 00007ff810625fa0 RCX: 00007ff81039fb19 [ 181.740329][ T6994] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400 [ 181.748382][ T6994] RBP: 00007ff810437b70 R08: 00002000000004c0 R09: 0000000000000000 [ 181.756439][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.764697][ T6994] R13: 00007ff810626038 R14: 00007ff810625fa0 R15: 00007ffd2a563db8 [ 181.772741][ T6994] [ 181.775900][ T6994] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.783195][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.2.321 Not tainted syzkaller #0 PREEMPT(full) [ 181.792411][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 181.802480][ T6994] Call Trace: [ 181.805772][ T6994] [ 181.808716][ T6994] dump_stack_lvl+0x100/0x190 [ 181.813424][ T6994] vpanic+0x2dc/0x6f8 [ 181.817436][ T6994] panic+0xd1/0xe0 [ 181.821165][ T6994] ? __pfx_panic+0x10/0x10 [ 181.826044][ T6994] check_panic_on_warn.cold+0x19/0x34 [ 181.831432][ T6994] ? svc_destroy+0x299/0x330 [ 181.836030][ T6994] __warn.cold+0x191/0x321 [ 181.840461][ T6994] __report_bug+0x30f/0x440 [ 181.844982][ T6994] ? svc_destroy+0x299/0x330 [ 181.849582][ T6994] ? __pfx___report_bug+0x10/0x10 [ 181.854617][ T6994] ? __pfx_debug_object_assert_init+0x10/0x10 [ 181.860686][ T6994] ? _raw_spin_lock_irqsave+0x52/0x60 [ 181.866101][ T6994] report_bug_entry+0xe2/0x290 [ 181.870863][ T6994] ? svc_destroy+0x29d/0x330 [ 181.875461][ T6994] handle_bug+0x1cd/0x2a0 [ 181.879807][ T6994] exc_invalid_op+0x17/0x50 [ 181.884331][ T6994] asm_exc_invalid_op+0x1a/0x20 [ 181.889191][ T6994] RIP: 0010:svc_destroy+0x29d/0x330 [ 181.894389][ T6994] Code: 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 00 48 8d 7b 18 48 89 fa 48 c1 ea 03 80 3c 02 00 75 67 48 8d 3d 17 5e 78 07 48 8b 73 18 <67> 48 0f b9 3a e9 d0 fd ff ff 48 8b 7c 24 08 e8 bf 13 86 f7 e9 a5 [ 181.914001][ T6994] RSP: 0018:ffffc900042af860 EFLAGS: 00010246 [ 181.920067][ T6994] RAX: dffffc0000000000 RBX: ffffffff9040ba80 RCX: ffffc900063d9000 [ 181.928040][ T6994] RDX: 1ffffffff2081753 RSI: ffffffff8c37e800 RDI: ffffffff927aee30 [ 181.935999][ T6994] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 181.943956][ T6994] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888035744000 [ 181.951909][ T6994] R13: ffff888055f04c00 R14: ffff88802de30000 R15: ffffffff9cd5b540 [ 181.959878][ T6994] ? xprt_svc_destroy_nullify_bc+0x14e/0x1a0 [ 181.965856][ T6994] nfs_callback_up+0x511/0xad0 [ 181.970610][ T6994] nfs4_init_client+0x236/0x420 [ 181.975448][ T6994] ? __pfx_nfs4_init_client+0x10/0x10 [ 181.980822][ T6994] nfs_get_client+0xf38/0x1230 [ 181.985610][ T6994] ? rcu_is_watching+0x13/0xc0 [ 181.990388][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.996329][ T6994] nfs4_set_client+0x3f6/0x640 [ 182.001107][ T6994] nfs4_init_server.isra.0+0x5be/0xf80 [ 182.006557][ T6994] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 182.012375][ T6994] ? __pfx_nfs4_init_server.isra.0+0x10/0x10 [ 182.018367][ T6994] ? __rpc_init_priority_wait_queue+0x38a/0x500 [ 182.024598][ T6994] nfs4_create_server+0x185/0x2b0 [ 182.029613][ T6994] nfs4_try_get_tree+0x93/0x140 [ 182.034451][ T6994] nfs_get_tree+0xa61/0x1440 [ 182.039053][ T6994] vfs_get_tree+0x92/0x320 [ 182.043508][ T6994] path_mount+0x7d0/0x2850 [ 182.047936][ T6994] ? __pfx_path_mount+0x10/0x10 [ 182.052786][ T6994] ? lockdep_hardirqs_on+0x7d/0x110 [ 182.057978][ T6994] ? putname+0xb1/0x110 [ 182.062126][ T6994] ? kmem_cache_free+0x127/0x6c0 [ 182.067079][ T6994] ? __x64_sys_mount+0x293/0x310 [ 182.072026][ T6994] __x64_sys_mount+0x293/0x310 [ 182.076826][ T6994] ? __pfx___x64_sys_mount+0x10/0x10 [ 182.082129][ T6994] do_syscall_64+0x123/0x790 [ 182.086707][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.092590][ T6994] RIP: 0033:0x7ff81039fb19 [ 182.096988][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.116587][ T6994] RSP: 002b:00007ff81118f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.125001][ T6994] RAX: ffffffffffffffda RBX: 00007ff810625fa0 RCX: 00007ff81039fb19 [ 182.132973][ T6994] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400 [ 182.140933][ T6994] RBP: 00007ff810437b70 R08: 00002000000004c0 R09: 0000000000000000 [ 182.148887][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.156843][ T6994] R13: 00007ff810626038 R14: 00007ff810625fa0 R15: 00007ffd2a563db8 [ 182.164825][ T6994] [ 182.168154][ T6994] Kernel Offset: disabled [ 182.172470][ T6994] Rebooting in 86400 seconds..