last executing test programs: 1m1.113534837s ago: executing program 0 (id=13): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x2000c890) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r5, 0x0, 0x2004c040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) ioctl$TIOCNOTTY(r6, 0x5422) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r9 = fcntl$dupfd(r8, 0x406, r7) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, 0x0) 59.654484416s ago: executing program 0 (id=17): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000000)=0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000280)="fda526c4a33377bb", 0xfffffe53}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0), 0x1, 0x0, 0x0, 0x8080}}], 0x3, 0x0) setresuid(0x0, 0x0, r4) ioprio_set$uid(0x3, 0x0, 0x6000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) r7 = syz_open_procfs$namespace(r3, &(0x7f0000000340)='ns/mnt\x00') close_range(r6, r7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 58.006654537s ago: executing program 0 (id=20): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xfffffffffffffd16) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000d80), 0xdad, 0x80041) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc0045540, 0xfffffffffffffffe) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) (async) fcntl$setstatus(r1, 0x4, 0x2c00) ppoll(&(0x7f0000000240)=[{r1, 0x6663}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) unshare(0x62040200) (async) write(r1, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="040028bd7000fcdbdf255300000008000300", @ANYRES32=r5, @ANYBLOB="8bcae61f1040d7b50f3fa7157ad6a87905b402f36a59ed06a59ba207987dff29e79f6a7c89935b2c6e406bbec4ac1bbc7e12a51aacd869aba8b286fe77f0ae6761c2fc1251666648e53e6e263aafcf7d4d212445481adf53829935e7cfba88c72dc3e256aff28ba4151743e1252764c27fc0e188272496892c570c905013c5640706ea72ad471da71d25ff7d1b46cd033ce7bd2867a082264b4b98721bad981fcd4df7eb"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24008085) (async) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088945b406d04b3088eca0000000109021200017f00c0000904"], 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @a}) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x30000015) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, &(0x7f00000002c0)=0xfff, 0x6, 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x7fff, 0x0, 0x0, 0x9, 0x64, 0x16c0, 0x9, 0x97d6, 0x0, 0x9, 'syz1\x00'}) 55.401159538s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffe, 0xc}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x88}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x50}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}}, 0x8010) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x54, 0x65, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x3}, {0x1, 0xd}, {0x10, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x19}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000010) fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, r0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) 53.931021031s ago: executing program 0 (id=28): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x19, 0x2, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1}}, 0x0) 51.892491663s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000400000008000000da00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000600000000fa2d3afcd6d651ff0000000000000000000000007afb6c678fe93a15fbd665b2f195290000"], 0x48) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0x20) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x7, 0x8, 0x5bfe, 0x3, 0x7fff, 0x71, 0x800, {0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x9}}, 0x5, 0x7fff, 0xb, 0x0, 0x6ece}}, &(0x7f0000000480)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x7f}, 0x8) fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) chdir(&(0x7f0000000100)='./file0\x00') 49.792881906s ago: executing program 32 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000400000008000000da00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000600000000fa2d3afcd6d651ff0000000000000000000000007afb6c678fe93a15fbd665b2f195290000"], 0x48) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0x20) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x7, 0x8, 0x5bfe, 0x3, 0x7fff, 0x71, 0x800, {0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x9}}, 0x5, 0x7fff, 0xb, 0x0, 0x6ece}}, &(0x7f0000000480)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x7f}, 0x8) fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) chdir(&(0x7f0000000100)='./file0\x00') 39.704860267s ago: executing program 2 (id=53): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 38.501215134s ago: executing program 4 (id=56): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="1c", 0x1}], 0x1, 0x2dc, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) 38.378121163s ago: executing program 2 (id=57): r0 = socket(0x1e, 0x805, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001940), 0x101, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000001980)=0x6) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x6}}], 0x18}, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 37.483401451s ago: executing program 2 (id=59): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x8240) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x80) r1 = accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x80000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0xfffffc01, 0x2, 0xa478, 0x5, 0x108a0, 0x4, 0xfc}, 0x1c) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2b}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000002c0)='GPL\x00', 0xf6, 0x0, 0x0, 0x41100, 0x14, '\x00', r2, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x1, 0x401, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xa}, {0x3, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x4, 0x7}, {0x3, 0x3, 0x0, 0x2}, {0x5, 0x4, 0x5, 0x5}, {0x5, 0x2, 0xd, 0x3}, {0x2, 0x2, 0x10, 0x5}], 0x10, 0x3}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000500)={0x0, r3, 'id1\x00'}) r5 = getpid() tkill(r5, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000004}, 0x8004) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000780)={[0xfffffffffffffff7]}, 0x8, 0x80800) r10 = socket$inet6(0xa, 0x1, 0x44d) ioctl$XFS_IOC_READLINK_BY_HANDLE(r10, 0xc038586c, &(0x7f00000008c0)={r0, &(0x7f00000007c0)='#-\xfe\xe7\x00', 0x240801, 0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x56}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000940)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0]}) ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000a00)={0x0, 0x80000, r9}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r2, r0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x16, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x73ce}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000b00)=""/30, 0x41100, 0x10, '\x00', r2, @flow_dissector, r0, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000cc0)=[r12, r13], &(0x7f0000000d00)=[{0x3, 0x3, 0x0, 0xa}, {0x2, 0x3, 0x4, 0xc}, {0x0, 0x3, 0x2, 0x8}, {0x2, 0x1, 0x5, 0x9}, {0x1, 0x1, 0x7, 0x4}], 0x10, 0x8}, 0x94) syz_open_dev$sndmidi(&(0x7f0000000e40), 0x5b8, 0x200000) openat$cgroup_type(r9, &(0x7f0000000e80), 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x44001, 0x14, 0xc}, 0x18) nanosleep(&(0x7f0000000f40), 0x0) write$evdev(r11, &(0x7f0000000f80)=[{{0x0, 0x2710}, 0x2b, 0x8001, 0xf04}], 0x18) 36.280981812s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffe, 0xc}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x88}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x50}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) socket(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}}, 0x8010) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x54, 0x65, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x3}, {0x1, 0xd}, {0x10, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x19}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000010) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x4000003e, r0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) 35.635076781s ago: executing program 2 (id=67): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r4 = gettid() capset(&(0x7f0000000280)={0x0, r4}, &(0x7f0000000300)={0x3, 0x4, 0x5, 0x101, 0x1, 0x5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 34.800925641s ago: executing program 2 (id=68): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000043b588a74b6d7e66f3026b398009afaa253593ee894335dda1ae627530296dc0e327eb6a4e2d917f955abff31c328737b6ff35f28995dfde8cd6c8174a724f6ea1665f8048966d796b3599b2c45ebf544b93d3d48f79f26bb69faf484827e91257189bffada72561c6a5025777b1f7d4eca5194afc9ee019fc8a666af4b63440c4ce2284d0e9808b86fda27a2f7346b44fd40a5676"], 0x50) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$tipc(0x1e, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xf, 0x0, 0x0, @private0, @empty, 0x8000, 0x721, 0x1, 0x1}}) sendmsg$nl_route_sched(r2, 0x0, 0x800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rxrpc(0x21, 0x2, 0xa) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0xff, 0x1, 0xc, 0x4f0}, 0x20) r8 = syz_open_dev$audion(&(0x7f0000000080), 0x9, 0x8000) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000180)={r4}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3}, 0x50) 34.420661805s ago: executing program 33 (id=68): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000043b588a74b6d7e66f3026b398009afaa253593ee894335dda1ae627530296dc0e327eb6a4e2d917f955abff31c328737b6ff35f28995dfde8cd6c8174a724f6ea1665f8048966d796b3599b2c45ebf544b93d3d48f79f26bb69faf484827e91257189bffada72561c6a5025777b1f7d4eca5194afc9ee019fc8a666af4b63440c4ce2284d0e9808b86fda27a2f7346b44fd40a5676"], 0x50) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$tipc(0x1e, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xf, 0x0, 0x0, @private0, @empty, 0x8000, 0x721, 0x1, 0x1}}) sendmsg$nl_route_sched(r2, 0x0, 0x800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rxrpc(0x21, 0x2, 0xa) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0xff, 0x1, 0xc, 0x4f0}, 0x20) r8 = syz_open_dev$audion(&(0x7f0000000080), 0x9, 0x8000) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000180)={r4}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3}, 0x50) 34.145810105s ago: executing program 4 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0xfff}, @window], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='scalable', 0xfffd) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 32.948262313s ago: executing program 4 (id=77): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 32.83076029s ago: executing program 4 (id=78): r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x100000000000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xfe}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) socket$nl_route(0x10, 0x3, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000e300000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080001400000001608000240000000110900010073797a30000000000900020073797a320000000014000000090a0102000000000000000005000004140000001100010000000000000000000500000a"], 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x20040000) 32.457032385s ago: executing program 4 (id=81): syz_open_dev$dri(&(0x7f0000000080), 0x8000001, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) writev(r1, 0x0, 0x0) connect(r0, &(0x7f0000000100)=@phonet={0x23, 0x1, 0x0, 0x39}, 0x80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r8, &(0x7f00000000c0)='pagemap\x00') 31.965015355s ago: executing program 4 (id=84): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 31.484527313s ago: executing program 34 (id=84): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 10.570946712s ago: executing program 3 (id=134): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x34000, 0x0}}], 0x1, 0x12) 9.438951997s ago: executing program 3 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x300000f0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) capget(0x0, 0x0) 6.82499106s ago: executing program 3 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="0800b70000000000080026006c09000008009f000600fdff"], 0x34}}, 0x40020) 6.509699589s ago: executing program 1 (id=145): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x89f2, 0xbffffffffffffffb) 6.100918406s ago: executing program 6 (id=147): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x2) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0xa1) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) shutdown(r4, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) 5.976130309s ago: executing program 3 (id=149): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042f911743"], 0x102) 5.944670936s ago: executing program 7 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) 5.750216733s ago: executing program 7 (id=151): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000058) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) writev(r1, &(0x7f00000013c0)=[{&(0x7f0000000180)="9f39", 0x2}], 0x1) 5.590480988s ago: executing program 3 (id=152): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 5.042602367s ago: executing program 7 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x1000, 0x8, 0x58, 0x0, 0x0, 0x6, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002180)="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", 0x2000, &(0x7f000000b180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008780)={0x60, 0x0, 0x7ff, {{0x200, 0x100000000, 0xffff, 0x9, 0x80, 0xfffffff3, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.954469081s ago: executing program 6 (id=155): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4.812675059s ago: executing program 6 (id=156): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x401, &(0x7f0000000140)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) getdents64(r0, 0x0, 0x0) 4.759611441s ago: executing program 5 (id=157): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.592116775s ago: executing program 1 (id=158): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x9e00) 3.969016393s ago: executing program 1 (id=159): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0xb, 0x0, @val=@netfilter={0xa, 0x0, 0x8, 0x1}}, 0x20) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e22, 0x0, @private2, 0x2}, 0x9) 3.941474431s ago: executing program 5 (id=160): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r1}) 3.896985495s ago: executing program 6 (id=161): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xd8, 0x7d, 0x80000000, 0x18, 0x19, 0x3}) 3.80064415s ago: executing program 7 (id=162): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000400)="93", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, r0) 3.604895502s ago: executing program 1 (id=163): recvmsg(0xffffffffffffffff, 0x0, 0x101a2) unshare(0x62040200) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000008c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75c, 0x1, 0x8, 0x67, 0xb], 0x1, 0x0, 0x0, [{}]}, 0x88) 3.539867942s ago: executing program 6 (id=164): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x579e, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000010c0)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000001100)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r1}, &(0x7f0000000340)=0x8) 3.493663161s ago: executing program 7 (id=165): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 2.849914466s ago: executing program 5 (id=166): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x36}, 0x8) 2.75197751s ago: executing program 7 (id=167): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x242, 0x0) clock_adjtime(0xffffffd3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) fchdir(0xffffffffffffffff) getpgid(0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) 2.693536624s ago: executing program 6 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) 2.693216903s ago: executing program 5 (id=169): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r1, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x980902, 0x5}) 1.625465086s ago: executing program 5 (id=170): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000007}, 0x44040) 1.608287556s ago: executing program 1 (id=171): socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mmap(&(0x7f00009b9000/0x3000)=nil, 0x3000, 0x0, 0x4008132, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001f1000/0x3000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1.353447258s ago: executing program 5 (id=172): syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04080400c8"], 0x7) 1.188578714s ago: executing program 3 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000900)=@raw=[@generic={0x2, 0x0, 0x4, 0x33, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0}]) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 0s ago: executing program 1 (id=174): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): [ 57.881895][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 57.881912][ T30] audit: type=1400 audit(1781356360.281:122): avc: denied { write } for pid=5548 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.090457][ T30] audit: type=1400 audit(1781356360.491:123): avc: denied { write } for pid=5551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.152161][ T30] audit: type=1400 audit(1781356360.551:124): avc: denied { write } for pid=5562 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.819493][ T30] audit: type=1400 audit(1781356361.221:125): avc: denied { write } for pid=5566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.886951][ T30] audit: type=1400 audit(1781356361.291:126): avc: denied { write } for pid=5577 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.091247][ T30] audit: type=1400 audit(1781356361.491:127): avc: denied { write } for pid=5580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.146218][ T30] audit: type=1400 audit(1781356361.541:128): avc: denied { write } for pid=5591 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 64.533426][ T30] audit: type=1400 audit(1781356366.931:129): avc: denied { mounton } for pid=5601 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.557898][ T30] audit: type=1400 audit(1781356366.961:130): avc: denied { mount } for pid=5601 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.561426][ T5601] cgroup: Unknown subsys name 'net' [ 64.590312][ T30] audit: type=1400 audit(1781356366.991:131): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.728937][ T5601] cgroup: Unknown subsys name 'cpuset' [ 64.737045][ T5601] cgroup: Unknown subsys name 'rlimit' [ 64.858431][ T30] audit: type=1400 audit(1781356367.261:132): avc: denied { setattr } for pid=5601 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.882257][ T30] audit: type=1400 audit(1781356367.261:133): avc: denied { create } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.910342][ T30] audit: type=1400 audit(1781356367.261:134): avc: denied { write } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.931152][ T30] audit: type=1400 audit(1781356367.261:135): avc: denied { read } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.957553][ T30] audit: type=1400 audit(1781356367.291:136): avc: denied { mounton } for pid=5601 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.982711][ T30] audit: type=1400 audit(1781356367.291:137): avc: denied { mount } for pid=5601 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.012985][ T5604] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.022825][ T30] audit: type=1400 audit(1781356367.431:138): avc: denied { relabelto } for pid=5604 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.001975][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.251395][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.259685][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.264187][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.269311][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.277922][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.289697][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.297822][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.305611][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.314866][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.324525][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.325927][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.339675][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.340543][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.353939][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.356751][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.369544][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.370082][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.378461][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.384565][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.391823][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.406408][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.407262][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.420765][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.430904][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.444922][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.940896][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.948550][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.956246][ T5616] bridge_slave_0: entered allmulticast mode [ 69.963173][ T5616] bridge_slave_0: entered promiscuous mode [ 69.975472][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.982591][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.989754][ T5614] bridge_slave_0: entered allmulticast mode [ 69.996707][ T5614] bridge_slave_0: entered promiscuous mode [ 70.021370][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.028531][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.035896][ T5616] bridge_slave_1: entered allmulticast mode [ 70.042704][ T5616] bridge_slave_1: entered promiscuous mode [ 70.056326][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.063412][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.070784][ T5614] bridge_slave_1: entered allmulticast mode [ 70.077800][ T5614] bridge_slave_1: entered promiscuous mode [ 70.167114][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.183309][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.194574][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.223197][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.245535][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.253080][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.261089][ T5615] bridge_slave_0: entered allmulticast mode [ 70.267962][ T5615] bridge_slave_0: entered promiscuous mode [ 70.274891][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.282443][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.289696][ T5613] bridge_slave_0: entered allmulticast mode [ 70.296777][ T5613] bridge_slave_0: entered promiscuous mode [ 70.329241][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.336898][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.344188][ T5615] bridge_slave_1: entered allmulticast mode [ 70.351344][ T5615] bridge_slave_1: entered promiscuous mode [ 70.358477][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.365554][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.372891][ T5613] bridge_slave_1: entered allmulticast mode [ 70.379728][ T5613] bridge_slave_1: entered promiscuous mode [ 70.403527][ T5614] team0: Port device team_slave_0 added [ 70.427165][ T5616] team0: Port device team_slave_0 added [ 70.432917][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.440628][ T5632] Bluetooth: hci1: command tx timeout [ 70.440863][ T5623] Bluetooth: hci3: command tx timeout [ 70.447083][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.459308][ T5622] bridge_slave_0: entered allmulticast mode [ 70.467266][ T5622] bridge_slave_0: entered promiscuous mode [ 70.475591][ T5614] team0: Port device team_slave_1 added [ 70.498724][ T5616] team0: Port device team_slave_1 added [ 70.514957][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.516495][ T5632] Bluetooth: hci0: command tx timeout [ 70.522905][ T5625] Bluetooth: hci4: command tx timeout [ 70.528607][ T5623] Bluetooth: hci2: command tx timeout [ 70.535390][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.547054][ T5622] bridge_slave_1: entered allmulticast mode [ 70.553810][ T5622] bridge_slave_1: entered promiscuous mode [ 70.570952][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.582307][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.618536][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.629923][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.644502][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.651662][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.678013][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.698856][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.705974][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.731927][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.759496][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.766619][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.792694][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.806593][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.816878][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.823892][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.850285][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.886656][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.901998][ T5615] team0: Port device team_slave_0 added [ 70.910450][ T5615] team0: Port device team_slave_1 added [ 70.917840][ T5613] team0: Port device team_slave_0 added [ 70.926522][ T5613] team0: Port device team_slave_1 added [ 70.988392][ T5622] team0: Port device team_slave_0 added [ 70.994649][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.001867][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.027774][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.047164][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.054139][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.080235][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.100481][ T5622] team0: Port device team_slave_1 added [ 71.106666][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.113687][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.139646][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.159213][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.166299][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.192239][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.228716][ T5616] hsr_slave_0: entered promiscuous mode [ 71.234954][ T5616] hsr_slave_1: entered promiscuous mode [ 71.249774][ T5614] hsr_slave_0: entered promiscuous mode [ 71.255962][ T5614] hsr_slave_1: entered promiscuous mode [ 71.262012][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 71.268311][ T5614] Cannot create hsr debugfs directory [ 71.282923][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.289940][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.316056][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.353148][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.360297][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.386351][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.407999][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.414430][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.469202][ T5615] hsr_slave_0: entered promiscuous mode [ 71.475306][ T5615] hsr_slave_1: entered promiscuous mode [ 71.481674][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 71.487456][ T5615] Cannot create hsr debugfs directory [ 71.498655][ T5613] hsr_slave_0: entered promiscuous mode [ 71.504849][ T5613] hsr_slave_1: entered promiscuous mode [ 71.511244][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 71.517152][ T5613] Cannot create hsr debugfs directory [ 71.613993][ T5622] hsr_slave_0: entered promiscuous mode [ 71.620321][ T5622] hsr_slave_1: entered promiscuous mode [ 71.626559][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 71.632287][ T5622] Cannot create hsr debugfs directory [ 71.974576][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.986508][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.998055][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.010292][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.018730][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.028790][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.044886][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.054038][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.111711][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.121833][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.146271][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.155086][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.163008][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.172921][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.181749][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.190422][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.258989][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.268551][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.279871][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.292269][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.300198][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.308882][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.316818][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.326496][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.422017][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.433424][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.441351][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.450308][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.464094][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.474601][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.483713][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.493379][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.511928][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.521065][ T5623] Bluetooth: hci3: command tx timeout [ 72.521101][ T5623] Bluetooth: hci1: command tx timeout [ 72.596221][ T5632] Bluetooth: hci4: command tx timeout [ 72.605149][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.606271][ T5632] Bluetooth: hci2: command tx timeout [ 72.612250][ T5623] Bluetooth: hci0: command tx timeout [ 72.625337][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.639609][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.651685][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.663192][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.678568][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.687807][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.695527][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.705734][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.727097][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.734824][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.762307][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.769419][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.798687][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.853856][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.882757][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.889859][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.918724][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.926322][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.957898][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.015271][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.060937][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.084584][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.116725][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.123983][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.135738][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.142909][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.183505][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.194249][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.201400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.211357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.218495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.305064][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.354904][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.362105][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.420269][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.427449][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.638009][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.845765][ T5616] veth0_vlan: entered promiscuous mode [ 73.880972][ T5616] veth1_vlan: entered promiscuous mode [ 74.033365][ T5616] veth0_macvtap: entered promiscuous mode [ 74.078719][ T5616] veth1_macvtap: entered promiscuous mode [ 74.132198][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.187116][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.232343][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.272647][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.298300][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.328922][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.346691][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544405][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.590746][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.600090][ T5623] Bluetooth: hci1: command tx timeout [ 74.600204][ T5632] Bluetooth: hci3: command tx timeout [ 74.646770][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.676475][ T5632] Bluetooth: hci2: command tx timeout [ 74.681888][ T5625] Bluetooth: hci0: command tx timeout [ 74.681961][ T5623] Bluetooth: hci4: command tx timeout [ 74.697122][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.715629][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.774847][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.787031][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.814563][ T5615] veth0_vlan: entered promiscuous mode [ 74.822694][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 74.822708][ T30] audit: type=1400 audit(1781356377.221:152): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.xRLgeK/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.822740][ T5622] veth0_vlan: entered promiscuous mode [ 74.859770][ T30] audit: type=1400 audit(1781356377.231:153): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.882540][ T30] audit: type=1400 audit(1781356377.261:154): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.xRLgeK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.896696][ T5622] veth1_vlan: entered promiscuous mode [ 74.915015][ T30] audit: type=1400 audit(1781356377.261:155): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.939502][ T30] audit: type=1400 audit(1781356377.261:156): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.xRLgeK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.971757][ T5613] veth0_vlan: entered promiscuous mode [ 74.985485][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.991881][ T5615] veth1_vlan: entered promiscuous mode [ 75.027195][ T30] audit: type=1400 audit(1781356377.271:157): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.xRLgeK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.028133][ T5613] veth1_vlan: entered promiscuous mode [ 75.056329][ T30] audit: type=1400 audit(1781356377.271:158): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.082138][ T30] audit: type=1400 audit(1781356377.281:159): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.109747][ T30] audit: type=1400 audit(1781356377.291:160): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="gadgetfs" ino=6871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.133266][ T30] audit: type=1400 audit(1781356377.321:161): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.150055][ T5614] veth0_vlan: entered promiscuous mode [ 75.197925][ T5614] veth1_vlan: entered promiscuous mode [ 75.231776][ T5615] veth0_macvtap: entered promiscuous mode [ 75.257654][ T5615] veth1_macvtap: entered promiscuous mode [ 75.266858][ T5622] veth0_macvtap: entered promiscuous mode [ 75.303498][ T5622] veth1_macvtap: entered promiscuous mode [ 75.319780][ T5613] veth0_macvtap: entered promiscuous mode [ 75.334099][ T5613] veth1_macvtap: entered promiscuous mode [ 75.352827][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.385353][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.412142][ T5614] veth0_macvtap: entered promiscuous mode [ 75.421574][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.429268][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438500][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.453194][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.462657][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.475152][ T5614] veth1_macvtap: entered promiscuous mode [ 75.485131][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.505617][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.527147][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.534499][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.543460][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.559887][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.573480][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.611725][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.623956][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.634096][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638340][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.669752][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.678138][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.706203][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.715080][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.744419][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756118][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781313][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803505][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.811502][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 75.813860][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.831361][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.845661][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.858270][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.878709][ T24] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 75.888314][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.902379][ T24] usb 2-1: Product: syz [ 75.910396][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.922374][ T24] usb 2-1: Manufacturer: syz [ 75.927566][ T24] usb 2-1: SerialNumber: syz [ 75.934910][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.951222][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.968728][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.018824][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.027646][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.085704][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.095139][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.182667][ T24] usb 2-1: cannot find UAC_HEADER [ 76.205725][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.216800][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.249360][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.274017][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.358753][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.393707][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.400959][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.582895][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.677881][ T5632] Bluetooth: hci1: command tx timeout [ 76.688260][ T5632] Bluetooth: hci3: command tx timeout [ 76.757069][ T5632] Bluetooth: hci4: command tx timeout [ 76.758599][ T5625] Bluetooth: hci2: command tx timeout [ 76.767993][ T5623] Bluetooth: hci0: command tx timeout [ 76.836375][ T5737] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.005003][ T5737] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.033469][ T5737] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.059498][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.069524][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 77.080910][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 77.100209][ T5737] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.118656][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.123824][ T5836] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.138046][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.138087][ T5737] usb 3-1: Product: syz [ 77.138104][ T5737] usb 3-1: Manufacturer: syz [ 77.147903][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 77.191529][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 77.197727][ T5839] FAULT_INJECTION: forcing a failure. [ 77.197727][ T5839] name failslab, interval 1, probability 0, space 0, times 1 [ 77.212096][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 77.212121][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.212138][ T5839] Call Trace: [ 77.212144][ T5839] [ 77.212150][ T5839] dump_stack_lvl+0x100/0x190 [ 77.212178][ T5839] should_fail_ex.cold+0x5/0xa [ 77.212206][ T5839] should_failslab+0xc2/0x120 [ 77.212228][ T5839] __kmalloc_node_noprof+0xe6/0x850 [ 77.212270][ T5839] ? alloc_slab_obj_exts+0xae/0x270 [ 77.212303][ T5839] alloc_slab_obj_exts+0xae/0x270 [ 77.212333][ T5839] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 77.212367][ T5839] ? kasan_save_track+0x14/0x30 [ 77.212388][ T5839] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 77.212416][ T5839] ? prepare_creds+0x2c/0x950 [ 77.212449][ T5839] prepare_creds+0x2c/0x950 [ 77.212472][ T5839] __do_sys_landlock_restrict_self+0x14c/0x9e0 [ 77.212500][ T5839] ? rcu_is_watching+0x12/0xc0 [ 77.212531][ T5839] do_syscall_64+0x115/0x870 [ 77.212565][ T5839] ? clear_bhb_loop+0x40/0x90 [ 77.212589][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.212609][ T5839] RIP: 0033:0x7f5fbb39ce59 [ 77.212632][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.212650][ T5839] RSP: 002b:00007f5fbc21e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 77.212674][ T5839] RAX: ffffffffffffffda RBX: 00007f5fbb615fa0 RCX: 00007f5fbb39ce59 [ 77.212687][ T5839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 77.212696][ T5839] RBP: 00007f5fbc21e090 R08: 0000000000000000 R09: 0000000000000000 [ 77.212706][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.212715][ T5839] R13: 00007f5fbb616038 R14: 00007f5fbb615fa0 R15: 00007ffe5a0ab9a8 [ 77.212738][ T5839] [ 77.212918][ T5737] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 77.425136][ T5737] cdc_wdm 3-1:1.0: Unknown control protocol [ 77.578070][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 77.593027][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.760191][ T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 77.781904][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 77.793479][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.810649][ T24] usb 5-1: Product: syz [ 77.814912][ T24] usb 5-1: Manufacturer: syz [ 77.819910][ T24] usb 5-1: SerialNumber: syz [ 78.220330][ T5737] usb 3-1: USB disconnect, device number 2 [ 78.445433][ T24] usb 5-1: Cannot retrieve CPort count: -110 [ 78.603559][ T24] usb 5-1: Cannot retrieve CPort count: -110 [ 78.712712][ T24] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 78.868097][ T5718] usb 2-1: USB disconnect, device number 2 [ 78.868882][ T24] usb 5-1: USB disconnect, device number 2 [ 78.975503][ T5861] FAULT_INJECTION: forcing a failure. [ 78.975503][ T5861] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.989562][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(full) [ 78.989591][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.989603][ T5861] Call Trace: [ 78.989611][ T5861] [ 78.989618][ T5861] dump_stack_lvl+0x100/0x190 [ 78.989648][ T5861] should_fail_ex.cold+0x5/0xa [ 78.989676][ T5861] _copy_from_user+0x2e/0xd0 [ 78.989703][ T5861] memdup_user+0x6b/0xe0 [ 78.989726][ T5861] strndup_user+0x78/0xe0 [ 78.989748][ T5861] __x64_sys_mount+0x136/0x310 [ 78.989781][ T5861] ? __pfx___x64_sys_mount+0x10/0x10 [ 78.989815][ T5861] ? rcu_is_watching+0x12/0xc0 [ 78.989857][ T5861] do_syscall_64+0x115/0x870 [ 78.989885][ T5861] ? clear_bhb_loop+0x40/0x90 [ 78.989913][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.989935][ T5861] RIP: 0033:0x7f0cbc19ce59 [ 78.989952][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.989971][ T5861] RSP: 002b:00007f0cbd006028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.989991][ T5861] RAX: ffffffffffffffda RBX: 00007f0cbc415fa0 RCX: 00007f0cbc19ce59 [ 78.990005][ T5861] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 78.990018][ T5861] RBP: 00007f0cbd006090 R08: 0000200000000300 R09: 0000000000000000 [ 78.990032][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.990045][ T5861] R13: 00007f0cbc416038 R14: 00007f0cbc415fa0 R15: 00007ffd3fba18f8 [ 78.990077][ T5861] [ 79.161589][ T5857] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 79.882588][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 79.882610][ T30] audit: type=1400 audit(1781356382.261:223): avc: denied { execute } for pid=5870 comm="syz.1.18" name="file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.974466][ T30] audit: type=1400 audit(1781356382.371:224): avc: denied { create } for pid=5864 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.191207][ T30] audit: type=1400 audit(1781356382.581:225): avc: denied { create } for pid=5864 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.235026][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 80.262672][ T30] audit: type=1400 audit(1781356382.581:226): avc: denied { bind } for pid=5864 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.425843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 80.463340][ T5876] syz.4.19 uses obsolete (PF_INET,SOCK_PACKET) [ 80.485829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 80.730843][ T30] audit: type=1400 audit(1781356382.591:227): avc: denied { write } for pid=5864 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.801691][ T30] audit: type=1400 audit(1781356382.631:228): avc: denied { write } for pid=5870 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.833565][ T5879] netlink: 'syz.4.21': attribute type 4 has an invalid length. [ 80.867195][ T5879] netlink: 'syz.4.21': attribute type 3 has an invalid length. [ 80.898974][ T30] audit: type=1400 audit(1781356382.861:229): avc: denied { write } for pid=5875 comm="syz.4.19" name="ip_tables_targets" dev="proc" ino=4026533019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.925920][ T5879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21'. [ 80.974972][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 81.001054][ T30] audit: type=1400 audit(1781356383.071:230): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.062834][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 81.091438][ T30] audit: type=1400 audit(1781356383.361:231): avc: denied { read write } for pid=5881 comm="syz.2.23" name="video36" dev="devtmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.120046][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.150591][ T30] audit: type=1400 audit(1781356383.361:232): avc: denied { open } for pid=5881 comm="syz.2.23" path="/dev/video36" dev="devtmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.260578][ T5896] Zero length message leads to an empty skb [ 81.566689][ T5898] Option 'D' to dns_resolver key: bad/missing value [ 81.582314][ T5718] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.710964][ T5896] input: syz0 as /devices/virtual/input/input5 [ 81.998485][ T5737] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.236717][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 83.032893][ T5718] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 83.052343][ T10] cfg80211: failed to load regulatory.db [ 83.097003][ T5718] usb 5-1: config 0 has no interface number 1 [ 83.166401][ T5718] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 83.177447][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.177969][ T5737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.198081][ T5718] usb 5-1: Product: syz [ 83.202836][ T5718] usb 5-1: Manufacturer: syz [ 83.210318][ T5718] usb 5-1: SerialNumber: syz [ 83.210718][ T5737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.270951][ T5737] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.298170][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.325980][ T5737] usb 4-1: SerialNumber: syz [ 83.378343][ T5718] usb 5-1: config 0 descriptor?? [ 83.526859][ T5718] viperboard 5-1:0.61: version 0.00 found at bus 005 address 003 [ 83.994995][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.008943][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.073448][ T5349] IPVS: starting estimator thread 0... [ 84.146750][ T5718] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 84.172704][ T5909] IPVS: using max 46 ests per chain, 110400 per kthread [ 84.192823][ T5910] IPVS: dh: FWM 3 0x00000003 - no destination available [ 84.215234][ T5718] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 84.275825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 84.327433][ T5718] viperboard 5-1:0.0: version 0.00 found at bus 005 address 003 [ 84.451575][ T5718] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 84.499339][ T5718] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 84.956976][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 84.957004][ T30] audit: type=1326 audit(1781356387.351:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff599ce59 code=0x7ffc0000 [ 85.045834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.066964][ T30] audit: type=1326 audit(1781356387.361:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff599ce59 code=0x7ffc0000 [ 85.175832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 85.254728][ T30] audit: type=1326 audit(1781356387.471:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8ff599ce59 code=0x7ffc0000 [ 85.296785][ T5742] usb 5-1: USB disconnect, device number 3 [ 85.377137][ T5737] usb 4-1: 0:2 : does not exist [ 85.409149][ T5737] usb 4-1: unit 5 not found! [ 85.419527][ T30] audit: type=1326 audit(1781356387.751:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff599ce59 code=0x7ffc0000 [ 85.470228][ T30] audit: type=1326 audit(1781356387.751:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff599ce59 code=0x7ffc0000 [ 85.515097][ T30] audit: type=1326 audit(1781356387.751:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ff595d68e code=0x7ffc0000 [ 85.550415][ T30] audit: type=1400 audit(1781356387.801:253): avc: denied { block_suspend } for pid=5914 comm="syz.1.29" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.577215][ T30] audit: type=1326 audit(1781356387.821:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ff595d68e code=0x7ffc0000 [ 85.689124][ T30] audit: type=1326 audit(1781356387.821:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8ff599e157 code=0x7ffc0000 [ 85.744395][ T5737] usb 4-1: USB disconnect, device number 2 [ 85.835988][ T30] audit: type=1326 audit(1781356387.821:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.27" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ff599ce59 code=0x7ffc0000 [ 86.923892][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.095829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 87.194500][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.414285][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.830623][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.920675][ T5935] netlink: 'syz.1.35': attribute type 4 has an invalid length. [ 88.954118][ T5935] netlink: 'syz.1.35': attribute type 3 has an invalid length. [ 88.989525][ T5935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35'. [ 90.023064][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 90.032892][ T30] audit: type=1400 audit(1781356392.341:285): avc: denied { watch watch_reads } for pid=5936 comm="syz.4.36" path="/6" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.062786][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 90.395827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.566058][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.090531][ T30] audit: type=1400 audit(1781356393.481:287): avc: denied { create } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.163286][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.186875][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.197792][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.214425][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.227518][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.274047][ T30] audit: type=1400 audit(1781356393.461:286): avc: denied { read } for pid=5945 comm="syz.1.37" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.363561][ T5953] FAULT_INJECTION: forcing a failure. [ 91.363561][ T5953] name failslab, interval 1, probability 0, space 0, times 0 [ 91.420942][ T5953] CPU: 1 UID: 0 PID: 5953 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 91.420972][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.420983][ T5953] Call Trace: [ 91.420990][ T5953] [ 91.420998][ T5953] dump_stack_lvl+0x100/0x190 [ 91.421028][ T5953] should_fail_ex.cold+0x5/0xa [ 91.421056][ T5953] should_failslab+0xc2/0x120 [ 91.421080][ T5953] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 91.421110][ T5953] ? __alloc_skb+0x140/0x710 [ 91.421136][ T5953] ? __alloc_skb+0x5b7/0x710 [ 91.421166][ T5953] __alloc_skb+0x140/0x710 [ 91.421193][ T5953] ? __alloc_skb+0x5b7/0x710 [ 91.421219][ T5953] ? __pfx___alloc_skb+0x10/0x10 [ 91.421247][ T5953] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 91.421283][ T5953] netlink_alloc_large_skb+0x69/0x150 [ 91.421311][ T5953] netlink_sendmsg+0x680/0xda0 [ 91.421339][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.421369][ T5953] ? __might_fault+0xa0/0x140 [ 91.421408][ T5953] ____sys_sendmsg+0x9e1/0xb70 [ 91.421431][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.421458][ T5953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.421494][ T5953] ___sys_sendmsg+0x190/0x1e0 [ 91.421523][ T5953] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.421583][ T5953] __sys_sendmsg+0x170/0x220 [ 91.421616][ T5953] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.421659][ T5953] ? rcu_is_watching+0x12/0xc0 [ 91.421694][ T5953] do_syscall_64+0x115/0x870 [ 91.421721][ T5953] ? clear_bhb_loop+0x40/0x90 [ 91.421748][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.421768][ T5953] RIP: 0033:0x7f5fbb39ce59 [ 91.421787][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.421806][ T5953] RSP: 002b:00007f5fbc21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.421827][ T5953] RAX: ffffffffffffffda RBX: 00007f5fbb615fa0 RCX: 00007f5fbb39ce59 [ 91.421841][ T5953] RDX: 0000000000008090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 91.421854][ T5953] RBP: 00007f5fbc21e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.421866][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.421877][ T5953] R13: 00007f5fbb616038 R14: 00007f5fbb615fa0 R15: 00007ffe5a0ab9a8 [ 91.421906][ T5953] [ 91.475824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.722753][ T30] audit: type=1400 audit(1781356393.481:288): avc: denied { open } for pid=5945 comm="syz.1.37" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.867586][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.973100][ T30] audit: type=1400 audit(1781356393.561:289): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="socket:[9402]" dev="sockfs" ino=9402 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.123115][ T30] audit: type=1400 audit(1781356394.081:290): avc: denied { create } for pid=5945 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.149638][ T30] audit: type=1400 audit(1781356394.281:291): avc: denied { search } for pid=5278 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.265995][ T30] audit: type=1400 audit(1781356394.281:292): avc: denied { search } for pid=5278 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.316685][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 92.338992][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 92.347360][ T30] audit: type=1400 audit(1781356394.281:293): avc: denied { search } for pid=5278 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.347449][ T30] audit: type=1400 audit(1781356394.281:294): avc: denied { read } for pid=5278 comm="dhcpcd" name="n30" dev="tmpfs" ino=2009 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.435826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.512111][ T37] bridge_slave_1: left allmulticast mode [ 92.521557][ T37] bridge_slave_1: left promiscuous mode [ 92.603435][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.850195][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.001061][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.181791][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.310540][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.331371][ T37] bridge_slave_0: left allmulticast mode [ 93.373644][ T37] bridge_slave_0: left promiscuous mode [ 93.418356][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.432686][ T5623] Bluetooth: hci0: command tx timeout [ 93.445389][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.502814][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.844597][ T5737] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.037926][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 94.043564][ T29] usbtmc 5-1:16.0: can't read capabilities [ 94.169326][ T5737] usb 3-1: device descriptor read/64, error -71 [ 94.426183][ T5737] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.609265][ T5737] usb 3-1: device descriptor read/64, error -71 [ 94.748044][ T5737] usb usb3-port1: attempt power cycle [ 95.200117][ T5737] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.495962][ T5737] usb 3-1: device descriptor read/8, error -71 [ 95.520077][ T5623] Bluetooth: hci0: command tx timeout [ 95.668386][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.689208][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.700284][ T37] bond0 (unregistering): Released all slaves [ 95.855217][ T5737] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.023084][ T5987] FAULT_INJECTION: forcing a failure. [ 96.023084][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.079167][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(full) [ 96.079196][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.079209][ T5987] Call Trace: [ 96.079216][ T5987] [ 96.079223][ T5987] dump_stack_lvl+0x100/0x190 [ 96.079253][ T5987] should_fail_ex.cold+0x5/0xa [ 96.079283][ T5987] _copy_to_user+0x32/0xd0 [ 96.079311][ T5987] bpf_prog_test_run_raw_tp+0x53d/0x700 [ 96.079340][ T5987] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 96.079369][ T5987] ? fput+0x79/0x100 [ 96.079396][ T5987] ? __bpf_prog_get+0x97/0x2a0 [ 96.079422][ T5987] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 96.079448][ T5987] __sys_bpf+0x1725/0x4b90 [ 96.079483][ T5987] ? __pfx___sys_bpf+0x10/0x10 [ 96.079511][ T5987] ? proc_fail_nth_write+0x9f/0x220 [ 96.079535][ T5987] ? find_held_lock+0x2b/0x80 [ 96.079560][ T5987] ? find_held_lock+0x2b/0x80 [ 96.079578][ T5987] ? ksys_write+0x190/0x250 [ 96.079599][ T5987] ? ksys_write+0x190/0x250 [ 96.079626][ T5987] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 96.079655][ T5987] ? kernel_write+0x6b3/0x6c0 [ 96.079676][ T5987] ? __fget_files+0x215/0x3d0 [ 96.079718][ T5987] ? fput+0x79/0x100 [ 96.079744][ T5987] ? ksys_write+0x1ac/0x250 [ 96.079766][ T5987] ? __pfx_ksys_write+0x10/0x10 [ 96.079795][ T5987] __x64_sys_bpf+0x7b/0xc0 [ 96.079822][ T5987] ? lockdep_hardirqs_on+0x78/0x100 [ 96.079850][ T5987] do_syscall_64+0x115/0x870 [ 96.079877][ T5987] ? clear_bhb_loop+0x40/0x90 [ 96.079904][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.079926][ T5987] RIP: 0033:0x7f0cbc19ce59 [ 96.079945][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.079965][ T5987] RSP: 002b:00007f0cbd006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.079986][ T5987] RAX: ffffffffffffffda RBX: 00007f0cbc415fa0 RCX: 00007f0cbc19ce59 [ 96.080000][ T5987] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 96.080013][ T5987] RBP: 00007f0cbd006090 R08: 0000000000000000 R09: 0000000000000000 [ 96.080025][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.080037][ T5987] R13: 00007f0cbc416038 R14: 00007f0cbc415fa0 R15: 00007ffd3fba18f8 [ 96.080067][ T5987] [ 96.416606][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 96.416640][ T30] audit: type=1400 audit(1781356398.781:298): avc: denied { read } for pid=5991 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.600702][ T5737] usb 3-1: device not accepting address 6, error -71 [ 96.607725][ T5737] usb usb3-port1: unable to enumerate USB device [ 96.619280][ T30] audit: type=1400 audit(1781356398.781:299): avc: denied { read open } for pid=5991 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.630549][ T5725] usb 5-1: USB disconnect, device number 4 [ 96.645626][ T30] audit: type=1400 audit(1781356398.781:300): avc: denied { getattr } for pid=5991 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.741192][ T5997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.787231][ T5997] process 'syz.3.49' launched './file2' with NULL argv: empty string added [ 96.868001][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 97.043611][ T30] audit: type=1400 audit(1781356399.181:301): avc: denied { execute } for pid=5992 comm="syz.3.49" name="file2" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.198640][ T30] audit: type=1400 audit(1781356399.201:302): avc: denied { execute_no_trans } for pid=5992 comm="syz.3.49" path="/11/file2" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.394239][ T30] audit: type=1400 audit(1781356399.241:303): avc: denied { create } for pid=5992 comm="syz.3.49" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.419625][ T30] audit: type=1400 audit(1781356399.821:304): avc: denied { unlink } for pid=5615 comm="syz-executor" name="file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.573287][ T5623] Bluetooth: hci0: command tx timeout [ 97.586307][ T30] audit: type=1400 audit(1781356399.921:305): avc: denied { mount } for pid=5999 comm="syz.1.50" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 97.608092][ T30] audit: type=1400 audit(1781356399.981:306): avc: denied { create } for pid=5999 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.643340][ T30] audit: type=1400 audit(1781356400.041:307): avc: denied { bind } for pid=5999 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.322826][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.583372][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.939490][ T37] hsr_slave_0: left promiscuous mode [ 98.988839][ T37] hsr_slave_1: left promiscuous mode [ 99.018539][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.072107][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.126135][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.371852][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.616985][ T37] veth1_macvtap: left promiscuous mode [ 99.633366][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 99.646047][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 99.652812][ T37] veth0_macvtap: left promiscuous mode [ 99.717358][ T37] veth1_vlan: left promiscuous mode [ 99.744511][ T5623] Bluetooth: hci0: command tx timeout [ 99.774239][ T37] veth0_vlan: left promiscuous mode [ 100.493076][ T29] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 100.521326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.624965][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.670683][ T5718] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.684959][ T29] usb 4-1: Product: syz [ 100.703097][ T29] usb 4-1: Manufacturer: syz [ 100.730035][ T29] usb 4-1: SerialNumber: syz [ 100.823110][ T29] usb 4-1: can't set config #1, error -71 [ 100.856907][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 100.858491][ T29] usb 4-1: USB disconnect, device number 3 [ 100.889269][ T5718] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.922876][ T5718] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.976869][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.017434][ T5718] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.066070][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.078815][ T37] team0 (unregistering): Port device team_slave_1 removed [ 101.122042][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.138426][ T6058] FAULT_INJECTION: forcing a failure. [ 101.138426][ T6058] name failslab, interval 1, probability 0, space 0, times 0 [ 101.153434][ T5718] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.168965][ T6058] CPU: 0 UID: 0 PID: 6058 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT(full) [ 101.168982][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.168990][ T6058] Call Trace: [ 101.168994][ T6058] [ 101.168999][ T6058] dump_stack_lvl+0x100/0x190 [ 101.169017][ T6058] should_fail_ex.cold+0x5/0xa [ 101.169034][ T6058] should_failslab+0xc2/0x120 [ 101.169047][ T6058] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.169066][ T6058] ? dst_alloc+0x99/0x1a0 [ 101.169086][ T6058] dst_alloc+0x99/0x1a0 [ 101.169103][ T6058] rt_dst_alloc+0x35/0x3a0 [ 101.169121][ T6058] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 101.169149][ T6058] ip_route_output_key_hash+0x118/0x2b0 [ 101.169168][ T6058] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 101.169192][ T6058] ? find_held_lock+0x2b/0x80 [ 101.169205][ T6058] ip_route_output_flow+0x27/0x150 [ 101.169218][ T6058] raw_sendmsg+0xb1c/0x3590 [ 101.169240][ T6058] ? avc_has_perm_noaudit+0x70/0x3b0 [ 101.169255][ T6058] ? __pfx_raw_sendmsg+0x10/0x10 [ 101.169276][ T6058] ? avc_has_perm+0x135/0x1e0 [ 101.169296][ T6058] ? sock_has_perm+0x25a/0x2f0 [ 101.169317][ T6058] ? __might_fault+0xa0/0x140 [ 101.169334][ T6058] ? __might_fault+0xc5/0x140 [ 101.169351][ T6058] ? __pfx_raw_sendmsg+0x10/0x10 [ 101.169377][ T6058] inet_sendmsg+0x11c/0x140 [ 101.169395][ T6058] ____sys_sendmsg+0x98d/0xb70 [ 101.169409][ T6058] ? __pfx_inet_sendmsg+0x10/0x10 [ 101.169427][ T6058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.169443][ T6058] ? __pfx__kstrtoull+0x10/0x10 [ 101.169464][ T6058] ___sys_sendmsg+0x190/0x1e0 [ 101.169480][ T6058] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.169502][ T6058] ? find_held_lock+0x2b/0x80 [ 101.169522][ T6058] __sys_sendmmsg+0x205/0x430 [ 101.169542][ T6058] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.169565][ T6058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.169589][ T6058] ? fput+0x79/0x100 [ 101.169606][ T6058] ? ksys_write+0x1ac/0x250 [ 101.169618][ T6058] ? __pfx_ksys_write+0x10/0x10 [ 101.169633][ T6058] __x64_sys_sendmmsg+0x9c/0x100 [ 101.169655][ T6058] ? lockdep_hardirqs_on+0x78/0x100 [ 101.169678][ T6058] do_syscall_64+0x115/0x870 [ 101.169702][ T6058] ? clear_bhb_loop+0x40/0x90 [ 101.169727][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.169754][ T6058] RIP: 0033:0x7f5fbb39ce59 [ 101.169771][ T6058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.169789][ T6058] RSP: 002b:00007f5fbc21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.169807][ T6058] RAX: ffffffffffffffda RBX: 00007f5fbb615fa0 RCX: 00007f5fbb39ce59 [ 101.169819][ T6058] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000007 [ 101.169831][ T6058] RBP: 00007f5fbc21e090 R08: 0000000000000000 R09: 0000000000000000 [ 101.169842][ T6058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.169852][ T6058] R13: 00007f5fbb616038 R14: 00007f5fbb615fa0 R15: 00007ffe5a0ab9a8 [ 101.169879][ T6058] [ 101.482884][ T5718] usb 5-1: config 168 interface 0 has no altsetting 0 [ 101.546788][ T37] team0 (unregistering): Port device team_slave_0 removed [ 101.552774][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 101.552790][ T30] audit: type=1400 audit(1781356403.941:331): avc: denied { ioctl } for pid=6061 comm="syz.3.60" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.594917][ T5718] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.602958][ T5718] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.615875][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.627848][ T5718] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.640235][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.652075][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.664168][ T5718] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.678299][ T5718] usb 5-1: config 168 interface 0 has no altsetting 0 [ 101.688420][ T5718] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.698763][ T5718] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.710509][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.723679][ T5718] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.736190][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.747919][ T5718] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.759976][ T5718] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.773973][ T5718] usb 5-1: config 168 interface 0 has no altsetting 0 [ 101.788729][ T5718] usb 5-1: string descriptor 0 read error: -22 [ 101.795316][ T5718] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.804878][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.827573][ T5718] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.838078][ T6064] binder: 6061:6064 ioctl c0306201 200000000080 returned -14 [ 101.874290][ T30] audit: type=1400 audit(1781356404.271:332): avc: denied { set_context_mgr } for pid=6061 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 101.968363][ T30] audit: type=1400 audit(1781356404.331:333): avc: denied { map } for pid=6061 comm="syz.3.60" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.176107][ T6069] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 102.225342][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.643788][ T6084] capability: warning: `syz.1.65' uses 32-bit capabilities (legacy support in use) [ 102.722822][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.750265][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.768488][ T5947] bridge_slave_0: entered allmulticast mode [ 102.778973][ T5947] bridge_slave_0: entered promiscuous mode [ 102.792044][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.800008][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.807241][ T5947] bridge_slave_1: entered allmulticast mode [ 102.814766][ T5947] bridge_slave_1: entered promiscuous mode [ 102.847949][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.859953][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.893314][ T5947] team0: Port device team_slave_0 added [ 102.894606][ T30] audit: type=1400 audit(1781356405.131:334): avc: denied { read } for pid=6083 comm="syz.1.65" path="socket:[9175]" dev="sockfs" ino=9175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.925216][ T5947] team0: Port device team_slave_1 added [ 102.982993][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.998161][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.050982][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.066135][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.073114][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.099429][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.241711][ T30] audit: type=1400 audit(1781356405.641:335): avc: denied { create } for pid=6086 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.303601][ T30] audit: type=1400 audit(1781356405.641:336): avc: denied { ioctl } for pid=6083 comm="syz.1.65" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.328804][ T5947] hsr_slave_0: entered promiscuous mode [ 103.335750][ T5947] hsr_slave_1: entered promiscuous mode [ 103.342418][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 103.349108][ T5947] Cannot create hsr debugfs directory [ 103.585822][ T30] audit: type=1400 audit(1781356405.961:337): avc: denied { write } for pid=6090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.862358][ T30] audit: type=1400 audit(1781356406.231:338): avc: denied { write } for pid=6105 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.002288][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.111877][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.329285][ T30] audit: type=1400 audit(1781356406.731:339): avc: denied { read append } for pid=6109 comm="syz.1.70" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.353419][ T30] audit: type=1400 audit(1781356406.731:340): avc: denied { open } for pid=6109 comm="syz.1.70" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.395471][ T10] usb 5-1: USB disconnect, device number 5 [ 104.510799][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.521640][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.530868][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.586806][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.603088][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.661038][ T5947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.752035][ T5947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.798400][ T5947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.868399][ T5947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.898719][ T5947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.992004][ T5947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.027259][ T5947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.100854][ T5947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.196849][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.230013][ T6136] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 105.655068][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.712902][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.725379][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.808247][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.825886][ T6166] ======================================================= [ 105.825886][ T6166] WARNING: The mand mount option has been deprecated and [ 105.825886][ T6166] and is ignored by this kernel. Remove the mand [ 105.825886][ T6166] option from the mount to silence this warning. [ 105.825886][ T6166] ======================================================= [ 105.879555][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.886753][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.896664][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.904012][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.054715][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.427873][ T6179] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 106.605241][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.676060][ T5623] Bluetooth: hci4: command tx timeout [ 106.810374][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 106.821318][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 106.835713][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.856213][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.880138][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.929658][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.949313][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.976556][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.052149][ T37] bridge_slave_1: left allmulticast mode [ 107.059755][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.082717][ T37] bridge_slave_1: left promiscuous mode [ 107.092838][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.104930][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.161659][ T10] usb 2-1: config 0 descriptor?? [ 107.198203][ T37] bridge_slave_0: left allmulticast mode [ 107.206043][ T37] bridge_slave_0: left promiscuous mode [ 107.214244][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.224659][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 107.224676][ T30] audit: type=1400 audit(1781356409.631:358): avc: denied { read } for pid=6194 comm="syz.3.87" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.260523][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.278297][ T30] audit: type=1400 audit(1781356409.661:359): avc: denied { map } for pid=6194 comm="syz.3.87" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.278812][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.308081][ T30] audit: type=1400 audit(1781356409.711:360): avc: denied { ioctl } for pid=6194 comm="syz.3.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11456 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.317278][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.363037][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.376191][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.523528][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.566680][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.575700][ T10] usb 2-1: USB disconnect, device number 3 [ 107.588021][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.603156][ T10] usblp0: removed [ 107.615712][ T37] bond0 (unregistering): Released all slaves [ 107.753812][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.765719][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.773346][ T6116] bridge_slave_0: entered allmulticast mode [ 107.781175][ T6116] bridge_slave_0: entered promiscuous mode [ 107.791874][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.801387][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.809612][ T6116] bridge_slave_1: entered allmulticast mode [ 107.819329][ T6116] bridge_slave_1: entered promiscuous mode [ 107.892671][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.933862][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.003522][ T6116] team0: Port device team_slave_0 added [ 108.011774][ T6116] team0: Port device team_slave_1 added [ 108.153535][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.160502][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.186381][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.198772][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.205727][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.231624][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.275032][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.492523][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.558566][ T6116] hsr_slave_0: entered promiscuous mode [ 108.565141][ T6116] hsr_slave_1: entered promiscuous mode [ 108.618452][ T6116] debugfs: 'hsr0' already exists in 'hsr' [ 108.624210][ T6116] Cannot create hsr debugfs directory [ 108.656317][ T37] hsr_slave_0: left promiscuous mode [ 108.662291][ T37] hsr_slave_1: left promiscuous mode [ 108.668195][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.675744][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.706987][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.714391][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.727757][ T37] veth1_macvtap: left promiscuous mode [ 108.733261][ T37] veth0_macvtap: left promiscuous mode [ 108.738859][ T37] veth1_vlan: left promiscuous mode [ 108.741795][ T30] audit: type=1400 audit(1781356410.871:361): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.767164][ T37] veth0_vlan: left promiscuous mode [ 108.773039][ T5625] Bluetooth: hci4: command tx timeout [ 108.809388][ T10] usb 2-1: device descriptor read/64, error -71 [ 108.941209][ T30] audit: type=1400 audit(1781356411.311:362): avc: denied { write } for pid=6231 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.060224][ T37] team0 (unregistering): Port device team_slave_1 removed [ 109.073318][ T37] team0 (unregistering): Port device team_slave_0 removed [ 109.129988][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.172517][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 109.503463][ T5625] Bluetooth: hci1: command tx timeout [ 109.700331][ T30] audit: type=1400 audit(1781356412.071:363): avc: denied { write } for pid=6245 comm="syz.1.89" name="file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.099372][ T30] audit: type=1400 audit(1781356412.071:364): avc: denied { open } for pid=6245 comm="syz.1.89" path="/19/file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.160042][ T30] audit: type=1326 audit(1781356412.511:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.3.90" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fbb39ce59 code=0x0 [ 110.254289][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.276297][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.295997][ T6193] bridge_slave_0: entered allmulticast mode [ 110.307061][ T6193] bridge_slave_0: entered promiscuous mode [ 110.318435][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.335663][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.346608][ T6193] bridge_slave_1: entered allmulticast mode [ 110.354122][ T6193] bridge_slave_1: entered promiscuous mode [ 110.370667][ T5947] veth0_vlan: entered promiscuous mode [ 110.590048][ T30] audit: type=1400 audit(1781356412.941:366): avc: denied { create } for pid=6264 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.622301][ T6193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.639168][ T30] audit: type=1400 audit(1781356413.011:367): avc: denied { write } for pid=6253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.677151][ T6193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.760448][ T6116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.773373][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.782584][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.91'. [ 110.800013][ T6116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.812465][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.834713][ T6193] team0: Port device team_slave_0 added [ 110.842001][ T5947] veth1_vlan: entered promiscuous mode [ 110.860940][ T5625] Bluetooth: hci4: command tx timeout [ 110.872986][ T6116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.925423][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.959712][ T6116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.000986][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.012880][ T6193] team0: Port device team_slave_1 added [ 111.019286][ T6275] nfs4: Unknown parameter 'sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millis' [ 111.021023][ T6276] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 111.099892][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 111.127181][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.134150][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.160124][ T6193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.172364][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.192758][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.219638][ T6193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.272000][ T5947] veth0_macvtap: entered promiscuous mode [ 111.554341][ T5943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.556448][ T5625] Bluetooth: hci1: command tx timeout [ 111.590055][ T5947] veth1_macvtap: entered promiscuous mode [ 111.665261][ T6193] hsr_slave_0: entered promiscuous mode [ 111.679091][ T6193] hsr_slave_1: entered promiscuous mode [ 111.697363][ T6193] debugfs: 'hsr0' already exists in 'hsr' [ 111.729753][ T6193] Cannot create hsr debugfs directory [ 111.772161][ T5943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.070011][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.204991][ T5943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.485429][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.585319][ T5943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.623570][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 112.623588][ T30] audit: type=1400 audit(1781356415.021:374): avc: denied { write } for pid=6293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.853802][ T158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.871074][ T30] audit: type=1400 audit(1781356415.271:375): avc: denied { write } for pid=6306 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.886967][ T158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.924512][ T5625] Bluetooth: hci4: command tx timeout [ 113.062411][ T158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.099132][ T158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.146098][ T6308] FAULT_INJECTION: forcing a failure. [ 113.146098][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 113.175225][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) [ 113.175254][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.175267][ T6308] Call Trace: [ 113.175274][ T6308] [ 113.175282][ T6308] dump_stack_lvl+0x100/0x190 [ 113.175320][ T6308] should_fail_ex.cold+0x5/0xa [ 113.175347][ T6308] should_failslab+0xc2/0x120 [ 113.175370][ T6308] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 113.175398][ T6308] ? dst_alloc+0x99/0x1a0 [ 113.175430][ T6308] dst_alloc+0x99/0x1a0 [ 113.175459][ T6308] rt_dst_alloc+0x35/0x3a0 [ 113.175489][ T6308] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 113.175533][ T6308] ip_route_output_key_hash+0x118/0x2b0 [ 113.175567][ T6308] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 113.175601][ T6308] ? __pfx___might_resched+0x10/0x10 [ 113.175638][ T6308] ? find_held_lock+0x2b/0x80 [ 113.175660][ T6308] ip_route_output_flow+0x27/0x150 [ 113.175684][ T6308] raw_sendmsg+0xb1c/0x3590 [ 113.175722][ T6308] ? avc_has_perm_noaudit+0x16d/0x3b0 [ 113.175747][ T6308] ? __pfx_raw_sendmsg+0x10/0x10 [ 113.175786][ T6308] ? avc_has_perm+0x135/0x1e0 [ 113.175821][ T6308] ? sock_has_perm+0x25a/0x2f0 [ 113.175859][ T6308] ? __might_fault+0xa0/0x140 [ 113.175888][ T6308] ? __might_fault+0xc5/0x140 [ 113.175919][ T6308] ? __pfx_raw_sendmsg+0x10/0x10 [ 113.175952][ T6308] inet_sendmsg+0x11c/0x140 [ 113.175984][ T6308] ____sys_sendmsg+0x98d/0xb70 [ 113.176006][ T6308] ? __pfx_inet_sendmsg+0x10/0x10 [ 113.176038][ T6308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.176068][ T6308] ? __pfx__kstrtoull+0x10/0x10 [ 113.176104][ T6308] ___sys_sendmsg+0x190/0x1e0 [ 113.176133][ T6308] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.176175][ T6308] ? find_held_lock+0x2b/0x80 [ 113.176215][ T6308] __sys_sendmmsg+0x205/0x430 [ 113.176252][ T6308] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.176293][ T6308] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.176343][ T6308] ? fput+0x79/0x100 [ 113.176371][ T6308] ? ksys_write+0x1ac/0x250 [ 113.176394][ T6308] ? __pfx_ksys_write+0x10/0x10 [ 113.176423][ T6308] __x64_sys_sendmmsg+0x9c/0x100 [ 113.176454][ T6308] ? lockdep_hardirqs_on+0x78/0x100 [ 113.176481][ T6308] do_syscall_64+0x115/0x870 [ 113.176506][ T6308] ? clear_bhb_loop+0x40/0x90 [ 113.176532][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.176554][ T6308] RIP: 0033:0x7f0cbc19ce59 [ 113.176572][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.176592][ T6308] RSP: 002b:00007f0cbcfe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.176611][ T6308] RAX: ffffffffffffffda RBX: 00007f0cbc416090 RCX: 00007f0cbc19ce59 [ 113.176625][ T6308] RDX: 0000000000000300 RSI: 0000200000005240 RDI: 0000000000000005 [ 113.176638][ T6308] RBP: 00007f0cbcfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.176650][ T6308] R10: 000000000401eb94 R11: 0000000000000246 R12: 0000000000000001 [ 113.176663][ T6308] R13: 00007f0cbc416128 R14: 00007f0cbc416090 R15: 00007ffd3fba18f8 [ 113.176692][ T6308] [ 113.494682][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 113.514394][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.530891][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.611215][ T6193] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.621316][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.629236][ T6193] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.641444][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.680959][ T6116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.691676][ T6116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.709712][ T5625] Bluetooth: hci1: command tx timeout [ 113.744099][ T6193] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.772518][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.781636][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.788707][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.848267][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.855734][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.984958][ T6193] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.003265][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.055405][ T5943] bridge_slave_1: left allmulticast mode [ 114.061855][ T5943] bridge_slave_1: left promiscuous mode [ 114.069791][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.094095][ T5943] bridge_slave_0: left allmulticast mode [ 114.110387][ T5943] bridge_slave_0: left promiscuous mode [ 114.131394][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.272160][ T30] audit: type=1400 audit(1781356416.671:376): avc: denied { write } for pid=6310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.573053][ T30] audit: type=1400 audit(1781356416.971:377): avc: denied { write } for pid=6328 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.973942][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 115.716036][ T5625] Bluetooth: hci1: command tx timeout [ 115.763479][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.788776][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.803765][ T5943] bond0 (unregistering): Released all slaves [ 115.853818][ T6333] bridge0: port 3(macsec1) entered blocking state [ 115.860391][ T6333] bridge0: port 3(macsec1) entered disabled state [ 115.867065][ T6333] macsec1: entered allmulticast mode [ 115.872362][ T6333] bridge0: entered allmulticast mode [ 115.877844][ T6333] bridge0: entered promiscuous mode [ 115.886585][ T6333] macsec1: left allmulticast mode [ 115.891658][ T6333] bridge0: left allmulticast mode [ 115.926019][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 115.949545][ T5732] bridge0: left promiscuous mode [ 116.497741][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.534579][ T5943] hsr_slave_0: left promiscuous mode [ 116.544642][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.552394][ T5943] hsr_slave_1: left promiscuous mode [ 116.572218][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.581341][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.598085][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.606663][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.624503][ T5943] veth1_macvtap: left promiscuous mode [ 116.631784][ T5943] veth0_macvtap: left promiscuous mode [ 116.645828][ T5943] veth1_vlan: left promiscuous mode [ 116.651087][ T5943] veth0_vlan: left promiscuous mode [ 117.194852][ T30] audit: type=1400 audit(1781356419.591:378): avc: denied { write } for pid=6351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.329576][ T30] audit: type=1400 audit(1781356419.731:379): avc: denied { write } for pid=6362 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.359465][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 117.488850][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 117.566896][ T6365] nfs4: Unknown parameter 'sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millis' [ 118.115206][ T30] audit: type=1400 audit(1781356420.441:380): avc: denied { write } for pid=6368 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.319034][ T30] audit: type=1326 audit(1781356420.501:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.1.102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cbc19ce59 code=0x0 [ 118.532024][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 118.908839][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.935942][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.974477][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.016081][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.032562][ T6193] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.067786][ T6193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.205610][ T6193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.234384][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.241534][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.250270][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.257421][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.279950][ T30] audit: type=1400 audit(1781356421.671:382): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.723781][ T30] audit: type=1400 audit(1781356422.091:383): avc: denied { write } for pid=6384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.969707][ T6405] loop4: detected capacity change from 0 to 7 [ 119.997935][ T30] audit: type=1400 audit(1781356422.321:384): avc: denied { write } for pid=6420 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.101866][ T5943] IPVS: stop unused estimator thread 0... [ 120.112540][ T6116] veth0_vlan: entered promiscuous mode [ 120.148888][ T6116] veth1_vlan: entered promiscuous mode [ 120.165690][ T6405] Dev loop4: unable to read RDB block 7 [ 120.207073][ T5725] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.214868][ T6405] loop4: unable to read partition table [ 120.220686][ T6405] loop4: partition table beyond EOD, truncated [ 120.224144][ T6116] veth0_macvtap: entered promiscuous mode [ 120.245378][ T6405] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.272115][ T6116] veth1_macvtap: entered promiscuous mode [ 120.325739][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.366426][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.445481][ T5908] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.457735][ T5908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.485272][ T5908] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.494011][ T5908] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.563787][ T6193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.696565][ T5908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.717117][ T5908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.831007][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.902495][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.988437][ T6390] syz.3.105 (6390): drop_caches: 2 [ 121.006200][ T30] audit: type=1400 audit(1781356423.351:385): avc: denied { mounton } for pid=6116 comm="syz-executor" path="/root/syzkaller.uu0wFo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 121.112260][ T30] audit: type=1400 audit(1781356423.461:386): avc: denied { create } for pid=6445 comm="syz.5.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.224563][ T30] audit: type=1400 audit(1781356423.461:387): avc: denied { write } for pid=6427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.273470][ T6450] FAULT_INJECTION: forcing a failure. [ 121.273470][ T6450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.322686][ T30] audit: type=1400 audit(1781356423.651:388): avc: denied { listen } for pid=6451 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.371505][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.6.69 Not tainted syzkaller #0 PREEMPT(full) [ 121.371535][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.371547][ T6450] Call Trace: [ 121.371554][ T6450] [ 121.371561][ T6450] dump_stack_lvl+0x100/0x190 [ 121.371592][ T6450] should_fail_ex.cold+0x5/0xa [ 121.371621][ T6450] _copy_from_user+0x2e/0xd0 [ 121.371648][ T6450] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 121.371672][ T6450] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 121.371698][ T6450] ? tcp_setsockopt+0xae/0x100 [ 121.371722][ T6450] smc_setsockopt+0x299/0xa40 [ 121.371742][ T6450] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.371770][ T6450] ? __pfx_smc_setsockopt+0x10/0x10 [ 121.371789][ T6450] ? __fget_files+0x215/0x3d0 [ 121.371820][ T6450] ? selinux_socket_setsockopt+0x6a/0x80 [ 121.371849][ T6450] ? __pfx_smc_setsockopt+0x10/0x10 [ 121.371872][ T6450] do_sock_setsockopt+0xf3/0x1d0 [ 121.371898][ T6450] __sys_setsockopt+0x195/0x220 [ 121.371934][ T6450] __x64_sys_setsockopt+0xbd/0x160 [ 121.371963][ T6450] ? do_syscall_64+0x90/0x870 [ 121.371990][ T6450] ? lockdep_hardirqs_on+0x78/0x100 [ 121.372017][ T6450] do_syscall_64+0x115/0x870 [ 121.372042][ T6450] ? clear_bhb_loop+0x40/0x90 [ 121.372069][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.372091][ T6450] RIP: 0033:0x7fa12539ce59 [ 121.372108][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.372142][ T6450] RSP: 002b:00007fa1262b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.372174][ T6450] RAX: ffffffffffffffda RBX: 00007fa125616090 RCX: 00007fa12539ce59 [ 121.372188][ T6450] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 121.372201][ T6450] RBP: 00007fa1262b1090 R08: 0000000000000088 R09: 0000000000000000 [ 121.372214][ T6450] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 121.372227][ T6450] R13: 00007fa125616128 R14: 00007fa125616090 R15: 00007ffedd7b5d58 [ 121.372256][ T6450] [ 121.465022][ T6456] nfs4: Unknown parameter 'sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millis' [ 121.578910][ T6193] veth0_vlan: entered promiscuous mode [ 121.583520][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.613004][ T6193] veth1_vlan: entered promiscuous mode [ 121.639860][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.644275][ T30] audit: type=1400 audit(1781356423.671:389): avc: denied { write } for pid=6453 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.650749][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.650776][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.650820][ T5725] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.709922][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 121.751358][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.762239][ T5725] usb 2-1: config 0 descriptor?? [ 121.800835][ T6193] veth0_macvtap: entered promiscuous mode [ 121.814900][ T6193] veth1_macvtap: entered promiscuous mode [ 121.843270][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.854449][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.334352][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.343600][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.407737][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.416507][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.535486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.543337][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.710537][ T6479] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 123.875719][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 123.875735][ T30] audit: type=1400 audit(1781356426.241:394): avc: denied { write } for pid=6461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.946392][ T5737] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 124.045555][ T30] audit: type=1400 audit(1781356426.401:395): avc: denied { write } for pid=6492 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.268260][ T5737] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 124.285104][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.302480][ T5737] usb 7-1: Product: syz [ 124.312634][ T5737] usb 7-1: Manufacturer: syz [ 124.321851][ T5737] usb 7-1: SerialNumber: syz [ 124.360426][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.361867][ T5737] usb 7-1: config 0 descriptor?? [ 124.398172][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 124.429738][ T5725] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.433040][ T5737] hub 7-1:0.0: bad descriptor, ignoring hub [ 124.490553][ T5737] hub 7-1:0.0: probe with driver hub failed with error -5 [ 124.505262][ T5725] usb 2-1: USB disconnect, device number 6 [ 124.539998][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 124.554790][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.589756][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 124.604921][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.642535][ T30] audit: type=1400 audit(1781356427.021:396): avc: denied { write } for pid=6480 comm="syz.6.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.701168][ T6499] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 124.785370][ T6502] comedi comedi2: aio_iiro_16: I/O base address not correctly aligned [ 124.815459][ T30] audit: type=1400 audit(1781356427.021:397): avc: denied { ioctl } for pid=6480 comm="syz.6.115" path="socket:[13073]" dev="sockfs" ino=13073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.949641][ T30] audit: type=1400 audit(1781356427.021:398): avc: denied { connect } for pid=6480 comm="syz.6.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.043689][ T30] audit: type=1400 audit(1781356427.061:399): avc: denied { write } for pid=6480 comm="syz.6.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.227128][ T30] audit: type=1400 audit(1781356427.181:400): avc: denied { ioctl } for pid=6480 comm="syz.6.115" path="socket:[13625]" dev="sockfs" ino=13625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.515169][ T5737] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 125.773885][ T6510] evm: overlay not supported [ 126.527248][ T5737] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 126.527314][ T5737] dib0700: firmware download failed at 7 with -22 [ 126.580277][ T5737] usb 7-1: USB disconnect, device number 2 [ 126.604643][ T9] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 126.604678][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.604702][ T9] usb 4-1: Product: syz [ 126.677219][ T30] audit: type=1800 audit(1781356428.161:401): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.86" name="file0" dev="overlay" ino=26 res=0 errno=0 [ 126.782056][ T9] usb 4-1: can't set config #1, error -71 [ 126.806597][ T9] usb 4-1: USB disconnect, device number 4 [ 126.808099][ T6500] fido_id[6500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 126.885244][ T30] audit: type=1800 audit(1781356428.161:402): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.86" name="file0" dev="overlay" ino=26 res=0 errno=0 [ 127.021409][ T30] audit: type=1800 audit(1781356428.161:403): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.86" name="file0" dev="overlay" ino=26 res=0 errno=0 [ 127.467200][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.124'. [ 128.500501][ T6557] Bluetooth: MGMT ver 1.23 [ 128.915119][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 128.915153][ T30] audit: type=1400 audit(1781356431.311:441): avc: denied { watch } for pid=6567 comm="syz.5.133" path="/7/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.390931][ T30] audit: type=1400 audit(1781356431.311:442): avc: denied { watch_sb watch_reads } for pid=6567 comm="syz.5.133" path="/7/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.766818][ T30] audit: type=1400 audit(1781356432.171:443): avc: denied { read } for pid=6573 comm="syz.7.135" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.792369][ T30] audit: type=1400 audit(1781356432.171:444): avc: denied { open } for pid=6573 comm="syz.7.135" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.160220][ T30] audit: type=1400 audit(1781356432.171:445): avc: denied { ioctl } for pid=6573 comm="syz.7.135" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.374718][ T30] audit: type=1400 audit(1781356433.751:446): avc: denied { bind } for pid=6576 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.435901][ T30] audit: type=1400 audit(1781356434.791:447): avc: denied { ioctl } for pid=6603 comm="syz.5.143" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.567708][ T30] audit: type=1400 audit(1781356434.791:448): avc: denied { append } for pid=6609 comm="syz.7.146" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.662026][ T30] audit: type=1400 audit(1781356435.021:449): avc: denied { write } for pid=6572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.846883][ T5625] Bluetooth: hci2: Malformed Event: 0x2f [ 132.890655][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905728][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.938546][ T30] audit: type=1400 audit(1781356435.331:450): avc: denied { write } for pid=6627 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.920020][ T6649] overlayfs: workdir and upperdir must reside under the same mount [ 134.720487][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 134.720503][ T30] audit: type=1400 audit(1781356437.121:460): avc: denied { unmount } for pid=6193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.622733][ T30] audit: type=1400 audit(1781356437.981:461): avc: denied { write } for pid=6640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.722020][ T30] audit: type=1400 audit(1781356438.091:462): avc: denied { shutdown } for pid=6680 comm="syz.6.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.773736][ T30] audit: type=1400 audit(1781356438.091:463): avc: denied { name_connect } for pid=6680 comm="syz.6.164" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.850790][ T30] audit: type=1400 audit(1781356438.151:464): avc: denied { setopt } for pid=6681 comm="syz.7.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.870389][ T30] audit: type=1400 audit(1781356438.211:465): avc: denied { write } for pid=6685 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.120697][ T30] audit: type=1400 audit(1781356439.521:466): avc: denied { bind } for pid=6699 comm="syz.5.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.242178][ T30] audit: type=1400 audit(1781356439.521:467): avc: denied { write } for pid=6699 comm="syz.5.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.404349][ T30] audit: type=1400 audit(1781356439.621:468): avc: denied { ioctl } for pid=6688 comm="syz.7.167" path="socket:[13823]" dev="sockfs" ino=13823 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.410349][ T30] audit: type=1400 audit(1781356440.751:469): avc: denied { setopt } for pid=6690 comm="syz.6.168" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.424168][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 243.431187][ C1] rcu: 0-...!: (1 GPs behind) idle=f5f4/1/0x4000000000000000 softirq=23734/23734 fqs=1 [ 243.441646][ C1] rcu: (detected by 1, t=10505 jiffies, g=18573, q=999 ncpus=2) [ 243.449386][ C1] Sending NMI from CPU 1 to CPUs 0: [ 243.449434][ C0] NMI backtrace for cpu 0 [ 243.449462][ C0] CPU: 0 UID: 0 PID: 6712 Comm: syz.3.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.449489][ C0] Tainted: [L]=SOFTLOCKUP [ 243.449496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.449516][ C0] RIP: 0010:lock_is_held_type+0x1e/0x140 [ 243.449556][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 0d 1a bc 4d 05 b8 ff ff ff ff 85 c9 0f 84 ed 00 00 00 65 8b 15 aa 46 80 08 <85> d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 55 53 48 83 ec 08 [ 243.449574][ C0] RSP: 0018:ffffc90000007dd0 EFLAGS: 00000002 [ 243.449589][ C0] RAX: 00000000ffffffff RBX: ffff888054351300 RCX: 0000000000000001 [ 243.449602][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880543512c0 [ 243.449614][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 243.449625][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888054351300 [ 243.449637][ C0] R13: ffff88802bf455f8 R14: dffffc0000000000 R15: ffff8880b8428750 [ 243.449650][ C0] FS: 00007f5fbc21e6c0(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 243.449668][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.449680][ C0] CR2: 00007f0cbc3e8158 CR3: 0000000077ead000 CR4: 00000000003526f0 [ 243.449693][ C0] Call Trace: [ 243.449700][ C0] [ 243.449707][ C0] advance_sched+0x838/0xd20 [ 243.449741][ C0] ? find_held_lock+0x2b/0x80 [ 243.449761][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 243.449792][ C0] ? __pfx_advance_sched+0x10/0x10 [ 243.449819][ C0] __hrtimer_run_queues+0x470/0xa00 [ 243.449848][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.449877][ C0] hrtimer_interrupt+0x3e5/0x940 [ 243.449912][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 243.449940][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 243.449964][ C0] [ 243.449969][ C0] [ 243.449975][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.449997][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 243.450021][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 0e 58 f6 48 89 df e8 ae 5e 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 2a 48 f6 65 8b 05 6e 0d 7d 08 85 c0 74 16 5b [ 243.450037][ C0] RSP: 0018:ffffc900053ff750 EFLAGS: 00000246 [ 243.450051][ C0] RAX: 0000000000000006 RBX: ffff888036080f80 RCX: 0000000000000040 [ 243.450063][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fe0d RDI: ffffffff8c1c4780 [ 243.450075][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 243.450086][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888036080f80 [ 243.450097][ C0] R13: 0000000000000202 R14: 0000000000000001 R15: ffffffff81e1125d [ 243.450109][ C0] ? prepare_to_wait_exclusive+0x9d/0x2c0 [ 243.450139][ C0] prepare_to_wait_exclusive+0xdc/0x2c0 [ 243.450163][ C0] unix_wait_for_peer+0xca/0x2a0 [ 243.450188][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 243.450212][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 243.450234][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.450260][ C0] ? security_unix_may_send+0x76/0x210 [ 243.450292][ C0] unix_dgram_sendmsg+0x1696/0x1810 [ 243.450324][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 243.450352][ C0] ? __might_fault+0xa0/0x140 [ 243.450385][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 243.450405][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 243.450433][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.450457][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.450483][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 243.450505][ C0] ? kfree+0x1dd/0x6c0 [ 243.450531][ C0] ___sys_sendmsg+0x190/0x1e0 [ 243.450555][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.450590][ C0] ? __pfx___might_resched+0x10/0x10 [ 243.450619][ C0] __sys_sendmmsg+0x205/0x430 [ 243.450649][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 243.450682][ C0] ? __pfx_do_futex+0x10/0x10 [ 243.450715][ C0] ? xfd_validate_state+0x129/0x190 [ 243.450740][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 243.450772][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 243.450796][ C0] do_syscall_64+0x115/0x870 [ 243.450820][ C0] ? clear_bhb_loop+0x40/0x90 [ 243.450841][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.450861][ C0] RIP: 0033:0x7f5fbb39ce59 [ 243.450879][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.450896][ C0] RSP: 002b:00007f5fbc21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.450913][ C0] RAX: ffffffffffffffda RBX: 00007f5fbb615fa0 RCX: 00007f5fbb39ce59 [ 243.450926][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 243.450937][ C0] RBP: 00007f5fbb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 243.450948][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.450960][ C0] R13: 00007f5fbb616038 R14: 00007f5fbb615fa0 R15: 00007ffe5a0ab9a8 [ 243.450979][ C0] [ 243.451419][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g18573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 243.944781][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 243.954739][ C1] rcu: RCU grace-period kthread stack dump: [ 243.960612][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 243.974122][ C1] Call Trace: [ 243.977387][ C1] [ 243.980311][ C1] __schedule+0x1295/0x67a0 [ 243.984836][ C1] ? __pfx___schedule+0x10/0x10 [ 243.989682][ C1] ? find_held_lock+0x2b/0x80 [ 243.994350][ C1] ? schedule+0x2bf/0x390 [ 243.998684][ C1] schedule+0xdd/0x390 [ 244.002751][ C1] schedule_timeout+0x127/0x280 [ 244.007610][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 244.012975][ C1] ? __pfx_process_timeout+0x10/0x10 [ 244.018254][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.024059][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 244.029523][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 244.034284][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 244.039565][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 244.045021][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 244.049959][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 244.055244][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.061051][ C1] rcu_gp_kthread+0x179/0x230 [ 244.065722][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 244.070917][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.076726][ C1] ? __kthread_parkme+0x18c/0x230 [ 244.081762][ C1] ? kthread+0x13a/0x450 [ 244.085997][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 244.091189][ C1] kthread+0x370/0x450 [ 244.095252][ C1] ? __pfx_kthread+0x10/0x10 [ 244.099841][ C1] ret_from_fork+0x72b/0xd50 [ 244.104443][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 244.109573][ C1] ? __switch_to+0x800/0x1100 [ 244.114265][ C1] ? __pfx_kthread+0x10/0x10 [ 244.118865][ C1] ret_from_fork_asm+0x1a/0x30 [ 244.123650][ C1] [ 244.126668][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 244.132981][ C1] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 244.143996][ C1] Tainted: [L]=SOFTLOCKUP [ 244.148303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.158529][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 244.165205][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 244.184897][ C1] RSP: 0018:ffffc9000396f618 EFLAGS: 00000293 [ 244.190954][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2dfd [ 244.199001][ C1] RDX: ffff88807e1ca540 RSI: ffffffff81fc2dd7 RDI: ffff88807e1ca540 [ 244.206962][ C1] RBP: ffff8880b8443560 R08: 0000000000000005 R09: 0000000000000000 [ 244.214923][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 244.222882][ C1] R13: ffffed10170886ad R14: 0000000000000001 R15: ffff8880b853c800 [ 244.230849][ C1] FS: 0000555569301500(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 244.239776][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.246352][ C1] CR2: 00007ff8ad3ea2f8 CR3: 000000005b0de000 CR4: 00000000003526f0 [ 244.254329][ C1] Call Trace: [ 244.257597][ C1] [ 244.260521][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 244.265733][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 244.272057][ C1] ? ldt_dup_context+0x1a4/0x300 [ 244.276995][ C1] ? ldt_dup_context+0x1a4/0x300 [ 244.281966][ C1] ? rcu_is_watching+0x12/0xc0 [ 244.286735][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 244.291929][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 244.297044][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 244.302159][ C1] ? dup_mmap+0x12ec/0x21b0 [ 244.306661][ C1] ? dup_mmap+0x12ec/0x21b0 [ 244.311163][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 244.316706][ C1] ? up_write+0x28c/0x4f0 [ 244.321045][ C1] dup_mmap+0x1307/0x21b0 [ 244.325384][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 244.330056][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.335866][ C1] ? __lock_acquire+0x4a5/0x2630 [ 244.340801][ C1] ? find_held_lock+0x2b/0x80 [ 244.345477][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 244.351392][ C1] copy_process+0x6c78/0x7ed0 [ 244.356088][ C1] ? __pfx_copy_process+0x10/0x10 [ 244.361115][ C1] ? do_raw_spin_lock+0x128/0x260 [ 244.366184][ C1] kernel_clone+0x176/0x9e0 [ 244.370691][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 244.375725][ C1] ? __lock_acquire+0x4a5/0x2630 [ 244.380669][ C1] ? find_held_lock+0x2b/0x80 [ 244.385336][ C1] ? __might_fault+0xc5/0x140 [ 244.390017][ C1] __do_sys_clone+0xd9/0x120 [ 244.394611][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 244.399832][ C1] ? rcu_is_watching+0x12/0xc0 [ 244.404605][ C1] do_syscall_64+0x115/0x870 [ 244.409194][ C1] ? clear_bhb_loop+0x40/0x90 [ 244.413891][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.419777][ C1] RIP: 0033:0x7f0cbc1c58d2 [ 244.424181][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 244.443866][ C1] RSP: 002b:00007ffd3fba1b10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 244.452271][ C1] RAX: ffffffffffffffda RBX: 00007ffd3fba1b10 RCX: 00007f0cbc1c58d2 [ 244.460230][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 244.468187][ C1] RBP: 00007ffd3fba1c9c R08: 0000000000000000 R09: 0000000000000001 [ 244.476145][ C1] R10: 00005555693017d0 R11: 0000000000000246 R12: 0000000000000001 [ 244.484104][ C1] R13: 00000000000927c0 R14: 0000000000021b22 R15: 00007ffd3fba1cf0 [ 244.492079][ C1]