last executing test programs: 8m40.587225424s ago: executing program 0 (id=575): r0 = socket$inet_sctp(0x2, 0x5, 0x84) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8m40.545870755s ago: executing program 0 (id=576): umount2(&(0x7f00000003c0)='./file0/file0/..\x00', 0x0) 8m40.407021287s ago: executing program 0 (id=581): syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)) 8m40.007826849s ago: executing program 0 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x801, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x742b, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 8m39.763248025s ago: executing program 0 (id=593): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r1) 8m39.126000283s ago: executing program 0 (id=599): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x2400, 0xfffa}, 0x90) 8m38.942180238s ago: executing program 32 (id=599): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x2400, 0xfffa}, 0x90) 8m36.277452922s ago: executing program 1 (id=643): syz_clone3(&(0x7f00000003c0)={0xdf, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m36.260576333s ago: executing program 1 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x602, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) write$P9_ROPEN(r0, 0x0, 0xfffffe74) 8m36.12499943s ago: executing program 1 (id=647): r0 = memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x00\x00\x00\x00\x00\x00\x00g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\'\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) 7m24.06368161s ago: executing program 3 (id=1761): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x103, 0x1) getdents(r2, 0x0, 0x0) 7m20.65157475s ago: executing program 3 (id=1767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000001040)="0f20c035000001000f22c066f30f1efc66baf80cb89c161b83ef66bafc0cb8ac460000ef2e0f01cfc4e14173d70cf4b9800000c00f3235000800000f30f30fa7e864660f38812366ba200066ed", 0x4d}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m4.036558823s ago: executing program 34 (id=1767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000001040)="0f20c035000001000f22c066f30f1efc66baf80cb89c161b83ef66bafc0cb8ac460000ef2e0f01cfc4e14173d70cf4b9800000c00f3235000800000f30f30fa7e864660f38812366ba200066ed", 0x4d}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m36.452679209s ago: executing program 2 (id=1817): unshare(0x2c020400) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) msgget$private(0x0, 0x351) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(0x0, &(0x7f0000000700)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 5m27.204670079s ago: executing program 2 (id=1820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2f}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)) 5m19.149293717s ago: executing program 2 (id=1825): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r5 = dup2(r4, r4) write$FUSE_STATX(r5, &(0x7f00000003c0)={0x130, 0x0, r1, {0xc, 0x400, 0x0, '\x00', {0x800, 0x2, 0x5, 0xffffffff, r2, r3, 0xc000, '\x00', 0x81, 0xd5, 0xe, 0x5, {0xe, 0x2}, {0xb2, 0x96f}, {0x80000001, 0x403}, {0x40, 0xffffffff}, 0x769a, 0x7f, 0x6, 0x6}}}, 0x130) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, 0x0, 0x0, 0xf}]) dup3(r4, r0, 0x80000) 5m10.321728724s ago: executing program 2 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200000000000000000000000000000000011413"], 0x40}}, 0x0) 5m2.433238286s ago: executing program 2 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) 4m57.487574471s ago: executing program 5 (id=1835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4m52.837269862s ago: executing program 2 (id=1837): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) dup(0xffffffffffffffff) 4m46.217664518s ago: executing program 5 (id=1838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00002a7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x3b) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x11fb, 0x5, 0x7, 0xfffffbff, 0x4}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4m34.530169672s ago: executing program 35 (id=1837): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) dup(0xffffffffffffffff) 4m33.599233672s ago: executing program 5 (id=1842): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m31.445389078s ago: executing program 6 (id=1844): r0 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x8c6b, 0x1040, 0xffffffff, 0x20161}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 4m25.576521926s ago: executing program 5 (id=1845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0x62, 0xa, 0x0, 0xfff4}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) 4m21.857619044s ago: executing program 6 (id=1847): keyctl$set_reqkey_keyring(0xf, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 4m13.1232716s ago: executing program 5 (id=1848): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="cb38", 0x2}, {0x0}], 0x2) 4m13.042434975s ago: executing program 6 (id=1849): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) creat(0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000000c0)='7', 0x1) write(r0, &(0x7f0000000300)='bfq', 0x3) 4m4.107573245s ago: executing program 5 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 4m3.061124968s ago: executing program 6 (id=1852): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) close(r0) 3m55.687185736s ago: executing program 6 (id=1854): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVdx:Dd', 0x0) 3m50.254401909s ago: executing program 6 (id=1856): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 3m47.53037393s ago: executing program 36 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 3m33.42620224s ago: executing program 37 (id=1856): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 54.280246701s ago: executing program 4 (id=1877): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="5262a1a234bc8835ef55d8", 0xb) syz_usb_disconnect(r0) 45.856483185s ago: executing program 4 (id=1878): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) 38.97913773s ago: executing program 4 (id=1879): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ee) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='offline', 0x7) 32.483831724s ago: executing program 4 (id=1880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000002c0), 0x7ff, r0}, 0x38) 26.184169491s ago: executing program 4 (id=1881): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000700), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 18.073793342s ago: executing program 4 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x8, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xc}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 38 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x8, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xc}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 2673903.749:332): avc: denied { open } for pid=6722 comm="syz.3.389" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.247770][ T30] audit: type=1400 audit(1792673903.869:333): avc: denied { create } for pid=6727 comm="syz.3.391" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.255621][ T30] audit: type=1400 audit(1792673903.869:334): avc: denied { write } for pid=6727 comm="syz.3.391" name="file0" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.255689][ T30] audit: type=1400 audit(1792673903.869:335): avc: denied { open } for pid=6727 comm="syz.3.391" path="/80/file0" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.308363][ T30] audit: type=1400 audit(1792673903.919:336): avc: denied { unlink } for pid=5600 comm="syz-executor" name="file0" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.557961][ T30] audit: type=1400 audit(1792673905.179:337): avc: denied { append } for pid=6756 comm="syz.2.401" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.347074][ T6786] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 96.502091][ T30] audit: type=1400 audit(1792673906.119:338): avc: denied { append } for pid=6789 comm="syz.3.416" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.568177][ T6795] overlayfs: upper fs does not support file handles, falling back to index=off. [ 96.573547][ T6795] evm: overlay not supported [ 96.675719][ T30] audit: type=1400 audit(1792673906.289:339): avc: denied { write } for pid=6802 comm="syz.3.423" name="mcfilter" dev="proc" ino=4026533593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.661575][ T6831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 97.667709][ T6831] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 97.668769][ T6831] bridge1: entered promiscuous mode [ 98.018536][ T6856] FAULT_INJECTION: forcing a failure. [ 98.018536][ T6856] name fail_futex, interval 1, probability 0, space 0, times 0 [ 98.018565][ T6856] CPU: 1 UID: 0 PID: 6856 Comm: syz.2.445 Not tainted syzkaller #0 PREEMPT(full) [ 98.018587][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 98.018599][ T6856] Call Trace: [ 98.018605][ T6856] [ 98.018613][ T6856] dump_stack_lvl+0x100/0x190 [ 98.018647][ T6856] should_fail_ex.cold+0x5/0xa [ 98.018675][ T6856] get_futex_key+0x1c9/0x13e0 [ 98.018702][ T6856] ? __pfx_get_futex_key+0x10/0x10 [ 98.018731][ T6856] futex_wake+0xf4/0x5e0 [ 98.018761][ T6856] ? __pfx_futex_wake+0x10/0x10 [ 98.018797][ T6856] ? lockdep_init_map_type+0x5c/0x250 [ 98.018824][ T6856] do_futex+0x2b2/0x440 [ 98.018851][ T6856] ? __pfx_do_futex+0x10/0x10 [ 98.018897][ T6856] __x64_sys_futex+0x34f/0x4d0 [ 98.018925][ T6856] ? fd_install+0x223/0x580 [ 98.018952][ T6856] ? __pfx___x64_sys_futex+0x10/0x10 [ 98.018989][ T6856] do_syscall_64+0x123/0x790 [ 98.019022][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.019043][ T6856] RIP: 0033:0x7f8d5779f559 [ 98.019059][ T6856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.019077][ T6856] RSP: 002b:00007f8d586740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.019097][ T6856] RAX: ffffffffffffffda RBX: 00007f8d57a25fa8 RCX: 00007f8d5779f559 [ 98.019110][ T6856] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d57a25fac [ 98.019122][ T6856] RBP: 00007f8d57a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 98.019134][ T6856] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 98.019145][ T6856] R13: 00007f8d57a26038 R14: 00007ffc07ae4850 R15: 00007ffc07ae4938 [ 98.019172][ T6856] [ 98.092047][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 98.092060][ T30] audit: type=1400 audit(1792673907.709:343): avc: denied { append } for pid=6858 comm="syz.4.448" name="uprobe_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 98.554968][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 98.575478][ T6895] Illegal XDP return value 4294967274 on prog (id 53) dev N/A, expect packet loss! [ 98.794396][ T6904] xt_CT: No such helper "syz1" [ 98.842556][ T30] audit: type=1400 audit(1792673908.459:344): avc: denied { accept } for pid=6913 comm="syz.4.471" lport=54922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.849740][ T6915] netlink: 'syz.1.472': attribute type 34 has an invalid length. [ 99.310591][ T30] audit: type=1400 audit(1792673908.929:345): avc: denied { read } for pid=6926 comm="syz.1.477" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.310640][ T30] audit: type=1400 audit(1792673908.929:346): avc: denied { open } for pid=6926 comm="syz.1.477" path="/98/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.313027][ T6927] device-mapper: ioctl: name not supplied when creating device [ 99.313067][ T30] audit: type=1400 audit(1792673908.929:347): avc: denied { ioctl } for pid=6926 comm="syz.1.477" path="/98/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.546123][ T30] audit: type=1326 audit(1792673909.159:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.2.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d5779f559 code=0x0 [ 99.732178][ T6958] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 99.911081][ T6963] kvm: pic: level sensitive irq not supported [ 99.914480][ T6963] kvm: pic: non byte write [ 100.014172][ T30] audit: type=1326 audit(1792673909.629:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.3.494" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 100.014281][ T30] audit: type=1326 audit(1792673909.629:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.3.494" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 100.037655][ T30] audit: type=1326 audit(1792673909.639:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.3.494" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 100.037693][ T30] audit: type=1326 audit(1792673909.639:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.3.494" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 100.151743][ T6976] ip6gre1: entered promiscuous mode [ 100.151762][ T6976] ip6gre1: entered allmulticast mode [ 100.166347][ T6980] ipip0: entered allmulticast mode [ 100.402601][ T6995] netlink: 'syz.2.506': attribute type 12 has an invalid length. [ 100.402620][ T6995] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 100.402631][ T6995] netlink: 'syz.2.506': attribute type 2 has an invalid length. [ 101.309043][ T7055] sctp: [Deprecated]: syz.0.526 (pid 7055) Use of int in max_burst socket option deprecated. [ 101.309043][ T7055] Use struct sctp_assoc_value instead [ 101.592440][ T7079] tap0: tun_chr_ioctl cmd 1074025680 [ 101.592670][ T7079] tap0: tun_chr_ioctl cmd 2147767520 [ 101.630858][ T7077] kvm: Disabled LAPIC found during irq injection [ 103.106796][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 103.106813][ T30] audit: type=1800 audit(1792673912.719:356): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.560" name="bus" dev="tmpfs" ino=567 res=0 errno=0 [ 103.383099][ T30] audit: type=1400 audit(1792673912.999:357): avc: denied { write } for pid=7150 comm="syz.4.567" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.589129][ T7164] tun0: tun_chr_ioctl cmd 1074025677 [ 103.589192][ T7164] tun0: linktype set to 774 [ 103.894630][ T30] audit: type=1400 audit(1792673913.509:358): avc: denied { mounton } for pid=7181 comm="syz.2.582" path="/120/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 103.895345][ T7182] overlayfs: failed to clone lowerpath [ 104.120604][ T7192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.586'. [ 104.238792][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 104.440487][ T30] audit: type=1400 audit(1792673914.059:359): avc: denied { read } for pid=5613 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.440713][ T30] audit: type=1400 audit(1792673914.059:360): avc: denied { open } for pid=5613 comm="syz-executor" path="/105/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.497925][ T30] audit: type=1400 audit(1792673914.119:361): avc: denied { read } for pid=5613 comm="syz-executor" name="instances" dev="tracefs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.500706][ T30] audit: type=1400 audit(1792673914.119:362): avc: denied { write } for pid=5613 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.506649][ T30] audit: type=1400 audit(1792673914.119:363): avc: denied { read } for pid=5613 comm="syz-executor" name="instances" dev="tracefs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.509251][ T30] audit: type=1400 audit(1792673914.119:364): avc: denied { setattr } for pid=5613 comm="syz-executor" path="/105/tracing/instances" dev="tracefs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.513833][ T30] audit: type=1400 audit(1792673914.129:365): avc: denied { write } for pid=5613 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.164333][ T137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.264016][ T137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.369180][ T137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.434510][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.439492][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.439988][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.441998][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.442380][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.495994][ T137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.675320][ T137] bridge_slave_1: left allmulticast mode [ 105.675352][ T137] bridge_slave_1: left promiscuous mode [ 105.676100][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.708715][ T137] bridge_slave_0: left allmulticast mode [ 105.708733][ T137] bridge_slave_0: left promiscuous mode [ 105.708899][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.905061][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.918378][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.919853][ T137] bond0 (unregistering): Released all slaves [ 105.937344][ T7254] netlink: 52 bytes leftover after parsing attributes in process `syz.3.613'. [ 105.973868][ T7256] netlink: 'syz.4.614': attribute type 12 has an invalid length. [ 105.973885][ T7256] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 105.973895][ T7256] netlink: 'syz.4.614': attribute type 2 has an invalid length. [ 105.973905][ T7256] netlink: 'syz.4.614': attribute type 3 has an invalid length. [ 105.973915][ T7256] netlink: 108 bytes leftover after parsing attributes in process `syz.4.614'. [ 106.206131][ T7274] tmpfs: Too small a size for current use [ 106.543560][ T7235] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.554463][ T7292] xt_hashlimit: size too large, truncated to 1048576 [ 106.816665][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 106.971902][ T137] hsr_slave_0: left promiscuous mode [ 106.976195][ T137] hsr_slave_1: left promiscuous mode [ 106.976950][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.976976][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.011711][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.011728][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.066653][ T137] veth1_macvtap: left promiscuous mode [ 107.066732][ T137] veth0_macvtap: left promiscuous mode [ 107.066824][ T137] veth1_vlan: left promiscuous mode [ 107.066892][ T137] veth0_vlan: left promiscuous mode [ 107.487722][ T4916] Bluetooth: hci4: command tx timeout [ 107.538596][ T137] team0 (unregistering): Port device team_slave_1 removed [ 107.581391][ T137] team0 (unregistering): Port device team_slave_0 removed [ 107.754615][ T7347] overlayfs: upper fs does not support file handles, falling back to index=off. [ 107.754629][ T7347] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 107.777680][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.916162][ T7353] netlink: 160 bytes leftover after parsing attributes in process `syz.4.641'. [ 107.916183][ T7353] netlink: 5 bytes leftover after parsing attributes in process `syz.4.641'. [ 108.043748][ T7359] dyndbg: expected <4096 bytes into control [ 108.339124][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 108.339140][ T30] audit: type=1400 audit(1792673917.959:578): avc: denied { create } for pid=7384 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.404309][ T30] audit: type=1400 audit(1792673918.019:579): avc: denied { write } for pid=7360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.413020][ T30] audit: type=1400 audit(1792673918.029:580): avc: denied { cmd } for pid=7384 comm="syz.4.650" path="socket:[17245]" dev="sockfs" ino=17245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.445546][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.448008][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.448102][ T7235] bridge_slave_0: entered allmulticast mode [ 108.451107][ T7235] bridge_slave_0: entered promiscuous mode [ 108.459892][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.462041][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.462124][ T7235] bridge_slave_1: entered allmulticast mode [ 108.465956][ T7235] bridge_slave_1: entered promiscuous mode [ 108.537971][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.540628][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.583141][ T7235] team0: Port device team_slave_0 added [ 108.585266][ T7235] team0: Port device team_slave_1 added [ 108.615634][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.615646][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.615667][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.617011][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.617020][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.617037][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.737975][ T7235] hsr_slave_0: entered promiscuous mode [ 108.738710][ T7235] hsr_slave_1: entered promiscuous mode [ 108.853709][ T30] audit: type=1400 audit(1792673918.469:581): avc: denied { write } for pid=7397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.029947][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.224274][ T30] audit: type=1400 audit(1792673918.839:582): avc: denied { unlink } for pid=5601 comm="syz-executor" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.473439][ T30] audit: type=1400 audit(1792673919.089:583): avc: denied { write } for pid=7235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.473478][ T30] audit: type=1400 audit(1792673919.089:584): avc: denied { read } for pid=7235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.481522][ T7235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.523025][ T7235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.523571][ T7235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.555727][ T7235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.563662][ T7235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.567805][ T4916] Bluetooth: hci4: command tx timeout [ 109.579701][ T7235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.586557][ T7235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.604256][ T7235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.809479][ T30] audit: type=1400 audit(1792673919.429:585): avc: denied { write } for pid=7400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.898474][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.958198][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.979957][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.980055][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.022524][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.022602][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.086352][ T30] audit: type=1400 audit(1792673919.699:586): avc: denied { write } for pid=7427 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.090507][ T30] audit: type=1804 audit(1792673919.709:587): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.658" name="/newroot/136/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1488 res=1 errno=0 [ 110.375458][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 110.602860][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 110.602885][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 110.602898][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 110.853079][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.313703][ T7235] veth0_vlan: entered promiscuous mode [ 111.337638][ T7235] veth1_vlan: entered promiscuous mode [ 111.402444][ T7235] veth0_macvtap: entered promiscuous mode [ 111.419447][ T7235] veth1_macvtap: entered promiscuous mode [ 111.461623][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.480019][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.547816][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.548517][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.548548][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.548576][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.641376][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.641390][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.648753][ T4916] Bluetooth: hci4: command tx timeout [ 111.740439][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.740456][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.465199][ T7505] macvlan2: entered promiscuous mode [ 112.468730][ T7505] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 112.489291][ T7507] option changes via remount are deprecated (pid=7506 comm=syz.5.682) [ 113.112155][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 113.727667][ T4916] Bluetooth: hci4: command tx timeout [ 114.812332][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 114.812348][ T30] audit: type=1400 audit(1792673924.429:590): avc: denied { bind } for pid=7554 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.872282][ T30] audit: type=1400 audit(1792673924.489:591): avc: denied { read } for pid=7558 comm="syz.5.702" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.904526][ T7555] team0: Port device syz_tun added [ 115.075104][ T7568] kvm: user requested TSC rate below hardware speed [ 115.766650][ T30] audit: type=1326 audit(1792673925.379:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.768641][ T30] audit: type=1326 audit(1792673925.389:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.803255][ T30] audit: type=1326 audit(1792673925.419:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.803350][ T30] audit: type=1326 audit(1792673925.419:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.807950][ T30] audit: type=1326 audit(1792673925.429:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.807986][ T30] audit: type=1326 audit(1792673925.429:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.808018][ T30] audit: type=1326 audit(1792673925.429:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 115.817655][ T30] audit: type=1326 audit(1792673925.439:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.5.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 116.200614][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 116.200639][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'. [ 117.288098][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.288814][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.422507][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.440709][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.672884][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 117.705018][ T7642] bridge1: left promiscuous mode [ 117.717767][ T137] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.718457][ T137] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.718489][ T137] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.718517][ T137] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.877084][ T7667] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.896944][ T7666] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.389972][ T7689] sch_fq: defrate 1 ignored. [ 119.822365][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 119.822381][ T30] audit: type=1400 audit(1792673929.439:650): avc: denied { create } for pid=7722 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.824470][ T30] audit: type=1400 audit(1792673929.439:651): avc: denied { bind } for pid=7722 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.824799][ T30] audit: type=1400 audit(1792673929.439:652): avc: denied { setopt } for pid=7722 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.825111][ T30] audit: type=1400 audit(1792673929.439:653): avc: denied { accept } for pid=7722 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.430485][ T30] audit: type=1400 audit(1792673930.049:654): avc: denied { read } for pid=7751 comm="syz.2.778" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.431859][ T30] audit: type=1400 audit(1792673930.049:655): avc: denied { open } for pid=7751 comm="syz.2.778" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.681150][ T30] audit: type=1400 audit(1792673930.299:656): avc: denied { create } for pid=7758 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.714582][ T30] audit: type=1400 audit(1792673930.329:657): avc: denied { setopt } for pid=7758 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.715170][ T30] audit: type=1400 audit(1792673930.329:658): avc: denied { write } for pid=7758 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.759941][ T30] audit: type=1400 audit(1792673930.379:659): avc: denied { read } for pid=7758 comm="syz.2.780" path="socket:[19121]" dev="sockfs" ino=19121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.411845][ T7824] netlink: 64 bytes leftover after parsing attributes in process `syz.5.797'. [ 122.625414][ T7834] FAULT_INJECTION: forcing a failure. [ 122.625414][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 122.625445][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.5.800 Not tainted syzkaller #0 PREEMPT(full) [ 122.625469][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 122.625480][ T7834] Call Trace: [ 122.625487][ T7834] [ 122.625495][ T7834] dump_stack_lvl+0x100/0x190 [ 122.625528][ T7834] should_fail_ex.cold+0x5/0xa [ 122.625556][ T7834] should_failslab+0xc2/0x120 [ 122.625583][ T7834] kmem_cache_alloc_noprof+0x92/0x6a0 [ 122.625606][ T7834] ? __pfx_map_id_range_down+0x10/0x10 [ 122.625627][ T7834] ? security_inode_alloc+0x3b/0x2c0 [ 122.625658][ T7834] security_inode_alloc+0x3b/0x2c0 [ 122.625684][ T7834] inode_init_always_gfp+0xc6f/0xfb0 [ 122.625715][ T7834] alloc_inode+0x8e/0x250 [ 122.625736][ T7834] new_inode+0x22/0x1c0 [ 122.625758][ T7834] devpts_pty_new+0xca/0x760 [ 122.625789][ T7834] ? __pfx_devpts_pty_new+0x10/0x10 [ 122.625815][ T7834] ? ptmx_open+0x1ad/0x360 [ 122.625848][ T7834] ptmx_open+0x1d9/0x360 [ 122.625874][ T7834] ? __pfx_ptmx_open+0x10/0x10 [ 122.625900][ T7834] chrdev_open+0x234/0x6a0 [ 122.625925][ T7834] ? __pfx_chrdev_open+0x10/0x10 [ 122.625951][ T7834] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 122.625975][ T7834] do_dentry_open+0x674/0x1470 [ 122.625996][ T7834] ? __pfx_chrdev_open+0x10/0x10 [ 122.626024][ T7834] vfs_open_consume+0xcc/0x460 [ 122.626055][ T7834] path_openat+0x1547/0x23f0 [ 122.626086][ T7834] ? __pfx_path_openat+0x10/0x10 [ 122.626121][ T7834] do_file_open+0x20e/0x430 [ 122.626149][ T7834] ? __pfx_do_file_open+0x10/0x10 [ 122.626202][ T7834] ? _raw_spin_unlock+0x28/0x50 [ 122.626229][ T7834] ? alloc_fd+0x471/0x7a0 [ 122.626265][ T7834] do_sys_openat2+0x163/0x1d0 [ 122.626295][ T7834] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.626327][ T7834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.626366][ T7834] __x64_sys_openat+0x12d/0x210 [ 122.626396][ T7834] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.626435][ T7834] do_syscall_64+0x123/0x790 [ 122.626468][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.626489][ T7834] RIP: 0033:0x7f7f6939f559 [ 122.626505][ T7834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.626522][ T7834] RSP: 002b:00007f7f6a349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.626542][ T7834] RAX: ffffffffffffffda RBX: 00007f7f69625fa0 RCX: 00007f7f6939f559 [ 122.626555][ T7834] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 122.626567][ T7834] RBP: 00007f7f69436b20 R08: 0000000000000000 R09: 0000000000000000 [ 122.626578][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.626589][ T7834] R13: 00007f7f69626038 R14: 00007f7f69625fa0 R15: 00007ffcec9a27d8 [ 122.626617][ T7834] [ 122.934033][ T7849] netlink: 7 bytes leftover after parsing attributes in process `syz.2.806'. [ 124.301821][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.302697][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.303174][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.306426][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.306896][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.614853][ T7882] xt_hashlimit: size too large, truncated to 1048576 [ 125.134951][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 125.134967][ T30] audit: type=1326 audit(1792673934.749:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 125.135008][ T30] audit: type=1326 audit(1792673934.749:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 125.200385][ T30] audit: type=1326 audit(1792673934.789:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 125.200431][ T30] audit: type=1326 audit(1792673934.789:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 125.200467][ T30] audit: type=1326 audit(1792673934.789:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 125.448339][ T7910] usb usb2: usbfs: process 7910 (syz.3.820) did not claim interface 0 before use [ 125.484416][ T30] audit: type=1400 audit(1792673935.099:675): avc: denied { write } for pid=7880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.553585][ T30] audit: type=1400 audit(1792673935.169:676): avc: denied { write } for pid=7915 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 125.582851][ T7916] loop4: detected capacity change from 0 to 7 [ 125.593601][ T7916] loop4: [ 125.593619][ T7916] loop4: partition table partially beyond EOD, truncated [ 125.601055][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.690010][ T30] audit: type=1400 audit(1792673935.309:677): avc: denied { mounton } for pid=7922 comm="syz.3.825" path="/proc/416/cgroup" dev="proc" ino=20157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 125.719177][ T7920] FAULT_INJECTION: forcing a failure. [ 125.719177][ T7920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.719203][ T7920] CPU: 0 UID: 0 PID: 7920 Comm: syz.2.824 Not tainted syzkaller #0 PREEMPT(full) [ 125.719223][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 125.719233][ T7920] Call Trace: [ 125.719240][ T7920] [ 125.719247][ T7920] dump_stack_lvl+0x100/0x190 [ 125.719277][ T7920] should_fail_ex.cold+0x5/0xa [ 125.719301][ T7920] _copy_to_user+0x32/0xd0 [ 125.719326][ T7920] io_uring_setup.cold+0x14b5/0x1c7e [ 125.719349][ T7920] ? __pfx_io_uring_setup+0x10/0x10 [ 125.719371][ T7920] ? find_held_lock+0x2b/0x80 [ 125.719411][ T7920] ? xfd_validate_state+0x129/0x190 [ 125.719436][ T7920] __x64_sys_io_uring_setup+0xc2/0x170 [ 125.719461][ T7920] do_syscall_64+0x123/0x790 [ 125.719489][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.719506][ T7920] RIP: 0033:0x7f8d5779f559 [ 125.719520][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.719535][ T7920] RSP: 002b:00007f8d58673fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 125.719552][ T7920] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f8d5779f559 [ 125.719563][ T7920] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 00000000000001c4 [ 125.719573][ T7920] RBP: 00007f8d57836b20 R08: 0000000000000000 R09: 0000000000000000 [ 125.719583][ T7920] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000040 [ 125.719593][ T7920] R13: 0000200000000000 R14: 00002000000000c0 R15: 00007ffc07ae4938 [ 125.719616][ T7920] [ 125.720594][ T30] audit: type=1400 audit(1792673935.319:678): avc: denied { write } for pid=7917 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.929381][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.074934][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.130859][ T7871] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.191808][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.367950][ T4916] Bluetooth: hci5: command tx timeout [ 126.410310][ T13] bridge_slave_1: left allmulticast mode [ 126.410331][ T13] bridge_slave_1: left promiscuous mode [ 126.410483][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.439124][ T13] bridge_slave_0: left allmulticast mode [ 126.439143][ T13] bridge_slave_0: left promiscuous mode [ 126.439298][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.662441][ T30] audit: type=1326 audit(1792673936.279:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.5.839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6939f559 code=0x7ffc0000 [ 126.986963][ T13] netdevs)m0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.988635][ T13] bond_slave_0: left allmulticast mode [ 127.005383][ T13] netdevs)m0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.005803][ T13] bond_slave_1: left allmulticast mode [ 127.006740][ T13] netdevs)m0 (unregistering): Released all slaves [ 127.249854][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.249902][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.432619][ T7992] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.510195][ T8000] FAULT_INJECTION: forcing a failure. [ 127.510195][ T8000] name fail_futex, interval 1, probability 0, space 0, times 0 [ 127.510226][ T8000] CPU: 0 UID: 0 PID: 8000 Comm: syz.5.851 Not tainted syzkaller #0 PREEMPT(full) [ 127.510249][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 127.510260][ T8000] Call Trace: [ 127.510267][ T8000] [ 127.510276][ T8000] dump_stack_lvl+0x100/0x190 [ 127.510312][ T8000] should_fail_ex.cold+0x5/0xa [ 127.510341][ T8000] get_futex_key+0x1c9/0x13e0 [ 127.510369][ T8000] ? __pfx_get_futex_key+0x10/0x10 [ 127.510403][ T8000] futex_wake+0xf4/0x5e0 [ 127.510436][ T8000] ? __pfx_futex_wake+0x10/0x10 [ 127.510463][ T8000] ? kasan_quarantine_put+0x104/0x240 [ 127.510489][ T8000] ? putname+0xb1/0x110 [ 127.510514][ T8000] ? kmem_cache_free+0x127/0x6c0 [ 127.510538][ T8000] do_futex+0x2b2/0x440 [ 127.510566][ T8000] ? __pfx_do_futex+0x10/0x10 [ 127.510589][ T8000] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.510625][ T8000] __x64_sys_futex+0x34f/0x4d0 [ 127.510651][ T8000] ? __x64_sys_openat+0x12d/0x210 [ 127.510679][ T8000] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.510715][ T8000] do_syscall_64+0x123/0x790 [ 127.510747][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.510767][ T8000] RIP: 0033:0x7f7f6939f559 [ 127.510782][ T8000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.510800][ T8000] RSP: 002b:00007f7f6a3490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.510819][ T8000] RAX: ffffffffffffffda RBX: 00007f7f69625fa8 RCX: 00007f7f6939f559 [ 127.510832][ T8000] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f69625fac [ 127.510845][ T8000] RBP: 00007f7f69625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 127.510857][ T8000] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 127.510868][ T8000] R13: 00007f7f69626038 R14: 00007ffcec9a26f0 R15: 00007ffcec9a27d8 [ 127.510895][ T8000] [ 128.003820][ T13] hsr_slave_0: left promiscuous mode [ 128.012806][ T13] hsr_slave_1: left promiscuous mode [ 128.013465][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.013481][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.018764][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.018856][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.066772][ T13] veth1_macvtap: left promiscuous mode [ 128.066801][ T13] veth0_macvtap: left promiscuous mode [ 128.066880][ T13] veth1_vlan: left promiscuous mode [ 128.066997][ T13] veth0_vlan: left promiscuous mode [ 128.164336][ T8036] netlink: 72 bytes leftover after parsing attributes in process `syz.2.862'. [ 128.164358][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 128.246307][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 128.447587][ T4916] Bluetooth: hci5: command tx timeout [ 128.584656][ T13] team0 (unregistering): Port device team_slave_1 removed [ 128.618135][ T13] team0 (unregistering): Port device team_slave_0 removed [ 128.795090][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 128.872737][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.872799][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.872872][ T7871] bridge_slave_0: entered allmulticast mode [ 128.874114][ T7871] bridge_slave_0: entered promiscuous mode [ 128.883728][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.883991][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.884080][ T7871] bridge_slave_1: entered allmulticast mode [ 128.886993][ T7871] bridge_slave_1: entered promiscuous mode [ 128.958419][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.973205][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.057840][ T7871] team0: Port device team_slave_0 added [ 129.063276][ T7871] team0: Port device team_slave_1 added [ 129.163257][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.163272][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.163291][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.176039][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.176051][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.176071][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.323800][ T7871] hsr_slave_0: entered promiscuous mode [ 129.335443][ T7871] hsr_slave_1: entered promiscuous mode [ 129.338908][ T7871] debugfs: 'hsr0' already exists in 'hsr' [ 129.338924][ T7871] Cannot create hsr debugfs directory [ 129.690469][ T7871] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.696168][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.712953][ T7871] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.729214][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.733652][ T7871] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.763589][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.769091][ T7871] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.798046][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.049864][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 130.103386][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.157175][ T7871] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.195157][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.195280][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.218197][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.218280][ T272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.527733][ T4916] Bluetooth: hci5: command tx timeout [ 130.727332][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 130.727349][ T30] audit: type=1400 audit(1792673940.339:719): avc: denied { write } for pid=8136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.988898][ T30] audit: type=1400 audit(1792673940.609:720): avc: denied { write } for pid=8179 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.170506][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 131.299867][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.346939][ T8192] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 131.821288][ T7871] veth0_vlan: entered promiscuous mode [ 131.833722][ T7871] veth1_vlan: entered promiscuous mode [ 131.839454][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 131.871670][ T7871] veth0_macvtap: entered promiscuous mode [ 131.885962][ T7871] veth1_macvtap: entered promiscuous mode [ 131.941307][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.961878][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.027996][ T272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.028340][ T272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.028397][ T272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.028426][ T272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.238013][ T30] audit: type=1400 audit(1792673941.859:721): avc: denied { write } for pid=8202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.244249][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.244265][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.355933][ T7706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.355950][ T7706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.507438][ T8247] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 132.546647][ T30] audit: type=1400 audit(1792673942.159:722): avc: denied { write } for pid=8245 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.609731][ T4916] Bluetooth: hci5: command tx timeout [ 132.614657][ T8257] raw_sendmsg: syz.2.932 forgot to set AF_INET. Fix it! [ 132.823731][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 133.127523][ T30] audit: type=1400 audit(1792673942.749:723): avc: denied { write } for pid=8292 comm="syz.2.944" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 133.957019][ T8354] xt_hashlimit: size too large, truncated to 1048576 [ 133.994069][ T8356] macvlan2: entered promiscuous mode [ 133.994090][ T8356] vlan2: entered promiscuous mode [ 133.994101][ T8356] gretap0: entered promiscuous mode [ 133.996458][ T8356] vlan2: left promiscuous mode [ 134.013475][ T24] gretap0: left promiscuous mode [ 134.104566][ T8360] netlink: 7 bytes leftover after parsing attributes in process `syz.5.972'. [ 134.373398][ T8377] kvm: apic: phys broadcast and lowest prio [ 134.374269][ T8377] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2547280607 (20378244856 ns) > initial count (3958255696 ns). Using initial count to start timer. [ 134.662989][ T8390] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.152900][ T8405] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.152921][ T8405] overlayfs: failed to set xattr on upper [ 135.152927][ T8405] overlayfs: ...falling back to redirect_dir=nofollow. [ 135.152934][ T8405] overlayfs: ...falling back to index=off. [ 135.152940][ T8405] overlayfs: ...falling back to uuid=null. [ 135.155447][ T8405] overlayfs: failed to clone lowerpath [ 135.194405][ T30] audit: type=1400 audit(1792673944.769:724): avc: denied { mounton } for pid=8404 comm="syz.5.990" path="/file1" dev="ramfs" ino=23986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 135.451781][ T30] audit: type=1400 audit(1792673945.069:725): avc: denied { relabelfrom } for pid=8419 comm="syz.5.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 135.451998][ T30] audit: type=1400 audit(1792673945.069:726): avc: denied { relabelto } for pid=8419 comm="syz.5.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 135.497624][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 135.847865][ T30] audit: type=1400 audit(1792673945.469:727): avc: denied { execute } for pid=8434 comm="syz.2.1003" path="/218/file0" dev="tmpfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.897791][ T8439] event trace: Could not enable event p [ 136.878629][ T8497] netlink: 'syz.3.1029': attribute type 3 has an invalid length. [ 137.154341][ T30] audit: type=1400 audit(1792673946.769:728): avc: denied { write } for pid=8518 comm="syz.5.1039" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.200033][ T30] audit: type=1400 audit(1792673946.819:729): avc: denied { write } for pid=8521 comm="syz.4.1040" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 137.200336][ T30] audit: type=1400 audit(1792673946.819:730): avc: denied { open } for pid=8521 comm="syz.4.1040" path="/228/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 137.201550][ T30] audit: type=1400 audit(1792673946.819:731): avc: denied { read } for pid=8521 comm="syz.4.1040" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 137.440808][ T8534] gretap0: entered promiscuous mode [ 137.446621][ T8534] gretap0: left promiscuous mode [ 137.490301][ T30] audit: type=1400 audit(1792673947.109:732): avc: denied { getopt } for pid=8541 comm="syz.5.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.034924][ T30] audit: type=1400 audit(1792673947.649:733): avc: denied { ioctl } for pid=8574 comm="syz.2.1063" path="socket:[24633]" dev="sockfs" ino=24633 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.113210][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1067'. [ 138.144383][ T8585] xt_TCPMSS: Only works on TCP SYN packets [ 138.439362][ T8604] VFS: Lookup of 'file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' in fuse fuse would have caused loop [ 138.920741][ T8640] FAULT_INJECTION: forcing a failure. [ 138.920741][ T8640] name failslab, interval 1, probability 0, space 0, times 0 [ 138.920772][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.5.1090 Not tainted syzkaller #0 PREEMPT(full) [ 138.920796][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 138.920808][ T8640] Call Trace: [ 138.920817][ T8640] [ 138.920826][ T8640] dump_stack_lvl+0x100/0x190 [ 138.920860][ T8640] should_fail_ex.cold+0x5/0xa [ 138.920890][ T8640] should_failslab+0xc2/0x120 [ 138.920917][ T8640] kmem_cache_alloc_noprof+0x92/0x6a0 [ 138.920942][ T8640] ? vm_area_dup+0x27/0x9d0 [ 138.920976][ T8640] vm_area_dup+0x27/0x9d0 [ 138.921005][ T8640] __split_vma+0x19c/0x1de0 [ 138.921029][ T8640] ? __pfx___split_vma+0x10/0x10 [ 138.921063][ T8640] ? mas_next_slot+0xc05/0x13a0 [ 138.921101][ T8640] vms_gather_munmap_vmas+0x3a5/0x1720 [ 138.921123][ T8640] ? __lock_acquire+0x5c0/0x1f40 [ 138.921147][ T8640] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 138.921168][ T8640] ? do_raw_spin_lock+0x128/0x260 [ 138.921197][ T8640] ? lock_acquire+0x1d1/0x380 [ 138.921216][ T8640] ? __pte_offset_map+0x2f/0x310 [ 138.921242][ T8640] ? pte_offset_map_lock+0x174/0x320 [ 138.921265][ T8640] ? find_held_lock+0x2b/0x80 [ 138.921293][ T8640] do_vmi_align_munmap+0x287/0x5f0 [ 138.921316][ T8640] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 138.921367][ T8640] ? mas_walk+0x260/0x310 [ 138.921389][ T8640] do_vmi_munmap+0x1f8/0x3e0 [ 138.921414][ T8640] unmap_source_vma+0x1df/0x8f0 [ 138.921438][ T8640] ? __pfx_unmap_source_vma+0x10/0x10 [ 138.921464][ T8640] ? mm_get_unmapped_area_vmaflags+0x147/0x1d0 [ 138.921493][ T8640] ? vm_stat_account+0xee/0x190 [ 138.921523][ T8640] move_vma+0x351/0xf80 [ 138.921542][ T8640] ? shmem_get_unmapped_area+0x141/0x960 [ 138.921569][ T8640] ? __pfx_move_vma+0x10/0x10 [ 138.921586][ T8640] ? security_mmap_addr+0x71/0x1e0 [ 138.921613][ T8640] ? __get_unmapped_area+0x255/0x3e0 [ 138.921641][ T8640] ? vrm_set_new_addr+0x1f5/0x2a0 [ 138.921663][ T8640] mremap_to+0x234/0x4c0 [ 138.921683][ T8640] ? __pfx_mremap_to+0x10/0x10 [ 138.921708][ T8640] __do_sys_mremap+0xc6b/0x1780 [ 138.921731][ T8640] ? __pfx_futex_wait+0x10/0x10 [ 138.921761][ T8640] ? __pfx___do_sys_mremap+0x10/0x10 [ 138.921783][ T8640] ? lockdep_init_map_type+0x5c/0x250 [ 138.921809][ T8640] ? do_futex+0x190/0x440 [ 138.921834][ T8640] ? __pfx_do_futex+0x10/0x10 [ 138.921869][ T8640] ? __pfx___x64_sys_futex+0x10/0x10 [ 138.921897][ T8640] ? fd_install+0x252/0x580 [ 138.921929][ T8640] do_syscall_64+0x123/0x790 [ 138.921961][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.921980][ T8640] RIP: 0033:0x7f7f6939f559 [ 138.921997][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.922017][ T8640] RSP: 002b:00007f7f6a349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 138.922039][ T8640] RAX: ffffffffffffffda RBX: 00007f7f69625fa0 RCX: 00007f7f6939f559 [ 138.922059][ T8640] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 138.922072][ T8640] RBP: 00007f7f69436b20 R08: 0000200000005000 R09: 0000000000000000 [ 138.922085][ T8640] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 138.922097][ T8640] R13: 00007f7f69626038 R14: 00007f7f69625fa0 R15: 00007ffcec9a27d8 [ 138.922124][ T8640] [ 139.653515][ T30] audit: type=1400 audit(1792673949.269:734): avc: denied { write } for pid=8664 comm="syz.3.1098" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.654232][ T30] audit: type=1400 audit(1792673949.269:735): avc: denied { ioctl } for pid=8664 comm="syz.3.1098" path="/dev/input/event1" dev="devtmpfs" ino=918 ioctlcmd=0x40044590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.902233][ T8678] FAULT_INJECTION: forcing a failure. [ 139.902233][ T8678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.902262][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.5.1105 Not tainted syzkaller #0 PREEMPT(full) [ 139.902284][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 139.902296][ T8678] Call Trace: [ 139.902302][ T8678] [ 139.902311][ T8678] dump_stack_lvl+0x100/0x190 [ 139.902345][ T8678] should_fail_ex.cold+0x5/0xa [ 139.902373][ T8678] _copy_to_user+0x32/0xd0 [ 139.902403][ T8678] bpf_vlog_reverse_ubuf+0x315/0x470 [ 139.902442][ T8678] bpf_vlog_finalize+0x20f/0x360 [ 139.902474][ T8678] bpf_log_attr_finalize+0x86/0x1a0 [ 139.902495][ T8678] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 139.902534][ T8678] btf_new_fd+0x712/0x38f0 [ 139.902565][ T8678] ? cred_has_capability.isra.0+0x186/0x300 [ 139.902589][ T8678] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 139.902619][ T8678] ? __pfx_btf_new_fd+0x10/0x10 [ 139.902645][ T8678] ? rcu_is_watching+0x13/0xc0 [ 139.902669][ T8678] ? cap_capable+0x107/0x430 [ 139.902694][ T8678] ? bpf_lsm_capable+0x9/0x10 [ 139.902721][ T8678] ? security_capable+0x80/0x260 [ 139.902745][ T8678] ? ns_capable+0xcd/0xf0 [ 139.902777][ T8678] __sys_bpf+0x13ef/0x4a30 [ 139.902803][ T8678] ? __pfx___sys_bpf+0x10/0x10 [ 139.902821][ T8678] ? find_held_lock+0x2b/0x80 [ 139.902846][ T8678] ? futex_wake+0x4ea/0x5e0 [ 139.902893][ T8678] ? rcu_read_lock_any_held+0x6a/0x90 [ 139.902937][ T8678] ? __x64_sys_futex+0x34f/0x4d0 [ 139.902960][ T8678] ? __x64_sys_futex+0x358/0x4d0 [ 139.902985][ T8678] ? xfd_validate_state+0x129/0x190 [ 139.903011][ T8678] ? __x64_sys_bpf+0xce/0x140 [ 139.903029][ T8678] __x64_sys_bpf+0xce/0x140 [ 139.903049][ T8678] ? do_syscall_64+0xae/0x790 [ 139.903079][ T8678] do_syscall_64+0x123/0x790 [ 139.903110][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.903130][ T8678] RIP: 0033:0x7f7f6939f559 [ 139.903146][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.903170][ T8678] RSP: 002b:00007f7f6a349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.903189][ T8678] RAX: ffffffffffffffda RBX: 00007f7f69625fa0 RCX: 00007f7f6939f559 [ 139.903202][ T8678] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 139.903213][ T8678] RBP: 00007f7f69436b20 R08: 0000000000000000 R09: 0000000000000000 [ 139.903224][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.903235][ T8678] R13: 00007f7f69626038 R14: 00007f7f69625fa0 R15: 00007ffcec9a27d8 [ 139.903260][ T8678] [ 140.356693][ T30] audit: type=1400 audit(1792673949.969:736): avc: denied { read } for pid=8688 comm="syz.5.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.409832][ T8692] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 140.747160][ T8723] overlayfs: cannot append lower layer [ 140.986426][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 140.986444][ T30] audit: type=1400 audit(1792673950.599:740): avc: denied { name_connect } for pid=8743 comm="syz.3.1134" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 141.137237][ T8750] kvm: pic: non byte write [ 141.714555][ T8780] smpboot: CPU 1 is now offline [ 141.796378][ T8781] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 142.287228][ T8791] sd 0:0:1:0: PR command failed: 1026 [ 142.287520][ T8791] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 142.287557][ T8791] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 142.526605][ T8805] xt_hashlimit: size too large, truncated to 1048576 [ 142.584386][ T8809] program syz.2.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.747388][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'. [ 143.225038][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.225506][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.225706][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.225883][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.230502][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.230708][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.230886][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.284770][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.289169][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.300523][ T8828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=8828 comm=syz.5.1170 [ 143.523521][ T30] audit: type=1400 audit(1792673953.139:741): avc: denied { getattr } for pid=8841 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.716949][ T30] audit: type=1400 audit(1792673953.329:742): avc: denied { read } for pid=8847 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.717206][ T30] audit: type=1400 audit(1792673953.329:743): avc: denied { open } for pid=8847 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.928482][ T30] audit: type=1400 audit(1792673953.549:744): avc: denied { getopt } for pid=8857 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.082179][ T30] audit: type=1400 audit(1792673953.699:745): avc: denied { write } for pid=8840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.082318][ T30] audit: type=1400 audit(1792673953.699:746): avc: denied { create } for pid=8840 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.084145][ T30] audit: type=1400 audit(1792673953.699:747): avc: denied { write } for pid=8840 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=2490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.087091][ T30] audit: type=1400 audit(1792673953.699:748): avc: denied { append } for pid=8840 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=2490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.215968][ T8866] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.331634][ T30] audit: type=1400 audit(1792673953.949:749): avc: denied { write } for pid=8872 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.401030][ T8874] device-mapper: ioctl: Invalid ioctl structure: name , dev 1d [ 144.644507][ T8889] syz.6.1192 (8889): /proc/8884/oom_adj is deprecated, please use /proc/8884/oom_score_adj instead. [ 144.711838][ T8882] kvm [8881]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 144.882840][ T8899] xt_hashlimit: size too large, truncated to 1048576 [ 144.972382][ T8905] ip_tables: iptables: counters copy to user failed while replacing table [ 145.382120][ T8924] xt_hashlimit: size too large, truncated to 1048576 [ 145.586364][ T8945] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1211'. [ 145.914381][ T8958] kvm [8957]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 145.914576][ T8958] kvm [8957]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 146.292709][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 146.292727][ T30] audit: type=1400 audit(1792673955.909:760): avc: denied { write } for pid=8969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.440649][ T30] audit: type=1400 audit(1792673956.059:761): avc: denied { write } for pid=9003 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.756731][ T30] audit: type=1400 audit(1792673956.369:762): avc: denied { ioctl } for pid=9025 comm="syz.6.1240" path="socket:[26619]" dev="sockfs" ino=26619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.264426][ T30] audit: type=1400 audit(1792673956.879:763): avc: denied { write } for pid=9024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.372083][ T9060] [ 147.977786][ T9094] dump_stack_lvl+0x100/0x190 [ 147.977821][ T9094] should_fail_ex.cold+0x5/0xa [ 147.977851][ T9094] should_failslab+0xc2/0x120 [ 147.977880][ T9094] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 147.977905][ T9094] ? lock_acquire+0x1d1/0x380 [ 147.977925][ T9094] ? kstrdup_const+0x63/0x80 [ 147.977950][ T9094] kstrdup+0x51/0xe0 [ 147.977970][ T9094] kstrdup_const+0x63/0x80 [ 147.977998][ T9094] alloc_vfsmnt+0x19e/0x840 [ 147.978019][ T9094] ? copy_tree+0x550/0xc50 [ 147.978050][ T9094] clone_mnt+0x4b/0x9c0 [ 147.978076][ T9094] copy_tree+0x327/0xc50 [ 147.978115][ T9094] copy_mnt_ns+0x3e8/0x1180 [ 147.978141][ T9094] ? __pfx_copy_mnt_ns+0x10/0x10 [ 147.978166][ T9094] ? create_new_namespaces+0x30/0xac0 [ 147.978194][ T9094] create_new_namespaces+0xd3/0xac0 [ 147.978216][ T9094] ? bpf_lsm_capable+0x9/0x10 [ 147.978244][ T9094] ? security_capable+0x80/0x260 [ 147.978272][ T9094] unshare_nsproxy_namespaces+0xf6/0x210 [ 147.978296][ T9094] ksys_unshare+0x44f/0x980 [ 147.978317][ T9094] ? __pfx_ksys_unshare+0x10/0x10 [ 147.978353][ T9094] __x64_sys_unshare+0x31/0x40 [ 147.978373][ T9094] do_syscall_64+0x123/0x790 [ 147.978410][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.978430][ T9094] RIP: 0033:0x7f8584f9f559 [ 147.978447][ T9094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.978465][ T9094] RSP: 002b:00007f8585f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 147.978494][ T9094] RAX: ffffffffffffffda RBX: 00007f8585225fa0 RCX: 00007f8584f9f559 [ 147.978508][ T9094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 147.978522][ T9094] RBP: 00007f8585036b20 R08: 0000000000000000 R09: 0000000000000000 [ 147.978535][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.978548][ T9094] R13: 00007f8585226038 R14: 00007f8585225fa0 R15: 00007ffd6ea05bc8 [ 147.978578][ T9094] [ 148.372780][ T9117] program syz.2.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.526771][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1276'. [ 148.825899][ T30] audit: type=1400 audit(1792673958.439:765): avc: denied { mount } for pid=9147 comm="syz.6.1285" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 148.871403][ T30] audit: type=1400 audit(1792673958.489:766): avc: denied { remount } for pid=9147 comm="syz.6.1285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 148.932721][ T30] audit: type=1400 audit(1792673958.549:767): avc: denied { unmount } for pid=7871 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 148.945846][ T9153] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.302131][ T30] audit: type=1400 audit(1792673958.919:768): avc: denied { bind } for pid=9175 comm="syz.3.1298" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.302177][ T30] audit: type=1400 audit(1792673958.919:769): avc: denied { name_bind } for pid=9175 comm="syz.3.1298" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 149.645989][ T9193] FAULT_INJECTION: forcing a failure. [ 149.645989][ T9193] name fail_futex, interval 1, probability 0, space 0, times 0 [ 149.646020][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.5.1305 Not tainted syzkaller #0 PREEMPT(full) [ 149.646044][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 149.646057][ T9193] Call Trace: [ 149.646064][ T9193] [ 149.646072][ T9193] dump_stack_lvl+0x100/0x190 [ 149.646107][ T9193] should_fail_ex.cold+0x5/0xa [ 149.646136][ T9193] get_futex_key+0x1c9/0x13e0 [ 149.646165][ T9193] ? __pfx_get_futex_key+0x10/0x10 [ 149.646189][ T9193] ? wakeup_preempt_fair+0x4fc/0xf60 [ 149.646216][ T9193] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 149.646246][ T9193] futex_wait_setup+0x91/0x540 [ 149.646284][ T9193] __futex_wait+0x19f/0x360 [ 149.646317][ T9193] ? __pfx___futex_wait+0x10/0x10 [ 149.646346][ T9193] ? __pfx_try_to_wake_up+0x10/0x10 [ 149.646366][ T9193] ? futex_hash+0x311/0x400 [ 149.646393][ T9193] ? __pfx_futex_wake_mark+0x10/0x10 [ 149.646427][ T9193] ? find_held_lock+0x2b/0x80 [ 149.646454][ T9193] ? futex_wake+0x4ea/0x5e0 [ 149.646490][ T9193] futex_wait+0xe6/0x370 [ 149.646509][ T9193] ? __pfx_futex_wait+0x10/0x10 [ 149.646546][ T9193] ? putname+0xb1/0x110 [ 149.646573][ T9193] ? kmem_cache_free+0x127/0x6c0 [ 149.646598][ T9193] do_futex+0x265/0x440 [ 149.646625][ T9193] ? __pfx_do_futex+0x10/0x10 [ 149.646650][ T9193] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.646681][ T9193] ? __fget_files+0x21f/0x3d0 [ 149.646711][ T9193] __x64_sys_futex+0x34f/0x4d0 [ 149.646739][ T9193] ? __x64_sys_openat+0x12d/0x210 [ 149.646768][ T9193] ? __pfx___x64_sys_futex+0x10/0x10 [ 149.646806][ T9193] do_syscall_64+0x123/0x790 [ 149.646839][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.646860][ T9193] RIP: 0033:0x7f7f6939f559 [ 149.646879][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.646900][ T9193] RSP: 002b:00007f7f6a3490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.646920][ T9193] RAX: ffffffffffffffda RBX: 00007f7f69625fa8 RCX: 00007f7f6939f559 [ 149.646934][ T9193] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7f69625fa8 [ 149.646946][ T9193] RBP: 00007f7f69625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 149.646958][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.646975][ T9193] R13: 00007f7f69626038 R14: 00007ffcec9a26f0 R15: 00007ffcec9a27d8 [ 149.647004][ T9193] [ 149.777910][ T9190] kvm: pic: single mode not supported [ 149.784617][ T9190] kvm: pic: single mode not supported [ 149.784626][ T9190] kvm: pic: level sensitive irq not supported [ 149.784849][ T9190] kvm: pic: level sensitive irq not supported [ 149.785072][ T9190] kvm: pic: single mode not supported [ 149.785079][ T9190] kvm: pic: level sensitive irq not supported [ 149.785305][ T9190] kvm: pic: level sensitive irq not supported [ 149.785546][ T9190] kvm: pic: single mode not supported [ 149.785553][ T9190] kvm: pic: level sensitive irq not supported [ 149.794821][ T9190] kvm: pic: level sensitive irq not supported [ 149.795048][ T9190] kvm: pic: single mode not supported [ 149.795485][ T9190] kvm: pic: single mode not supported [ 149.795492][ T9190] kvm: pic: level sensitive irq not supported [ 149.795727][ T9190] kvm: pic: single mode not supported [ 149.795735][ T9190] kvm: pic: level sensitive irq not supported [ 149.803413][ T9190] kvm: pic: single mode not supported [ 149.803422][ T9190] kvm: pic: level sensitive irq not supported [ 149.803629][ T9190] kvm: pic: single mode not supported [ 149.803636][ T9190] kvm: pic: level sensitive irq not supported [ 150.359268][ T9218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.433561][ T9225] FAULT_INJECTION: forcing a failure. [ 150.433561][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 150.433593][ T9225] CPU: 1 UID: 0 PID: 9225 Comm: syz.4.1319 Not tainted syzkaller #0 PREEMPT(full) [ 150.433616][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 150.433628][ T9225] Call Trace: [ 150.433634][ T9225] [ 150.433642][ T9225] dump_stack_lvl+0x100/0x190 [ 150.433674][ T9225] should_fail_ex.cold+0x5/0xa [ 150.433703][ T9225] should_failslab+0xc2/0x120 [ 150.433730][ T9225] __kmalloc_cache_noprof+0x91/0x6d0 [ 150.433750][ T9225] ? ramfs_init_fs_context+0x43/0x100 [ 150.433777][ T9225] ramfs_init_fs_context+0x43/0x100 [ 150.433800][ T9225] alloc_fs_context+0x607/0xf40 [ 150.433824][ T9225] __x64_sys_fsopen+0x16b/0x2d0 [ 150.433848][ T9225] do_syscall_64+0x123/0x790 [ 150.433880][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.433899][ T9225] RIP: 0033:0x7f8584f9f559 [ 150.433917][ T9225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.433937][ T9225] RSP: 002b:00007f8585f38028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 150.433957][ T9225] RAX: ffffffffffffffda RBX: 00007f8585225fa0 RCX: 00007f8584f9f559 [ 150.433970][ T9225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 150.433981][ T9225] RBP: 00007f8585036b20 R08: 0000000000000000 R09: 0000000000000000 [ 150.433992][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.434004][ T9225] R13: 00007f8585226038 R14: 00007f8585225fa0 R15: 00007ffd6ea05bc8 [ 150.434030][ T9225] [ 150.685935][ T9239] xt_cgroup: invalid path, errno=-2 [ 151.327131][ T9256] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 151.969872][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 151.969891][ T30] audit: type=1400 audit(1792673961.589:771): avc: denied { write } for pid=9282 comm="syz.3.1344" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.869438][ T9338] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1367'. [ 154.361557][ T9377] macvtap0: entered allmulticast mode [ 154.361579][ T9377] veth0_macvtap: entered allmulticast mode [ 154.418219][ T30] audit: type=1400 audit(1792673964.039:772): avc: denied { ioctl } for pid=9378 comm="syz.5.1388" path="socket:[28444]" dev="sockfs" ino=28444 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.412802][ T9411] smpboot: CPU 1 is now offline [ 155.633691][ T9422] loop9: detected capacity change from 0 to 1 [ 155.649536][ T9422] Dev loop9: unable to read RDB block 1 [ 155.649557][ T9422] loop9: unable to read partition table [ 155.649644][ T9422] loop9: partition table beyond EOD, truncated [ 155.669019][ T9422] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 156.027843][ T9436] mmap: syz.5.1410 (9436) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.681175][ T9473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.886076][ T30] audit: type=1400 audit(1792673966.499:773): avc: denied { mounton } for pid=9495 comm="syz.3.1438" path="/305/file0" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 157.018187][ T9502] pimreg: tun_chr_ioctl cmd 1074025677 [ 157.018227][ T9502] pimreg: linktype set to 0 [ 157.444783][ T30] audit: type=1400 audit(1792673967.049:774): avc: denied { link } for pid=9533 comm="syz.6.1455" name="#27" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.246650][ T30] audit: type=1400 audit(1792673967.859:775): avc: denied { read } for pid=9572 comm="syz.5.1472" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 158.246682][ T30] audit: type=1400 audit(1792673967.859:776): avc: denied { open } for pid=9572 comm="syz.5.1472" path="/180/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 158.339818][ T9578] sctp: [Deprecated]: syz.2.1474 (pid 9578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.339818][ T9578] Use struct sctp_sack_info instead [ 158.368820][ T9576] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.368919][ T9576] block device autoloading is deprecated and will be removed. [ 158.616128][ T9592] syz.5.1481 uses obsolete (PF_INET,SOCK_PACKET) [ 159.027154][ T30] audit: type=1800 audit(1792673968.639:777): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1488" name="file0" dev="overlay" ino=1729 res=0 errno=0 [ 159.114168][ T30] audit: type=1400 audit(1792673968.729:778): avc: denied { setattr } for pid=9608 comm="syz.5.1489" name="file1" dev="overlay" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.142168][ T30] audit: type=1400 audit(1792673968.729:779): avc: denied { rename } for pid=9608 comm="syz.5.1489" name="#32" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.774907][ T30] audit: type=1400 audit(1792673972.389:780): avc: denied { append } for pid=9691 comm="syz.6.1522" name="sg0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.205494][ T30] audit: type=1400 audit(1792673973.819:781): avc: denied { read } for pid=9704 comm="syz.6.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.616595][ T9750] batadv_slave_0: entered promiscuous mode [ 165.628980][ T9748] batadv_slave_0: left promiscuous mode [ 166.627912][ T9777] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.653304][ T9779] syz.5.1558(9779): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 167.537427][ T30] audit: type=1400 audit(1792673977.159:782): avc: denied { watch watch_reads } for pid=9805 comm="syz.3.1570" path="/proc/783/task/784/ns" dev="proc" ino=31686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 168.027130][ T9818] FAULT_INJECTION: forcing a failure. [ 168.027130][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 168.027152][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.5.1575 Not tainted syzkaller #0 PREEMPT(full) [ 168.027165][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 168.027171][ T9818] Call Trace: [ 168.027175][ T9818] [ 168.027180][ T9818] dump_stack_lvl+0x100/0x190 [ 168.027201][ T9818] should_fail_ex.cold+0x5/0xa [ 168.027218][ T9818] should_failslab+0xc2/0x120 [ 168.027234][ T9818] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.027249][ T9818] ? mas_preallocate+0xc22/0xee0 [ 168.027267][ T9818] mas_preallocate+0xc22/0xee0 [ 168.027281][ T9818] ? __pfx_mas_preallocate+0x10/0x10 [ 168.027292][ T9818] ? rcu_is_watching+0x13/0xc0 [ 168.027312][ T9818] ? vm_area_alloc+0x1f/0x160 [ 168.027331][ T9818] ? lockdep_init_map_type+0x5c/0x250 [ 168.027346][ T9818] __mmap_region+0x139f/0x32e0 [ 168.027362][ T9818] ? __pfx___mmap_region+0x10/0x10 [ 168.027376][ T9818] ? lock_acquire+0x1d1/0x380 [ 168.027397][ T9818] ? mas_prev_slot+0x768/0x11b0 [ 168.027433][ T9818] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 168.027469][ T9818] ? find_held_lock+0x2b/0x80 [ 168.027491][ T9818] mmap_region+0x5a8/0x6d0 [ 168.027504][ T9818] ? __pfx_mmap_region+0x10/0x10 [ 168.027517][ T9818] ? shmem_mapping+0xd/0x50 [ 168.027530][ T9818] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 168.027549][ T9818] ? bpf_lsm_mmap_addr+0x9/0x30 [ 168.027565][ T9818] ? security_mmap_addr+0x71/0x1e0 [ 168.027582][ T9818] ? __get_unmapped_area+0x255/0x3e0 [ 168.027598][ T9818] do_mmap+0x12c7/0x1c30 [ 168.027616][ T9818] ? lock_acquire+0x1d1/0x380 [ 168.027627][ T9818] ? __pfx_do_mmap+0x10/0x10 [ 168.027641][ T9818] ? __pfx___might_resched+0x10/0x10 [ 168.027663][ T9818] ? __pfx_down_write_killable+0x10/0x10 [ 168.027678][ T9818] ioctx_alloc+0x97d/0x21a0 [ 168.027700][ T9818] ? __pfx_ioctx_alloc+0x10/0x10 [ 168.027717][ T9818] __x64_sys_io_setup+0xc9/0x220 [ 168.027730][ T9818] do_syscall_64+0x123/0x790 [ 168.027749][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.027761][ T9818] RIP: 0033:0x7f7f6939f559 [ 168.027771][ T9818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.027782][ T9818] RSP: 002b:00007f7f6a349028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 168.027794][ T9818] RAX: ffffffffffffffda RBX: 00007f7f69625fa0 RCX: 00007f7f6939f559 [ 168.027802][ T9818] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 168.027809][ T9818] RBP: 00007f7f69436b20 R08: 0000000000000000 R09: 0000000000000000 [ 168.027815][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.027822][ T9818] R13: 00007f7f69626038 R14: 00007f7f69625fa0 R15: 00007ffcec9a27d8 [ 168.027837][ T9818] [ 169.355082][ T30] audit: type=1400 audit(1792673978.969:783): avc: denied { write } for pid=9824 comm="syz.5.1579" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.044889][ T9857] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 170.060289][ T9857] bond1 (unregistering): Released all slaves [ 170.226894][ T9864] fuse: root generation should be zero [ 170.668748][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1608'. [ 170.677859][ T9893] ipvlan2: entered allmulticast mode [ 170.677871][ T9893] gretap0: entered allmulticast mode [ 170.993195][ T9894] IPv6: addrconf: prefix option has invalid lifetime [ 171.185017][ T9916] overlay: Bad value for 'workdir' [ 171.428653][ T30] audit: type=1400 audit(1792673981.049:784): avc: denied { write } for pid=9926 comm="syz.6.1623" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 171.792646][ T30] audit: type=1400 audit(1792673981.409:785): avc: denied { setopt } for pid=9949 comm="syz.5.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.249439][ T30] audit: type=1800 audit(1792673981.869:786): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1633" name="file2" dev="sda1" ino=2049 res=0 errno=0 [ 172.312807][ T30] audit: type=1400 audit(1792673981.929:787): avc: denied { wake_alarm } for pid=9952 comm="syz.3.1635" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.488195][ T9977] FAULT_INJECTION: forcing a failure. [ 172.488195][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 172.488215][ T9977] CPU: 0 UID: 0 PID: 9977 Comm: syz.5.1645 Not tainted syzkaller #0 PREEMPT(full) [ 172.488228][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 172.488235][ T9977] Call Trace: [ 172.488239][ T9977] [ 172.488244][ T9977] dump_stack_lvl+0x100/0x190 [ 172.488264][ T9977] should_fail_ex.cold+0x5/0xa [ 172.488281][ T9977] should_failslab+0xc2/0x120 [ 172.488298][ T9977] kmem_cache_alloc_noprof+0x92/0x6a0 [ 172.488312][ T9977] ? anon_vma_clone+0x2b3/0xca0 [ 172.488330][ T9977] anon_vma_clone+0x2b3/0xca0 [ 172.488350][ T9977] __split_vma+0x750/0x1de0 [ 172.488363][ T9977] ? __pfx___split_vma+0x10/0x10 [ 172.488389][ T9977] vma_modify+0x1ef4/0x29b0 [ 172.488405][ T9977] ? __pfx_vma_modify+0x10/0x10 [ 172.488425][ T9977] vma_modify_name+0x29c/0x380 [ 172.488437][ T9977] ? __pfx_vma_modify_name+0x10/0x10 [ 172.488454][ T9977] ? find_held_lock+0x2b/0x80 [ 172.488469][ T9977] ? is_bpf_text_address+0x8a/0x1a0 [ 172.488484][ T9977] ? is_bpf_text_address+0x8a/0x1a0 [ 172.488502][ T9977] madvise_update_vma+0x572/0xd30 [ 172.488521][ T9977] ? __pfx_madvise_update_vma+0x10/0x10 [ 172.488536][ T9977] ? arch_stack_walk+0xa6/0xf0 [ 172.488556][ T9977] ? mas_prev_slot+0x768/0x11b0 [ 172.488575][ T9977] madvise_vma_behavior+0x2d5/0x2350 [ 172.488593][ T9977] ? mas_prev+0xa4/0x100 [ 172.488607][ T9977] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 172.488625][ T9977] ? mas_walk+0x260/0x310 [ 172.488635][ T9977] ? find_vma_prev+0xd8/0x150 [ 172.488650][ T9977] ? __pfx_find_vma_prev+0x10/0x10 [ 172.488672][ T9977] madvise_walk_vmas+0x30e/0xc50 [ 172.488692][ T9977] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 172.488711][ T9977] ? down_write_killable+0x14d/0x240 [ 172.488727][ T9977] ? __pfx_down_write_killable+0x10/0x10 [ 172.488739][ T9977] ? set_anon_vma_name+0x130/0x4c0 [ 172.488757][ T9977] ? set_anon_vma_name+0x21f/0x4c0 [ 172.488773][ T9977] ? kfree+0x22b/0x6d0 [ 172.488782][ T9977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.488797][ T9977] set_anon_vma_name+0x333/0x4c0 [ 172.488815][ T9977] ? __pfx_set_anon_vma_name+0x10/0x10 [ 172.488837][ T9977] ? static_key_count+0x5a/0x70 [ 172.488848][ T9977] ? security_task_prctl+0x11c/0x160 [ 172.488863][ T9977] __do_sys_prctl+0xb33/0x2260 [ 172.488880][ T9977] ? __pfx___do_sys_prctl+0x10/0x10 [ 172.488900][ T9977] do_syscall_64+0x123/0x790 [ 172.488919][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.488931][ T9977] RIP: 0033:0x7f7f6939f559 [ 172.488940][ T9977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.488951][ T9977] RSP: 002b:00007f7f6a349028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 172.488970][ T9977] RAX: ffffffffffffffda RBX: 00007f7f69625fa0 RCX: 00007f7f6939f559 [ 172.488979][ T9977] RDX: 0000200000ffb000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 172.488986][ T9977] RBP: 00007f7f69436b20 R08: 0000200000000000 R09: 0000000000000000 [ 172.488994][ T9977] R10: 00000000fffffd00 R11: 0000000000000246 R12: 0000000000000000 [ 172.489001][ T9977] R13: 00007f7f69626038 R14: 00007f7f69625fa0 R15: 00007ffcec9a27d8 [ 172.489018][ T9977] [ 172.494419][ T9976] overlayfs: upper fs does not support file handles, falling back to index=off. [ 173.673369][ T30] audit: type=1326 audit(1792673983.289:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10007 comm="syz.6.1659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7f79f559 code=0x7ffc0000 [ 173.673400][ T30] audit: type=1326 audit(1792673983.289:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10007 comm="syz.6.1659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7f79f559 code=0x7ffc0000 [ 173.736315][ T30] audit: type=1326 audit(1792673983.349:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10007 comm="syz.6.1659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7f79f559 code=0x7ffc0000 [ 173.736343][ T30] audit: type=1326 audit(1792673983.349:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10007 comm="syz.6.1659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7f79f559 code=0x7ffc0000 [ 173.883325][ T30] audit: type=1326 audit(1792673983.499:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10007 comm="syz.6.1659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a7f79f559 code=0x7ffc0000 [ 174.602977][T10029] netlink: 'syz.2.1666': attribute type 11 has an invalid length. [ 174.871458][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 174.871470][ T30] audit: type=1326 audit(1792673984.489:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.2.1668" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d5779f559 code=0x0 [ 174.945812][T10040] netlink: 'syz.2.1668': attribute type 9 has an invalid length. [ 175.011660][ T30] audit: type=1400 audit(1792673984.629:800): avc: denied { mounton } for pid=10041 comm="syz.4.1672" path="/332/file0" dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 175.279631][T10051] xt_hashlimit: size too large, truncated to 1048576 [ 176.194989][T10091] xt_hashlimit: size too large, truncated to 1048576 [ 176.253217][T10093] trusted_key: syz.5.1694 sent an empty control message without MSG_MORE. [ 176.451718][ T30] audit: type=1326 audit(1792673986.069:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.484383][ T30] audit: type=1326 audit(1792673986.099:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.522548][ T30] audit: type=1326 audit(1792673986.139:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.523828][ T30] audit: type=1326 audit(1792673986.139:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.582367][ T30] audit: type=1326 audit(1792673986.199:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.582395][ T30] audit: type=1326 audit(1792673986.199:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.582417][ T30] audit: type=1326 audit(1792673986.199:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.670150][ T30] audit: type=1326 audit(1792673986.289:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10104 comm="syz.3.1699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87ebb9f559 code=0x7ffc0000 [ 176.929550][T10119] loop1: detected capacity change from 0 to 8 [ 177.182386][T10119] Dev loop1: unable to read RDB block 8 [ 177.182407][T10119] loop1: unable to read partition table [ 177.182491][T10119] loop1: partition table beyond EOD, truncated [ 177.182505][T10119] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 177.341840][T10135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1711'. [ 177.554507][T10141] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns [ 178.384307][T10176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1728'. [ 178.530332][T10178] IPv6: Can't replace route, no match found [ 178.886676][T10192] program syz.6.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.194735][T10252] ip_tables: iptables: counters copy to user failed while replacing table [ 188.733701][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.733971][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.774870][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 190.774977][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 190.775253][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 192.778273][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 192.778291][ T30] audit: type=1400 audit(1792674002.319:814): avc: denied { execute_no_trans } for pid=10278 comm="syz.2.1770" path="/359/file0" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.754231][ T30] audit: type=1800 audit(1792674017.349:815): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1778" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 212.423031][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.441017][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.468595][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.494074][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.522878][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.687670][ T5616] Bluetooth: hci0: command tx timeout [ 216.772089][ T5616] Bluetooth: hci0: command tx timeout [ 218.851381][ T5616] Bluetooth: hci0: command tx timeout [ 220.929258][ T5616] Bluetooth: hci0: command tx timeout [ 231.730735][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 240.147512][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1794'. [ 244.680781][T10317] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.097108][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 248.077064][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 248.525144][ T30] audit: type=1400 audit(1792674058.119:816): avc: denied { watch } for pid=10390 comm="syz.4.1798" path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dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 250.215168][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.215434][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.495486][ T30] audit: type=1400 audit(1792674062.019:817): avc: denied { write } for pid=10395 comm="syz.5.1800" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 261.785182][ T300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.486273][ T300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.164411][ T300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.689601][ T300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.414658][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.484035][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.502162][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.570042][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.591932][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.808902][ T5616] Bluetooth: hci2: command tx timeout [ 281.892692][ T5616] Bluetooth: hci2: command tx timeout [ 283.967795][ T5616] Bluetooth: hci2: command tx timeout [ 286.049064][ T5616] Bluetooth: hci2: command tx timeout [ 290.729534][ T300] bridge_slave_1: left allmulticast mode [ 290.729569][ T300] bridge_slave_1: left promiscuous mode [ 290.730684][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.397460][ T300] bridge_slave_0: left allmulticast mode [ 291.397502][ T300] bridge_slave_0: left promiscuous mode [ 291.448024][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.996045][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.386084][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.579023][ T300] bond0 (unregistering): Released all slaves [ 311.423927][ T300] bond1 (unregistering): Released all slaves [ 311.586240][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.586506][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.743392][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1827'. [ 314.107942][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1827'. [ 318.680218][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1829'. [ 339.509038][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 347.341320][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.377543][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.380140][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.553177][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.616990][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.807407][ T5608] Bluetooth: hci6: command tx timeout [ 351.889306][ T5608] Bluetooth: hci6: command tx timeout [ 353.971144][ T5608] Bluetooth: hci6: command tx timeout [ 354.614619][T10576] 9p: Bad value for 'wfdno' [ 356.048460][ T5608] Bluetooth: hci6: command tx timeout [ 358.826044][ T30] audit: type=1400 audit(1792674168.359:818): avc: denied { write } for pid=10515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.020177][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.046273][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.075675][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.187345][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.222305][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.449016][ T5608] Bluetooth: hci7: command tx timeout [ 368.757719][ T300] hsr_slave_0: left promiscuous mode [ 368.913248][ T300] hsr_slave_1: left promiscuous mode [ 369.039906][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.039948][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.383028][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.444064][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.324814][ T300] veth1_macvtap: left promiscuous mode [ 370.324925][ T300] veth0_macvtap: left promiscuous mode [ 370.325772][ T300] veth1_vlan: left promiscuous mode [ 370.389493][ T300] veth0_vlan: left promiscuous mode [ 370.443371][ T30] audit: type=1400 audit(1792674179.999:819): avc: denied { write } for pid=10596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.532021][ T5608] Bluetooth: hci7: command tx timeout [ 372.609095][ T5608] Bluetooth: hci7: command tx timeout [ 373.069943][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.070222][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.687588][ T5608] Bluetooth: hci7: command tx timeout [ 396.958167][ T300] team0 (unregistering): Port device team_slave_1 removed [ 398.450850][ T300] team0 (unregistering): Port device team_slave_0 removed [ 398.839128][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.845269][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.868929][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.931971][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.954076][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.170026][ T5608] Bluetooth: hci0: command tx timeout [ 403.248742][ T5608] Bluetooth: hci0: command tx timeout [ 405.334146][ T5608] Bluetooth: hci0: command tx timeout [ 407.296646][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.312807][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.341792][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.394897][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.412043][ T5616] Bluetooth: hci0: command tx timeout [ 407.427831][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.567627][ T5608] Bluetooth: hci2: command tx timeout [ 411.648017][ T5608] Bluetooth: hci2: command tx timeout [ 412.683123][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 413.732159][ T5608] Bluetooth: hci2: command tx timeout [ 415.807388][ T5608] Bluetooth: hci2: command tx timeout [ 427.145858][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.159231][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.180512][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.225124][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.287802][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.648739][ T5608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 429.669721][ T5608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 429.690932][ T5608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 429.734037][ T4916] Bluetooth: hci3: command tx timeout [ 429.770955][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 429.797154][ T5608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.807428][ T5616] Bluetooth: hci3: command tx timeout [ 431.888368][ T5616] Bluetooth: hci8: command tx timeout [ 433.888593][ T5616] Bluetooth: hci3: command tx timeout [ 433.971683][ T5616] Bluetooth: hci8: command tx timeout [ 434.458654][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.458927][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.968418][ T5616] Bluetooth: hci3: command tx timeout [ 436.058168][ T5616] Bluetooth: hci8: command tx timeout [ 438.129076][ T5616] Bluetooth: hci8: command tx timeout [ 451.351824][ T300] bridge_slave_1: left allmulticast mode [ 451.351849][ T300] bridge_slave_1: left promiscuous mode [ 451.352970][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.872816][ T300] bridge_slave_0: left allmulticast mode [ 451.872845][ T300] bridge_slave_0: left promiscuous mode [ 451.933270][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.015808][ T30] audit: type=1400 audit(1792674271.609:820): avc: denied { write } for pid=10684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.860541][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.880526][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.898484][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.953065][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.977478][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 466.207681][ T5608] Bluetooth: hci4: command tx timeout [ 466.790283][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.962944][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.103065][ T300] bond0 (unregistering): Released all slaves [ 467.703464][T10653] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.289411][ T5608] Bluetooth: hci4: command tx timeout [ 469.989774][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 470.008424][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 470.012556][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 470.063011][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 470.094833][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 470.336574][ T30] audit: type=1400 audit(1792674279.939:821): avc: denied { write } for pid=10747 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.374292][ T5608] Bluetooth: hci4: command tx timeout [ 472.287502][ T5608] Bluetooth: hci5: command tx timeout [ 472.448967][ T5608] Bluetooth: hci4: command tx timeout [ 474.369518][ T5608] Bluetooth: hci5: command tx timeout [ 476.447629][ T5608] Bluetooth: hci5: command tx timeout [ 478.529248][ T5608] Bluetooth: hci5: command tx timeout [ 479.801770][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 489.371946][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 489.390423][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 489.444141][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 489.486747][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 489.529016][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 491.728007][ T5608] Bluetooth: hci6: command tx timeout [ 492.041046][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 492.092654][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 492.110492][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 492.239196][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 492.276246][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 493.812325][ T5608] Bluetooth: hci6: command tx timeout [ 494.450204][ T5608] Bluetooth: hci7: command tx timeout [ 495.902219][ T5608] Bluetooth: hci6: command tx timeout [ 495.906206][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.906472][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.536906][ T5608] Bluetooth: hci7: command tx timeout [ 497.968124][ T5608] Bluetooth: hci6: command tx timeout [ 498.609080][ T5608] Bluetooth: hci7: command tx timeout [ 500.690223][ T5608] Bluetooth: hci7: command tx timeout [ 509.450027][T10738] rxe_eth0 speed is unknown, defaulting to 1000 [ 525.323565][T10834] device-mapper: ioctl: Unable to rename non-existent device, to uuid 1 [ 526.892366][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.915134][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.962469][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.004522][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.169321][ T5608] Bluetooth: hci0: command tx timeout [ 531.248713][ T5608] Bluetooth: hci0: command tx timeout [ 533.018707][T10850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.053155][T10850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.070213][T10850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.102719][T10850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.149185][T10850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.288543][ T30] audit: type=1400 audit(1792674342.829:823): avc: denied { write } for pid=10845 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.334719][ T5608] Bluetooth: hci0: command tx timeout [ 533.821099][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 535.327413][ T5616] Bluetooth: hci3: command tx timeout [ 535.407619][ T5616] Bluetooth: hci0: command tx timeout [ 537.408713][ T5616] Bluetooth: hci3: command tx timeout [ 539.487578][ T5616] Bluetooth: hci3: command tx timeout [ 540.027453][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 541.568677][ T5616] Bluetooth: hci3: command tx timeout [ 542.574805][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 543.004801][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 543.094662][T10751] rxe_eth0 speed is unknown, defaulting to 1000 [ 543.142136][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 543.142157][ T9] usb 5-1: config 1 has no interface number 0 [ 546.704236][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.788772][ T9] usb 5-1: can't set config #1, error -71 [ 548.199723][ T9] usb 5-1: USB disconnect, device number 2 [ 549.597376][ T5608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 549.624276][ T5608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 549.666087][ T5608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 549.718085][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 549.741666][ T5608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 551.972053][ T5608] Bluetooth: hci8: command tx timeout [ 552.774770][ T5616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 552.809638][ T5616] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 552.826297][ T5616] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 552.870117][ T5616] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 552.914802][ T5616] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 554.047719][ T5616] Bluetooth: hci8: command tx timeout [ 555.168996][ T5616] Bluetooth: hci9: command tx timeout [ 556.130185][ T5616] Bluetooth: hci8: command tx timeout [ 557.248410][ T5616] Bluetooth: hci9: command tx timeout [ 557.353609][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.353877][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.212740][ T5616] Bluetooth: hci8: command tx timeout [ 559.329793][ T5616] Bluetooth: hci9: command tx timeout [ 561.408603][ T5616] Bluetooth: hci9: command tx timeout [ 569.100113][T10902] ip_tables: iptables: counters copy to user failed while replacing table [ 573.216921][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 573.499771][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 573.499856][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 573.649963][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.650194][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.650215][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.805482][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.805712][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.805734][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.934675][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.934912][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.934929][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.236326][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.236552][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.236574][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.531457][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.531691][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.531710][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.666413][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.666632][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.666653][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.850067][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.850294][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.850312][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 576.079870][ T300] hsr_slave_0: left promiscuous mode [ 576.220145][ T300] hsr_slave_1: left promiscuous mode [ 576.433440][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.663841][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.845531][ T10] usb 5-1: unable to read config index 7 descriptor/all [ 577.845749][ T10] usb 5-1: can't read configurations, error -71 [ 588.558694][ T5608] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 588.561739][ T5608] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 588.565882][ T5608] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 588.698923][ T5608] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 588.722051][ T5608] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 590.132526][T10850] Bluetooth: hci4: command 0x0406 tx timeout [ 591.015692][ T5616] Bluetooth: hci10: command tx timeout [ 591.950721][ T30] audit: type=1400 audit(1792674401.569:824): avc: denied { write } for pid=10897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.087829][ T5616] Bluetooth: hci10: command tx timeout [ 594.210180][ T5608] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 594.214746][ T5608] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 594.245694][ T5608] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 594.318390][ T5608] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 594.347246][ T5608] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 595.167400][ T5608] Bluetooth: hci10: command tx timeout [ 595.253482][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 596.449721][ T5616] Bluetooth: hci11: command tx timeout [ 596.685260][ T300] team0 (unregistering): Port device team_slave_1 removed [ 597.247756][ T5616] Bluetooth: hci10: command tx timeout [ 597.924749][ T300] team0 (unregistering): Port device team_slave_0 removed [ 598.529064][ T5616] Bluetooth: hci11: command tx timeout [ 599.102879][ T30] audit: type=1400 audit(1792674408.669:825): avc: denied { write } for pid=10943 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.611580][ T5616] Bluetooth: hci11: command tx timeout [ 601.215820][ T983] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 601.547048][ T983] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 601.608811][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.608912][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.190831][ T983] usb 5-1: config 0 descriptor?? [ 602.689114][ T5616] Bluetooth: hci11: command tx timeout [ 605.893258][ T983] usbhid 5-1:0.0: can't add hid device: -71 [ 605.893641][ T983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 606.624224][ T983] usb 5-1: USB disconnect, device number 5 [ 609.478898][ T5608] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 609.484989][ T5608] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 609.496772][ T5608] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 609.561632][ T5608] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 609.589569][ T5608] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 611.727614][ T5616] Bluetooth: hci12: command tx timeout [ 612.754120][ T5608] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 612.774395][ T5608] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 612.795843][ T5608] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 612.839021][ T5608] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 612.865282][ T5608] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 613.807742][ T4916] Bluetooth: hci12: command tx timeout [ 615.089188][ T4916] Bluetooth: hci13: command tx timeout [ 615.730113][ T4916] Bluetooth: hci6: command 0x0406 tx timeout [ 615.730236][ T4916] Bluetooth: hci7: command 0x0406 tx timeout [ 615.887550][ T5616] Bluetooth: hci12: command tx timeout [ 616.553977][T10777] rxe_eth0 speed is unknown, defaulting to 1000 [ 617.171318][ T5608] Bluetooth: hci13: command tx timeout [ 617.563302][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 617.969395][ T5608] Bluetooth: hci12: command tx timeout [ 618.839782][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.840252][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.248341][ T5608] Bluetooth: hci13: command tx timeout [ 621.329624][ T5608] Bluetooth: hci13: command tx timeout [ 638.949730][ T5616] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 638.965611][ T5616] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 638.986723][ T5616] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 639.042724][ T5616] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 639.084021][ T5616] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 641.329984][ T5616] Bluetooth: hci14: command tx timeout [ 641.971404][ T300] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.432368][ T5616] Bluetooth: hci14: command tx timeout [ 645.491318][ T5616] Bluetooth: hci14: command tx timeout [ 646.024014][ T300] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.568395][ T5616] Bluetooth: hci14: command tx timeout [ 649.173449][ T300] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.571454][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 652.891072][ T300] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.690847][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 658.710069][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 658.765090][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 658.802268][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 658.838284][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 658.882294][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 661.010846][ T5608] Bluetooth: hci8: command tx timeout [ 663.088053][ T5608] Bluetooth: hci8: command tx timeout [ 663.764660][ T5616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 663.796711][ T5616] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 663.833427][ T5616] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 663.878700][ T5616] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 663.917314][ T5616] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 665.167607][ T5616] Bluetooth: hci8: command tx timeout [ 666.128871][ T5616] Bluetooth: hci9: command tx timeout [ 666.578990][T10786] rxe_eth0 speed is unknown, defaulting to 1000 [ 667.247397][ T5616] Bluetooth: hci8: command tx timeout [ 668.208070][ T5616] Bluetooth: hci9: command tx timeout [ 670.290117][ T5616] Bluetooth: hci9: command tx timeout [ 672.369586][ T5616] Bluetooth: hci9: command tx timeout [ 677.604775][ T5608] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 677.637913][ T5608] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 677.660171][ T5608] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 677.699365][ T5608] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 677.745103][ T5608] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 679.805917][ T300] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.892969][ T5616] Bluetooth: hci15: command tx timeout [ 680.233767][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.234026][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.776278][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 681.793638][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 681.821638][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 681.880261][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 681.923126][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 681.970055][ T5616] Bluetooth: hci15: command tx timeout [ 682.862407][ T8906] team0: Port device syz_tun removed [ 683.018616][ T30] audit: type=1400 audit(1792674492.639:826): avc: denied { write } for pid=11013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.049082][ T5608] Bluetooth: hci15: command tx timeout [ 684.128010][ T5616] Bluetooth: hci1: command tx timeout [ 686.131167][ T5616] Bluetooth: hci15: command tx timeout [ 686.207849][ T5616] Bluetooth: hci1: command tx timeout [ 688.287451][ T5616] Bluetooth: hci1: command tx timeout [ 690.368402][ T5616] Bluetooth: hci1: command tx timeout [ 690.956739][ T30] audit: type=1400 audit(1792674500.569:827): avc: denied { write } for pid=11064 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.133561][ T300] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.069825][ T300] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.160616][ T300] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.385809][ T5608] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 699.404155][ T5608] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 699.418501][ T5608] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 699.474523][ T5608] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 699.502450][ T5608] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 699.563489][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 701.810381][ T5608] Bluetooth: hci10: command tx timeout [ 703.890201][ T5608] Bluetooth: hci10: command tx timeout [ 705.969290][ T5608] Bluetooth: hci10: command tx timeout [ 708.047585][ T5608] Bluetooth: hci10: command tx timeout [ 714.710978][ T300] bridge_slave_1: left allmulticast mode [ 714.711018][ T300] bridge_slave_1: left promiscuous mode [ 714.761472][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.204644][ T300] bridge_slave_0: left allmulticast mode [ 715.204670][ T300] bridge_slave_0: left promiscuous mode [ 715.266979][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.409617][ T32] INFO: task syz-executor:10738 blocked for more than 143 seconds. [ 715.409635][ T32] Not tainted syzkaller #0 [ 715.409645][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.409653][ T32] task:syz-executor state:D stack:23928 pid:10738 tgid:10738 ppid:1 task_flags:0x400140 flags:0x00080003 [ 715.409692][ T32] Call Trace: [ 715.409700][ T32] [ 715.409769][ T32] __schedule+0x125e/0x6990 [ 715.410144][ T32] ? __pfx___schedule+0x10/0x10 [ 715.410181][ T32] ? find_held_lock+0x2b/0x80 [ 715.410221][ T32] ? schedule+0x225/0x2c0 [ 715.410349][ T32] schedule+0xdd/0x2c0 [ 715.410436][ T32] schedule_preempt_disabled+0x13/0x30 [ 715.410479][ T32] rwsem_down_write_slowpath+0x4c6/0x12f0 [ 715.410605][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 715.410782][ T32] ? lock_acquire+0x1d1/0x380 [ 715.410896][ T32] ? __pfx___might_resched+0x10/0x10 [ 715.411044][ T32] down_write+0x1bb/0x1f0 [ 715.411087][ T32] ? __pfx_down_write+0x10/0x10 [ 715.583832][ T32] rdma_dev_exit_net+0x174/0x6b0 [ 715.583961][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 715.584043][ T32] ? __pfx___might_resched+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 715.584078][ T32] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 715.584108][ T32] ? mutex_is_locked+0x17/0x60 [ 715.584145][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 715.584212][ T32] ops_undo_list+0x2ee/0xab0 [ 715.584377][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 715.584450][ T32] ? ops_init+0x2fa/0x5f0 [ 715.584584][ T32] setup_net+0x1fa/0x3a0 [ 715.584654][ T32] ? __pfx_setup_net+0x10/0x10 [ 715.584717][ T32] ? bpf_lsm_namespace_init+0x9/0x10 [ 715.584859][ T32] copy_net_ns+0x340/0x7a0 [ 715.584954][ T32] create_new_namespaces+0x3ea/0xac0 [ 715.585125][ T32] unshare_nsproxy_namespaces+0xf6/0x210 [ 715.585200][ T32] ksys_unshare+0x44f/0x980 [ 715.585241][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 715.585333][ T32] ? __pfx_do_faccessat+0x10/0x10 [ 715.746321][ T32] __x64_sys_unshare+0x31/0x40 [ 715.746377][ T32] do_syscall_64+0x123/0x790 [ 715.746504][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.746525][ T32] RIP: 0033:0x7f594efa0827 [ 715.746557][ T32] RSP: 002b:00007ffcc95196d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 715.746576][ T32] RAX: ffffffffffffffda RBX: 00007f594f225f40 RCX: 00007f594efa0827 [ 715.746588][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 715.746599][ T32] RBP: 00007f594f2267b8 R08: 0000000000000000 R09: 0000000000000000 [ 715.746610][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 715.746622][ T32] R13: 0000000000000003 R14: 00007ffcc9519918 R15: 0000000000000000 [ 715.746871][ T32] [ 715.746934][ T32] [ 715.746934][ T32] Showing all locks held in the system: [ 715.746948][ T32] locks held by kworker/0:0/9: 4, last CPU#0: [ 715.746963][ T32] #0: ffff88801d05f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 715.747048][ T32] #1: ffffc900000e7d08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 715.926188][ T32] #2: ffffffff8ffc1860 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 715.926270][ T32] #3: ffff8880b823c220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 715.926359][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 715.926377][ T32] #0: ffff88801d05dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 715.926428][ T32] #1: ffffc900000f7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 715.926487][ T32] locks held by kworker/u8:0/12: 2, last CPU#0: [ 715.926499][ T32] #0: ffff888035297140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 715.926568][ T32] #1: ffffc90000117d08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 715.926648][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 715.926662][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 715.926753][ T32] locks held by kworker/u8:3/49: 3, last CPU#0: [ 715.926769][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 715.926835][ T32] #1: ffffc90000b97d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 715.926896][ T32] #2: ffff888056455258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 715.926967][ T32] locks held by kworker/u8:4/59: 2, on CPU#0: [ 715.926980][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 715.927055][ T32] #1: ffffc9000200fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 715.965552][ T32] locks held by kworker/u8:5/137: 3, last CPU#0: [ 715.965565][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 715.965635][ T32] #1: ffffc90002e0fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 715.965714][ T32] #2: ffff88802d8c9258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 715.965802][ T32] locks held by kworker/u8:7/300: 5, on CPU#0: [ 715.965817][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.211726][ T32] #1: ffffc9000319fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.211812][ T32] #2: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 716.211903][ T32] #3: ffffffff91cdc9c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e7/0xab0 [ 716.211952][ T32] #4: ffffffff8fdf70e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 716.212012][ T32] locks held by kworker/u8:8/1416: 4, last CPU#0: [ 716.212025][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.212094][ T32] #1: ffffc90005a17d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.212173][ T32] #2: ffff8880535a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 716.212258][ T32] #3: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: ieee80211_bss_info_update+0x1c3/0xab0 [ 716.212343][ T32] locks held by getty/5354: 2, on CPU#0: [ 716.212354][ T32] #0: ffff888037f830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 716.212410][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 716.212473][ T32] locks held by syz-executor/5583: 2, last CPU#0: [ 716.212485][ T32] #0: ffff888079d5b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 716.212558][ T32] #1: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 716.212640][ T32] locks held by kworker/0:6/5727: 3, on CPU#0: [ 716.212655][ T32] #0: ffff88801d05f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.570295][ T32] #1: ffffc90004a07d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.570388][ T32] #2: ffffffff91cdc9c0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 716.570442][ T32] locks held by kworker/u8:9/7102: 3, on CPU#0: [ 716.570454][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.570514][ T32] #1: ffffc90004947d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.570582][ T32] #2: ffffffff91cdc9c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 716.570664][ T32] locks held by kworker/u8:10/7706: 2, on CPU#0: [ 716.570678][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.570766][ T32] #1: ffffc9000758fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.570841][ T32] locks held by kworker/u8:12/10263: 3, last CPU#0: [ 716.570851][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.570910][ T32] #1: ffffc900036cfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.570976][ T32] #2: ffff88802ac59258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 716.571057][ T32] locks held by kworker/u8:13/10338: 3, last CPU#0: [ 716.571071][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.571156][ T32] #1: ffffc90003db7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.571244][ T32] #2: ffff88802d8c9258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 716.571294][ T32] locks held by kworker/u8:14/10461: 3, last CPU#0: [ 716.571304][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.571365][ T32] #1: ffffc90003be7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.571435][ T32] #2: ffff888056b60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 716.571512][ T32] locks held by kworker/u8:15/10465: 3, last CPU#0: [ 716.571526][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.571615][ T32] #1: ffffc90003b97d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.571682][ T32] #2: ffff88804ab30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 716.571753][ T32] locks held by syz-executor/10653: 1, last CPU#0: [ 716.571766][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 716.702422][ T32] locks held by syz-executor/10738: 2, on CPU#0: [ 716.702435][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.702493][ T32] #1: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 716.702559][ T32] locks held by syz-executor/10751: 2, on CPU#0: [ 716.702572][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.702649][ T32] #1: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 716.702733][ T32] locks held by syz-executor/10777: 2, on CPU#0: [ 716.702749][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.702819][ T32] #1: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 716.702871][ T32] locks held by syz-executor/10786: 4, last CPU#0: [ 716.702886][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.702949][ T32] #1: ffffffff918eaf68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 716.703019][ T32] #2: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 716.703099][ T32] #3: ffff888078a11020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 716.703188][ T32] locks held by syz-executor/10837: 4, on CPU#0: [ 716.703204][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.703252][ T32] #1: ffffffff918eaf68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 716.703308][ T32] #2: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 716.703372][ T32] #3: ffff888078a11020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 716.703446][ T32] locks held by syz-executor/10849: 4, on CPU#0: [ 716.703460][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.703546][ T32] #1: ffffffff918eaf68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 716.703620][ T32] #2: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 716.703669][ T32] #3: ffff888078a11020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 716.703729][ T32] locks held by syz-executor/10956: 3, on CPU#0: [ 716.703741][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.703812][ T32] #1: ffffffff918eaf68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 716.915782][ T32] #2: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 716.915848][ T32] locks held by syz-executor/10965: 3, on CPU#0: [ 716.915859][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.915915][ T32] #1: ffffffff918eaf68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 716.915983][ T32] #2: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 716.916055][ T32] locks held by kworker/u8:17/11008: 3, last CPU#0: [ 716.916069][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.916156][ T32] #1: ffffc90003697d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.916242][ T32] #2: ffff888056455258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 716.916298][ T32] locks held by kworker/u8:18/11012: 2, last CPU#0: [ 716.916309][ T32] #0: ffff88801d09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 716.916372][ T32] #1: ffffc90003547d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 716.916445][ T32] locks held by syz-executor/11033: 3, on CPU#0: [ 716.916458][ T32] #0: ffffffff91cc3e88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 716.916539][ T32] #1: ffffffff918eaf68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 716.916627][ T32] #2: ffffffff918eace8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 716.916683][ T32] locks held by syz-executor/11095: 1, last CPU#0: [ 716.916694][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 716.916753][ T32] locks held by syz-executor/11102: 1, last CPU#0: [ 716.916765][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1f/0x220 [ 716.916832][ T32] locks held by modprobe/11103: 1, last CPU#0: [ 716.916845][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1f/0x220 [ 716.916921][ T32] locks held by modprobe/11105: 2, last CPU#0: [ 716.916935][ T32] #0: ffff88807838e540 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6f0 [ 716.917028][ T32] #1: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 717.086118][ T32] locks held by modprobe/11106: 1, last CPU#0: [ 717.086133][ T32] #0: ffff88807838f180 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0x10f/0x390 [ 717.086287][ T32] [ 717.086292][ T32] ============================================= [ 717.086292][ T32] [ 717.086300][ T32] NMI backtrace for cpu 0 [ 717.086309][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 717.086324][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 717.086333][ T32] Call Trace: [ 717.086345][ T32] [ 717.086360][ T32] dump_stack_lvl+0x100/0x190 [ 717.086439][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 717.086531][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 717.086599][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 717.086662][ T32] sys_info+0x141/0x190 [ 717.086707][ T32] watchdog+0xcb1/0x1030 [ 717.086889][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 717.086921][ T32] ? __pfx_watchdog+0x10/0x10 [ 717.086977][ T32] ? __kthread_parkme+0x18f/0x230 [ 717.087102][ T32] ? kthread+0x13a/0x450 [ 717.087137][ T32] ? __pfx_watchdog+0x10/0x10 [ 717.087172][ T32] kthread+0x373/0x450 [ 717.087213][ T32] ? __pfx_kthread+0x10/0x10 [ 717.087269][ T32] ret_from_fork+0x730/0xd60 [ 717.087342][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 717.087442][ T32] ? __switch_to+0x800/0x10e0 [ 717.087504][ T32] ? __pfx_kthread+0x10/0x10 [ 717.087562][ T32] ret_from_fork_asm+0x1a/0x30 [ 717.087828][ T32] [ 717.325918][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 717.728003][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 717.737086][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 717.747123][ T32] Call Trace: [ 717.750397][ T32] [ 717.753316][ T32] dump_stack_lvl+0x100/0x190 [ 717.758034][ T32] vpanic+0x553/0x970 [ 717.762035][ T32] ? __pfx_vpanic+0x10/0x10 [ 717.766683][ T32] panic+0xd1/0xe0 [ 717.770418][ T32] ? __pfx_panic+0x10/0x10 [ 717.774950][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 717.781100][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 717.787243][ T32] ? watchdog.cold+0x1ec/0x234 [ 717.792073][ T32] watchdog.cold+0x1fd/0x234 [ 717.796777][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 717.802586][ T32] ? __pfx_watchdog+0x10/0x10 [ 717.807294][ T32] ? __kthread_parkme+0x18f/0x230 [ 717.812418][ T32] ? kthread+0x13a/0x450 [ 717.816642][ T32] ? __pfx_watchdog+0x10/0x10 [ 717.821298][ T32] kthread+0x373/0x450 [ 717.825362][ T32] ? __pfx_kthread+0x10/0x10 [ 717.829990][ T32] ret_from_fork+0x730/0xd60 [ 717.834634][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 717.839787][ T32] ? __switch_to+0x800/0x10e0 [ 717.844468][ T32] ? __pfx_kthread+0x10/0x10 [ 717.849096][ T32] ret_from_fork_asm+0x1a/0x30 [ 717.854103][ T32] [ 717.857142][ T32] Kernel Offset: disabled [ 717.861488][ T32] Rebooting in 86400 seconds..