last executing test programs: 3m34.286642158s ago: executing program 3 (id=969): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3m33.359228748s ago: executing program 3 (id=984): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_misc(r1, &(0x7f0000000680)="cf", 0x1) sendfile(r0, r1, &(0x7f00000006c0), 0xff) fcntl$addseals(r1, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000700)={0x6, 0xfff, 0x80000000, 0xffff0001, 0x2}) 3m32.566401607s ago: executing program 3 (id=987): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000ac0)={r2, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000b00)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000c40)={r3, 0x5, 0x4000003}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000240)={'vxcan1\x00', 0x5}) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) 3m32.030216601s ago: executing program 4 (id=993): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(&(0x7f0000000300)='./file2\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./file2\x00', &(0x7f0000001680)='logfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newchain={0x40, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0xffffffc0, 0x4) r4 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) semop(r4, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 3m31.597425467s ago: executing program 3 (id=996): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m31.106427309s ago: executing program 4 (id=1001): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000000c0)=ANY=[], 0x18, 0x200400d1}, 0x8860) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000003d40), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3m31.075007763s ago: executing program 1 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000003c0)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 3m29.839815559s ago: executing program 1 (id=1005): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000140)='.\x00', 0x808) inotify_rm_watch(r2, r3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) 3m28.899965785s ago: executing program 3 (id=1007): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r0, 0x401, 0x80, 0x0, 0x0) 3m28.56249769s ago: executing program 3 (id=1009): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={0x0, 0x1f, &(0x7f0000000380)={&(0x7f0000000400)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 3m28.56139204s ago: executing program 4 (id=1010): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001c40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbb03bbbb86dd60f902b500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) 3m28.487513624s ago: executing program 0 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) 3m28.449069007s ago: executing program 4 (id=1013): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x108}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m28.037741827s ago: executing program 1 (id=1014): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1fd) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000980)='./sys\x00', &(0x7f00000009c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='md0\n', 0x4) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000500ac1414bb080009000000000008000800040000000800090001000000080004007f", @ANYRES32=r4, @ANYBLOB="0c0003000400000000"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x20000040) 3m27.710769052s ago: executing program 1 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000500)={0x0, 0xa1ff, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 3m27.710573884s ago: executing program 0 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'lock', ' ', 'none'}, 0xa) 3m27.685335617s ago: executing program 4 (id=1017): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtaction={0x48, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000f80)={&(0x7f0000000fc0), 0x6, &(0x7f0000001000)={&(0x7f0000001040)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000400)="54285893c3b692c3b7ffc03138a6cc5ec8e47490016604f1fcb997b4408ed716a36059e6531db950081a53ef3380be47799392e99d2d209dddf2ae1bcd03351dbd71bc50e7566c9edac20f38dc13", 0x4e}, {0x0}, {&(0x7f00000007c0)="8f6fe7bc2c4205259ea7101549855fb9f52fa79cf637133d6e2d498113faff5c68b32706f25a35735fa8bd9e93e6161bac25d941a8a850a2b88afe07dc66774b6bb86c11073a7b2de757f46cd37e609a869889d827692879d85d4f47ffaa8e5989382dca367d9dbf58703bddab797d66b0d2816a619e7341a912533d5f706e7427b0c962b094b85b09e1ec92d7bd86630b2d0caacc2d44650cd82dd155c0be2ea4b97a5d008319a28d4cd19fac713e74fe4c6158e48c9707b3528f40d9dbb29f3108f242058415934a3944", 0xcb}, {&(0x7f00000008c0)="083164c0379256fe2f70570309fdc9068c10bd8ee05e7bbe90257ba7047dbe5b178dde14bbcad32ffaeb201e25ee8aa32887a2a848febd4ec4aa0f3d98d2662e562e78fd7d2b112ede1c2ec36821f56a5b69024d9ce1126c41abfd0bb75b826c695c7da4c0f1b5c5c387836c08edeeda3ea6763bb884f16678033e6a187ba8ba4d", 0x81}], 0x4) bind$phonet(0xffffffffffffffff, &(0x7f00000003c0)={0x23, 0x1, 0xac, 0x1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000001c0)={0x1}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000a00)={r3}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {&(0x7f0000000240)="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", 0x14e}], 0x2}, 0x0) 3m27.461417895s ago: executing program 1 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./sec\x00', 0x20) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000940)='./sec\x00', &(0x7f0000000980)='securityfs\x00', 0x800000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000bc0)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 3m25.627835281s ago: executing program 0 (id=1020): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r0, 0x401, 0x80, 0x0, 0x0) 3m23.001768392s ago: executing program 1 (id=1021): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3m20.294027407s ago: executing program 4 (id=1022): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r2, 0x0, 0x0, 0x2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 3m15.2499229s ago: executing program 0 (id=1024): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m7.424460157s ago: executing program 32 (id=1009): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={0x0, 0x1f, &(0x7f0000000380)={&(0x7f0000000400)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 3m4.951351856s ago: executing program 0 (id=1026): r0 = syz_open_dev$video4linux(0x0, 0x7, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000a00)={0x0, 0x0, '\x00', @bt={0x25133553, 0x4, 0xf, 0xffffffff, 0x2, 0x396f}}) 3m3.377472064s ago: executing program 33 (id=1021): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3m2.096587354s ago: executing program 34 (id=1022): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r2, 0x0, 0x0, 0x2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 3m1.355324778s ago: executing program 0 (id=1030): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x602, 0x0) mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="93d90410000300", 0x7}], 0x1) 2m41.981290195s ago: executing program 35 (id=1030): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x602, 0x0) mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="93d90410000300", 0x7}], 0x1) 41.104246439s ago: executing program 2 (id=1048): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x1001}, 0xe) 36.423561909s ago: executing program 2 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/3222], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500), 0x10}, 0x94) 31.829647899s ago: executing program 2 (id=1050): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x6d90}, {0x6, 0x80, 0xfd}]}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = epoll_create1(0x80000) fremovexattr(r2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x10004004, &(0x7f0000000440)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) 26.802974095s ago: executing program 2 (id=1051): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xd, 0x5, &(0x7f0000000540)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000580)='GPL\x00'}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/regulator/regulator_summary\x00', 0x802, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000026c0), 0x40e02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000002700)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES32], 0x0) sendmsg$nl_route(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000002800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000002840)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000028c0)=0x7, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002a80)={0x0, 0x1e5, &(0x7f0000002ac0)={&(0x7f0000002b00)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) write$rfkill(r2, &(0x7f0000002b40)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="9faa000000000000711010000000000095"], 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r9, &(0x7f0000000400), &(0x7f0000000440)=""/42}, 0x20) sendfile(r1, r7, 0x0, 0x20000000000002) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) mmap$IORING_OFF_PBUF_RING(0x0, 0xffffffff, 0x1000000, 0x8010, r0, 0x8036a4fe) 18.821626822s ago: executing program 2 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b4000000003140000001100"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x3) 15.750036127s ago: executing program 2 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) unshare(0x62020600) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000007c0)={r2, 0xffff9047, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000800)={r2, 0xffff9047, 0x2, r2}) 0s ago: executing program 36 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) unshare(0x62020600) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000007c0)={r2, 0xffff9047, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000800)={r2, 0xffff9047, 0x2, r2}) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.907134][ T5643] veth0_macvtap: entered promiscuous mode [ 69.909403][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.960802][ T5643] veth1_macvtap: entered promiscuous mode [ 69.990065][ T4133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.990423][ T4133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.990916][ T4133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.991098][ T4133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.993248][ T5626] veth0_vlan: entered promiscuous mode [ 70.080270][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.082135][ T5626] veth1_vlan: entered promiscuous mode [ 70.110309][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.128785][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.131946][ T30] audit: type=1400 audit(1793190592.435:165): avc: denied { mounton } for pid=5625 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 70.199383][ T5625] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.220839][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.220854][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.264435][ T5626] veth0_macvtap: entered promiscuous mode [ 70.297268][ T5626] veth1_macvtap: entered promiscuous mode [ 70.320310][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.320328][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.350958][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351133][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351166][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351197][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.352129][ T5635] veth0_vlan: entered promiscuous mode [ 70.413305][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.416440][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.416456][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.422178][ T5635] veth1_vlan: entered promiscuous mode [ 70.444830][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.530969][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.532694][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.532732][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.532745][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.532900][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.538257][ T4946] Bluetooth: hci1: command tx timeout [ 70.617956][ T53] Bluetooth: hci0: command tx timeout [ 70.618025][ T4946] Bluetooth: hci2: command tx timeout [ 70.628746][ T5635] veth0_macvtap: entered promiscuous mode [ 70.672273][ T5635] veth1_macvtap: entered promiscuous mode [ 70.733073][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.733093][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.740733][ T4231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.760644][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.780286][ T4946] Bluetooth: hci3: command tx timeout [ 70.780296][ T53] Bluetooth: hci4: command tx timeout [ 70.795390][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.834778][ T5830] tipc: Started in network mode [ 70.834802][ T5830] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 70.835128][ T5830] tipc: Enabled bearer , priority 0 [ 70.838211][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.838225][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.898829][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.898869][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.898901][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.898933][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.129210][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.129230][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.214706][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.214724][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.664615][ T5853] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.973761][ T29] tipc: Node number set to 43690 [ 72.363404][ T5865] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure [ 72.619852][ T53] Bluetooth: hci1: command tx timeout [ 72.699322][ T4946] Bluetooth: hci0: command tx timeout [ 72.699363][ T53] Bluetooth: hci2: command tx timeout [ 72.889097][ T53] Bluetooth: hci3: command tx timeout [ 72.889127][ T53] Bluetooth: hci4: command tx timeout [ 73.841725][ T5868] syzkaller0: entered promiscuous mode [ 73.842001][ T5868] syzkaller0: entered allmulticast mode [ 74.134610][ T5884] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17'. [ 74.303988][ T5889] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21'. [ 74.309791][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.309911][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310004][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310319][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310412][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310504][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310731][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310823][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.310914][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 74.311148][ T5889] Dead loop on virtual device lo (net 38), fix it urgently! [ 75.143295][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.167431][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.188434][ T5884] bond0 (unregistering): Released all slaves [ 75.224519][ T5882] infiniband syz1: ib_query_port failed (-19) [ 75.224596][ T5882] infiniband syz1: Couldn't set up InfiniBand P_Key/GID cache [ 75.224609][ T5882] siw: device registration error -19 [ 75.266690][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 75.266707][ T30] audit: type=1400 audit(1793190597.565:208): avc: denied { create } for pid=5895 comm="syz.0.25" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.270866][ T30] audit: type=1400 audit(1793190597.575:209): avc: denied { unmount } for pid=5639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.289461][ T30] audit: type=1400 audit(1793190597.575:210): avc: denied { write } for pid=5895 comm="syz.0.25" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.289741][ T30] audit: type=1400 audit(1793190597.575:211): avc: denied { open } for pid=5895 comm="syz.0.25" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.294259][ T30] audit: type=1400 audit(1793190597.575:212): avc: denied { ioctl } for pid=5896 comm="syz.2.24" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8847 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.313344][ T30] audit: type=1400 audit(1793190597.605:213): avc: denied { setopt } for pid=5896 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.345373][ T30] audit: type=1400 audit(1793190597.645:214): avc: denied { ioctl } for pid=5896 comm="syz.2.24" path="socket:[8850]" dev="sockfs" ino=8850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.472767][ T30] audit: type=1400 audit(1793190597.775:215): avc: denied { ioctl } for pid=5902 comm="syz.4.28" path="socket:[8866]" dev="sockfs" ino=8866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.475347][ T30] audit: type=1400 audit(1793190597.775:216): avc: denied { setopt } for pid=5902 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.475827][ T30] audit: type=1400 audit(1793190597.775:217): avc: denied { create } for pid=5903 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.928484][ T5914] FAULT_INJECTION: forcing a failure. [ 75.928484][ T5914] name failslab, interval 1, probability 0, space 0, times 1 [ 75.928514][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 75.928537][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 75.928549][ T5914] Call Trace: [ 75.928556][ T5914] [ 75.928564][ T5914] dump_stack_lvl+0x100/0x190 [ 75.928602][ T5914] should_fail_ex.cold+0x5/0xa [ 75.928634][ T5914] should_failslab+0xc2/0x120 [ 75.928656][ T5914] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 75.928687][ T5914] ? __alloc_skb+0x140/0x710 [ 75.928712][ T5914] __alloc_skb+0x140/0x710 [ 75.928729][ T5914] ? __alloc_skb+0x5b7/0x710 [ 75.928748][ T5914] ? __pfx___alloc_skb+0x10/0x10 [ 75.928770][ T5914] ? __mutex_lock+0x267/0x1c10 [ 75.928792][ T5914] netlink_dump+0x194/0xd00 [ 75.928816][ T5914] ? __pfx___mutex_lock+0x10/0x10 [ 75.928834][ T5914] ? __pfx_netlink_dump+0x10/0x10 [ 75.928871][ T5914] __netlink_dump_start+0x6d6/0x990 [ 75.928896][ T5914] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 75.928919][ T5914] rtnetlink_rcv_msg+0xb3e/0xe90 [ 75.928944][ T5914] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 75.928967][ T5914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.928992][ T5914] ? __pfx_rtnl_dumpit+0x10/0x10 [ 75.929022][ T5914] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 75.929053][ T5914] netlink_rcv_skb+0x159/0x420 [ 75.929076][ T5914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.929102][ T5914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.929123][ T5914] ? __asan_memcpy+0x3c/0x60 [ 75.929165][ T5914] ? netlink_deliver_tap+0x1ae/0xb50 [ 75.929192][ T5914] netlink_unicast+0x668/0x950 [ 75.929219][ T5914] ? __pfx_netlink_unicast+0x10/0x10 [ 75.929251][ T5914] netlink_sendmsg+0x9ac/0x10c0 [ 75.929283][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.929312][ T5914] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.929343][ T5914] ? ____sys_sendmsg+0xa99/0xc30 [ 75.929368][ T5914] ____sys_sendmsg+0xa99/0xc30 [ 75.929392][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.929417][ T5914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.929456][ T5914] ___sys_sendmsg+0x190/0x1e0 [ 75.929485][ T5914] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.929513][ T5914] ? futex_wait+0x11e/0x370 [ 75.929550][ T5914] ? find_held_lock+0x2b/0x80 [ 75.929589][ T5914] __sys_sendmsg+0x160/0x210 [ 75.929612][ T5914] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.929647][ T5914] do_syscall_64+0x123/0x790 [ 75.929681][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.929702][ T5914] RIP: 0033:0x7fe522f9f559 [ 75.929720][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.929738][ T5914] RSP: 002b:00007fe523f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.929758][ T5914] RAX: ffffffffffffffda RBX: 00007fe523225fa0 RCX: 00007fe522f9f559 [ 75.929771][ T5914] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 75.929783][ T5914] RBP: 00007fe523036b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.929796][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.929808][ T5914] R13: 00007fe523226038 R14: 00007fe523225fa0 R15: 00007ffcc21f21b8 [ 75.929836][ T5914] [ 75.931605][ T5914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25704 sclass=netlink_route_socket pid=5914 comm=syz.2.32 [ 75.931871][ T5914] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 76.617240][ T5918] Illegal XDP return value 3575068509 on prog (id 6) dev N/A, expect packet loss! [ 76.891921][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 77.609744][ T1103] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 77.755597][ T5713] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.491874][ T5989] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.491979][ T5989] block device autoloading is deprecated and will be removed. [ 78.538926][ T5989] loop5: detected capacity change from 0 to 7 [ 78.565410][ T5953] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.574246][ T5953] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.574617][ T5953] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.574943][ T5953] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.575310][ T5953] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.537997][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 80.538029][ T30] audit: type=1400 audit(1793190602.755:262): avc: denied { bind } for pid=6032 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.538229][ T30] audit: type=1400 audit(1793190602.755:263): avc: denied { node_bind } for pid=6032 comm="syz.1.72" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 80.559591][ T5946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.648975][ T30] audit: type=1400 audit(1793190602.945:264): avc: denied { unmount } for pid=5635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.848314][ T6047] tipc: Started in network mode [ 80.848335][ T6047] tipc: Node identity 4, cluster identity 4711 [ 80.848346][ T6047] tipc: Node number set to 4 [ 80.883957][ T30] audit: type=1400 audit(1793190603.185:265): avc: denied { ioctl } for pid=6048 comm="syz.2.77" path="socket:[9389]" dev="sockfs" ino=9389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.054161][ T6037] nvme nvme0: rdma connection establishment failed (-512) [ 81.207833][ T30] audit: type=1400 audit(1793190603.425:266): avc: denied { create } for pid=6048 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.555455][ T1229] cfg80211: failed to load regulatory.db [ 81.577710][ T30] audit: type=1400 audit(1793190603.875:267): avc: denied { read write } for pid=6057 comm="syz.1.80" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.577960][ T30] audit: type=1400 audit(1793190603.875:268): avc: denied { open } for pid=6057 comm="syz.1.80" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.655104][ T30] audit: type=1400 audit(1793190603.955:269): avc: denied { read } for pid=6060 comm="syz.4.81" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.682438][ T30] audit: type=1400 audit(1793190603.985:270): avc: denied { open } for pid=6060 comm="syz.4.81" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.696825][ T30] audit: type=1400 audit(1793190603.995:271): avc: denied { ioctl } for pid=6060 comm="syz.4.81" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.895413][ T6072] FAULT_INJECTION: forcing a failure. [ 81.895413][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 81.895441][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT(full) [ 81.895463][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 81.895474][ T6072] Call Trace: [ 81.895480][ T6072] [ 81.895488][ T6072] dump_stack_lvl+0x100/0x190 [ 81.895525][ T6072] should_fail_ex.cold+0x5/0xa [ 81.895562][ T6072] should_failslab+0xc2/0x120 [ 81.895584][ T6072] __kmalloc_noprof+0xfc/0x840 [ 81.895615][ T6072] ? lsm_blob_alloc+0x68/0x90 [ 81.895644][ T6072] lsm_blob_alloc+0x68/0x90 [ 81.895666][ T6072] security_prepare_creds+0x2d/0x290 [ 81.895690][ T6072] prepare_creds+0x5d6/0x950 [ 81.895718][ T6072] __do_sys_landlock_restrict_self+0xd2/0x10a0 [ 81.895759][ T6072] do_syscall_64+0x123/0x790 [ 81.895793][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.895814][ T6072] RIP: 0033:0x7fe522f9f559 [ 81.895830][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.895849][ T6072] RSP: 002b:00007fe523f1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 81.895869][ T6072] RAX: ffffffffffffffda RBX: 00007fe523225fa0 RCX: 00007fe522f9f559 [ 81.895882][ T6072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 81.895894][ T6072] RBP: 00007fe523036b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.895905][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.895917][ T6072] R13: 00007fe523226038 R14: 00007fe523225fa0 R15: 00007ffcc21f21b8 [ 81.895945][ T6072] [ 83.196143][ T6100] syz.3.95 (6100): /proc/6099/oom_adj is deprecated, please use /proc/6099/oom_score_adj instead. [ 83.251745][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 83.454357][ T6088] nvme nvme0: rdma connection establishment failed (-512) [ 84.685327][ T6133] Zero length message leads to an empty skb [ 85.522210][ T6143] Cannot find add_set index 0 as target [ 85.793862][ T62] nvmet: connect request for invalid subsystem t! [ 85.794783][ T6151] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 85.816598][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 85.816613][ T30] audit: type=1400 audit(1793190608.115:300): avc: denied { setopt } for pid=6162 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.817204][ T30] audit: type=1400 audit(1793190608.115:301): avc: denied { bind } for pid=6162 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.817534][ T30] audit: type=1400 audit(1793190608.115:302): avc: denied { node_bind } for pid=6162 comm="syz.0.119" src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 85.826282][ T30] audit: type=1400 audit(1793190608.125:303): avc: denied { listen } for pid=6162 comm="syz.0.119" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.308322][ T30] audit: type=1400 audit(1793190610.555:304): avc: denied { map } for pid=6216 comm="syz.1.139" path="socket:[10459]" dev="sockfs" ino=10459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 88.980453][ T30] audit: type=1400 audit(1793190611.285:305): avc: denied { execute } for pid=6222 comm="syz.2.141" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.108341][ T30] audit: type=1400 audit(1793190613.415:306): avc: denied { connect } for pid=6260 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.255572][ T30] audit: type=1400 audit(1793190613.555:307): avc: denied { ioctl } for pid=6267 comm="syz.4.159" path="/28/md0" dev="tmpfs" ino=162 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.343659][ T30] audit: type=1400 audit(1793190613.635:308): avc: denied { write } for pid=6271 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.343706][ T30] audit: type=1400 audit(1793190613.645:309): avc: denied { read } for pid=6271 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.455506][ T6275] md/raid:md4: device ram8 operational as raid disk 0 [ 91.536155][ T6275] md/raid:md4: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 91.569321][ T6275] md4: detected capacity change from 0 to 4096 [ 91.588277][ T6268] md: invalid raid superblock magic on ram9 [ 91.588301][ T6268] md: ram9 does not have a valid v0.90 superblock, not importing! [ 91.588357][ T6268] md: md_import_device returned -22 [ 91.658090][ T30] audit: type=1400 audit(1793190613.955:310): avc: denied { write } for pid=6286 comm="syz.2.165" name="instances" dev="tracefs" ino=3724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.658151][ T30] audit: type=1400 audit(1793190613.955:311): avc: denied { add_name } for pid=6286 comm="syz.2.165" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.667447][ T30] audit: type=1400 audit(1793190613.965:312): avc: denied { create } for pid=6286 comm="syz.2.165" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 91.988906][ T6268] md4: detected capacity change from 4096 to 0 [ 91.988929][ T6268] md: md4 stopped. [ 92.071966][ T30] audit: type=1400 audit(1793190614.375:313): avc: denied { name_bind } for pid=6298 comm="syz.3.171" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.074812][ T30] audit: type=1400 audit(1793190614.375:314): avc: denied { write } for pid=6298 comm="syz.3.171" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.278289][ T30] audit: type=1400 audit(1793190614.585:315): avc: denied { create } for pid=6302 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.337648][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 92.599958][ T6315] bridge_slave_0: left allmulticast mode [ 92.599984][ T6315] bridge_slave_0: left promiscuous mode [ 92.601155][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.621570][ T6315] bridge_slave_1: left allmulticast mode [ 92.621592][ T6315] bridge_slave_1: left promiscuous mode [ 92.621729][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.643247][ T6317] netlink: 'syz.3.179': attribute type 39 has an invalid length. [ 92.682353][ T6315] bond0: (slave bond_slave_0): Releasing backup interface [ 92.712761][ T6315] bond0: (slave bond_slave_1): Releasing backup interface [ 92.737270][ T6315] team0: Port device team_slave_0 removed [ 92.751956][ T6315] team0: Port device team_slave_1 removed [ 92.757186][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.757282][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.805483][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.805503][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.069040][ T6315] net_ratelimit: 41 callbacks suppressed [ 93.069074][ T6315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.347530][ T6318] team0: Mode changed to "loadbalance" [ 93.404307][ T6321] vlan0: entered promiscuous mode [ 93.439713][ T6321] team0: Port device vlan0 added [ 93.450046][ T6328] tipc: Enabled bearer , priority 0 [ 93.754677][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 93.768421][ T6344] FAULT_INJECTION: forcing a failure. [ 93.768421][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 93.768451][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 93.768476][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 93.768489][ T6344] Call Trace: [ 93.768496][ T6344] [ 93.768503][ T6344] dump_stack_lvl+0x100/0x190 [ 93.768540][ T6344] should_fail_ex.cold+0x5/0xa [ 93.768572][ T6344] should_failslab+0xc2/0x120 [ 93.768594][ T6344] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 93.768628][ T6344] ? __kthread_create_on_node+0x186/0x3f0 [ 93.768662][ T6344] kvasprintf+0xbc/0x150 [ 93.768686][ T6344] ? __pfx_kvasprintf+0x10/0x10 [ 93.768716][ T6344] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 93.768743][ T6344] ? __kthread_create_on_node+0xce/0x3f0 [ 93.768779][ T6344] ? __pfx_rescuer_thread+0x10/0x10 [ 93.768801][ T6344] __kthread_create_on_node+0x186/0x3f0 [ 93.768832][ T6344] ? __pfx___kthread_create_on_node+0x10/0x10 [ 93.768871][ T6344] ? __pfx_vsnprintf+0x10/0x10 [ 93.768905][ T6344] ? __pfx_rescuer_thread+0x10/0x10 [ 93.768928][ T6344] kthread_create_on_node+0xc7/0x100 [ 93.768956][ T6344] ? __pfx_kthread_create_on_node+0x10/0x10 [ 93.768983][ T6344] ? __pfx_scnprintf+0x10/0x10 [ 93.769015][ T6344] ? __kmalloc_cache_node_noprof+0x30c/0x710 [ 93.769045][ T6344] ? init_rescuer+0x19f/0x550 [ 93.769066][ T6344] init_rescuer+0x321/0x550 [ 93.769084][ T6344] ? __pfx_init_rescuer+0x10/0x10 [ 93.769103][ T6344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.769139][ T6344] ? __alloc_workqueue+0xdea/0x1900 [ 93.769169][ T6344] ? kfree+0x22b/0x6d0 [ 93.769197][ T6344] __alloc_workqueue+0xf81/0x1900 [ 93.769238][ T6344] alloc_workqueue_noprof+0xc7/0x130 [ 93.769268][ T6344] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 93.769304][ T6344] ? __pfx___debug_object_init+0x10/0x10 [ 93.769340][ T6344] nci_register_device+0x511/0xb80 [ 93.769369][ T6344] ? __pfx_nci_register_device+0x10/0x10 [ 93.769400][ T6344] ? lockdep_init_map_type+0x5c/0x250 [ 93.769435][ T6344] virtual_ncidev_open+0x141/0x220 [ 93.769464][ T6344] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 93.769491][ T6344] misc_open+0x26d/0x450 [ 93.769519][ T6344] ? __pfx_misc_open+0x10/0x10 [ 93.769545][ T6344] chrdev_open+0x234/0x6a0 [ 93.769570][ T6344] ? __pfx_chrdev_open+0x10/0x10 [ 93.769593][ T6344] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 93.769629][ T6344] do_dentry_open+0x674/0x1470 [ 93.769649][ T6344] ? __pfx_chrdev_open+0x10/0x10 [ 93.769676][ T6344] vfs_open_consume+0xcc/0x460 [ 93.769716][ T6344] path_openat+0x1547/0x23f0 [ 93.769746][ T6344] ? __pfx_path_openat+0x10/0x10 [ 93.769779][ T6344] do_file_open+0x20e/0x430 [ 93.769807][ T6344] ? __pfx_do_file_open+0x10/0x10 [ 93.769856][ T6344] ? _raw_spin_unlock+0x28/0x50 [ 93.769883][ T6344] ? alloc_fd+0x471/0x7a0 [ 93.769917][ T6344] do_sys_openat2+0x163/0x1d0 [ 93.769943][ T6344] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.769981][ T6344] __x64_sys_openat+0x12d/0x210 [ 93.770007][ T6344] ? __pfx___x64_sys_openat+0x10/0x10 [ 93.770043][ T6344] do_syscall_64+0x123/0x790 [ 93.770073][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.770094][ T6344] RIP: 0033:0x7fc6d099f559 [ 93.770112][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.770131][ T6344] RSP: 002b:00007fc6d17dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.770152][ T6344] RAX: ffffffffffffffda RBX: 00007fc6d0c25fa0 RCX: 00007fc6d099f559 [ 93.770165][ T6344] RDX: 0000000000000002 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 93.770178][ T6344] RBP: 00007fc6d0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.770190][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.770201][ T6344] R13: 00007fc6d0c26038 R14: 00007fc6d0c25fa0 R15: 00007ffdf3539ac8 [ 93.770232][ T6344] [ 93.770318][ T6344] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 94.055113][ T6350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.245293][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 94.332566][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 94.349938][ T6367] bridge_slave_0: left allmulticast mode [ 94.349968][ T6367] bridge_slave_0: left promiscuous mode [ 94.351554][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.392646][ T6367] bridge_slave_1: left allmulticast mode [ 94.392671][ T6367] bridge_slave_1: left promiscuous mode [ 94.392833][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.432919][ T6367] bond0: (slave bond_slave_0): Releasing backup interface [ 94.458945][ T6367] bond0: (slave bond_slave_1): Releasing backup interface [ 94.459636][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 94.462483][ T6373] netlink: 25 bytes leftover after parsing attributes in process `syz.4.197'. [ 94.492484][ T6367] team0: Port device team_slave_0 removed [ 94.506058][ T6367] team0: Port device team_slave_1 removed [ 94.511652][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.511673][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.517421][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.517438][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.529032][ T6367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.573117][ T6369] team0: Mode changed to "loadbalance" [ 94.593216][ T6371] vlan0: entered promiscuous mode [ 94.613602][ T6371] team0: Port device vlan0 added [ 94.616059][ T6373] eql: entered promiscuous mode [ 94.616491][ T6376] tipc: Started in network mode [ 94.616517][ T6376] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 94.616626][ T6376] tipc: Enabled bearer , priority 0 [ 94.657402][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 94.780236][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 94.858824][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 94.921202][ T6357] nvme nvme0: rdma connection establishment failed (-512) [ 95.881346][ T10] tipc: Node number set to 11578026 [ 96.432517][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.432540][ T30] audit: type=1400 audit(1793190618.735:325): avc: denied { read } for pid=6406 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.625791][ T6420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.882478][ T6456] process 'syz.3.220' launched '/dev/fd/8' with NULL argv: empty string added [ 97.940398][ T30] audit: type=1400 audit(1793190620.185:326): avc: denied { execute } for pid=6440 comm="syz.3.220" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.940570][ T30] audit: type=1400 audit(1793190620.185:327): avc: denied { execute_no_trans } for pid=6440 comm="syz.3.220" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.473442][ T30] audit: type=1400 audit(1793190620.775:328): avc: denied { create } for pid=6460 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.323003][ T30] audit: type=1400 audit(1793190621.625:329): avc: denied { mount } for pid=6462 comm="syz.2.227" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.327787][ T30] audit: type=1400 audit(1793190621.625:330): avc: denied { map } for pid=6462 comm="syz.2.227" path="/46/dev/sda" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.594319][ T30] audit: type=1400 audit(1793190621.895:331): avc: denied { unmount } for pid=5643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.244232][ T6508] nvme nvme0: rdma connection establishment failed (-512) [ 100.890988][ T6508] nvme nvme0: rdma connection establishment failed (-512) [ 101.131344][ T30] audit: type=1400 audit(1793190623.435:332): avc: denied { write } for pid=6530 comm="syz.3.250" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.133490][ T6531] deleting an unspecified loop device is not supported. [ 101.173563][ T6508] nvme nvme0: rdma connection establishment failed (-512) [ 103.063556][ T30] audit: type=1400 audit(1793190625.365:333): avc: denied { mount } for pid=6600 comm="syz.3.281" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.064075][ T30] audit: type=1400 audit(1793190625.365:334): avc: denied { search } for pid=6600 comm="syz.3.281" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.064200][ T30] audit: type=1400 audit(1793190625.365:335): avc: denied { search } for pid=6600 comm="syz.3.281" name="nvmet" dev="configfs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.064333][ T30] audit: type=1400 audit(1793190625.365:336): avc: denied { search } for pid=6600 comm="syz.3.281" name="subsystems" dev="configfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.066317][ T30] audit: type=1400 audit(1793190625.365:337): avc: denied { write search } for pid=6600 comm="syz.3.281" name="subsystems" dev="configfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.066750][ T30] audit: type=1400 audit(1793190625.365:338): avc: denied { add_name } for pid=6600 comm="syz.3.281" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.066984][ T30] audit: type=1400 audit(1793190625.365:339): avc: denied { create } for pid=6600 comm="syz.3.281" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 103.111264][ T6606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.111284][ T6606] block device autoloading is deprecated and will be removed. [ 103.119084][ T30] audit: type=1400 audit(1793190625.375:340): avc: denied { search } for pid=6600 comm="syz.3.281" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.119130][ T30] audit: type=1400 audit(1793190625.375:341): avc: denied { search } for pid=6600 comm="syz.3.281" name="nvmet" dev="configfs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.119165][ T30] audit: type=1400 audit(1793190625.375:342): avc: denied { search } for pid=6600 comm="syz.3.281" name="subsystems" dev="configfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.130911][ T6601] null_blk: disk nullb1 created [ 103.150477][ T6601] nvmet: adding nsid 1 to subsystem testsubsys [ 103.321300][ T6610] md: md1 stopped. [ 103.348158][ T6608] md: could not open device unknown-block(1,2). [ 103.348212][ T6608] md: md_import_device returned -16 [ 103.388258][ T6606] md: invalid raid superblock magic on ram3 [ 103.388275][ T6606] md: ram3 does not have a valid v0.90 superblock, not importing! [ 103.388391][ T6606] md: md_import_device returned -22 [ 103.984402][ T6634] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.961718][ T6670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.253307][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 108.253324][ T30] audit: type=1400 audit(1793190630.555:379): avc: denied { read } for pid=6707 comm="syz.4.317" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.253886][ T30] audit: type=1400 audit(1793190630.555:380): avc: denied { open } for pid=6707 comm="syz.4.317" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.254810][ T30] audit: type=1400 audit(1793190630.555:381): avc: denied { ioctl } for pid=6707 comm="syz.4.317" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x40047438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.753728][ T30] audit: type=1400 audit(1793190631.055:382): avc: denied { read write } for pid=6719 comm="syz.4.321" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 108.754375][ T30] audit: type=1400 audit(1793190631.055:383): avc: denied { open } for pid=6719 comm="syz.4.321" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 108.763775][ T6720] UHID_CREATE from different security context by process 161 (syz.4.321), this is not allowed. [ 108.770447][ T6711] md/raid:md0: device ram1 operational as raid disk 1 [ 108.770465][ T6711] md/raid:md0: device ram0 operational as raid disk 0 [ 108.873332][ T6711] md/raid:md0: raid level 5 active with 2 out of 2 devices, algorithm 2 [ 108.909903][ T6711] md0: detected capacity change from 0 to 4096 [ 108.983765][ T6724] netlink: 68 bytes leftover after parsing attributes in process `syz.1.322'. [ 109.152672][ T6712] md0: detected capacity change from 4096 to 0 [ 109.152694][ T6712] md: md0 stopped. [ 110.408801][ T30] audit: type=1400 audit(1793190632.545:384): avc: denied { ioctl } for pid=6766 comm="syz.2.331" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 ioctlcmd=0x403c6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.473422][ T6773] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.473462][ T6773] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.473500][ T6773] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.474620][ T30] audit: type=1400 audit(1793190632.775:385): avc: denied { connect } for pid=6775 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.645772][ T6781] netlink: 14 bytes leftover after parsing attributes in process `syz.1.334'. [ 110.943275][ T988] hid-generic 0005:15C2:8000.0001: unknown main item tag 0x4 [ 110.948923][ T988] hid-generic 0005:15C2:8000.0001: item fetching failed at offset 5/20 [ 111.005054][ T988] hid-generic 0005:15C2:8000.0001: probe with driver hid-generic failed with error -22 [ 111.180212][ T6781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.211359][ T6781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.233655][ T6781] bond0 (unregistering): Released all slaves [ 111.274588][ T2324] infiniband syz1: ib_query_port failed (-19) [ 111.314551][ T12] smbdirect: ib_dev[syz1] removed [ 111.329016][ T6773] siw: device registration error -19 [ 111.594223][ T6801] tipc: Enabled bearer , priority 0 [ 112.706822][ T6821] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 112.706860][ T6821] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 112.706901][ T6821] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 112.812465][ T6821] netlink: 14 bytes leftover after parsing attributes in process `syz.3.352'. [ 112.911706][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.918804][ T62] smbdirect: ib_dev[syz1] removed [ 113.476779][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.494331][ T6821] bond0 (unregistering): Released all slaves [ 113.727250][ T6819] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.727271][ T6819] block device autoloading is deprecated and will be removed. [ 114.050052][ T30] audit: type=1400 audit(1793190636.355:386): avc: denied { unmount } for pid=5639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 114.105429][ T30] audit: type=1400 audit(1793190636.405:387): avc: denied { read } for pid=6859 comm="syz.3.369" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.131860][ T30] audit: type=1400 audit(1793190636.435:388): avc: denied { open } for pid=6859 comm="syz.3.369" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.159109][ T30] audit: type=1400 audit(1793190636.465:389): avc: denied { ioctl } for pid=6859 comm="syz.3.369" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x4018920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.185325][ T30] audit: type=1400 audit(1793190636.495:390): avc: denied { create } for pid=6859 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.196512][ T30] audit: type=1400 audit(1793190636.495:391): avc: denied { ioctl } for pid=6863 comm="syz.2.370" path="socket:[12479]" dev="sockfs" ino=12479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.196974][ T30] audit: type=1400 audit(1793190636.495:392): avc: denied { write } for pid=6863 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.207132][ T30] audit: type=1400 audit(1793190636.515:393): avc: denied { read } for pid=6859 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.280132][ T30] audit: type=1400 audit(1793190636.585:394): avc: denied { connect } for pid=6865 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.283846][ T30] audit: type=1400 audit(1793190636.585:395): avc: denied { getopt } for pid=6865 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.102435][ T6949] syzkaller1: entered promiscuous mode [ 117.102457][ T6949] syzkaller1: entered allmulticast mode [ 117.326618][ T6966] bridge_slave_0: left allmulticast mode [ 117.326645][ T6966] bridge_slave_0: left promiscuous mode [ 117.342386][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.356778][ T6966] bridge_slave_1: left allmulticast mode [ 117.356801][ T6966] bridge_slave_1: left promiscuous mode [ 117.356970][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.394392][ T6966] team0: Port device team_slave_0 removed [ 117.407181][ T6966] team0: Port device team_slave_1 removed [ 117.414558][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.414578][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.435296][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.435316][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.437236][ T6966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.437901][ T6971] vlan0: entered promiscuous mode [ 117.458378][ T6971] team0: Port device vlan0 added [ 117.463991][ T6973] tipc: Started in network mode [ 117.464013][ T6973] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 117.464116][ T6973] tipc: Enabled bearer , priority 0 [ 118.467308][ T5714] tipc: Node number set to 11578026 [ 119.194943][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 119.638545][ T7027] ======================================================= [ 119.638545][ T7027] WARNING: The mand mount option has been deprecated and [ 119.638545][ T7027] and is ignored by this kernel. Remove the mand [ 119.638545][ T7027] option from the mount to silence this warning. [ 119.638545][ T7027] ======================================================= [ 119.644095][ T7027] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.791224][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 119.791257][ T30] audit: type=1400 audit(1793190641.943:400): avc: denied { mounton } for pid=7022 comm="syz.0.440" path="/71/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 119.791373][ T30] audit: type=1400 audit(1793190641.943:401): avc: denied { mount } for pid=7022 comm="syz.0.440" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.436881][ T30] audit: type=1400 audit(1793190642.733:402): avc: denied { bind } for pid=7034 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.438798][ T30] audit: type=1400 audit(1793190642.733:403): avc: denied { listen } for pid=7034 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.890457][ T7057] tipc: Started in network mode [ 120.890477][ T7057] tipc: Node identity 4, cluster identity 4711 [ 120.890489][ T7057] tipc: Node number set to 4 [ 120.891944][ T7057] tipc: Enabled bearer , priority 0 [ 121.020477][ T30] audit: type=1400 audit(1793190643.313:404): avc: denied { execute } for pid=7051 comm="syz.2.452" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.020652][ T30] audit: type=1400 audit(1793190643.313:405): avc: denied { execute_no_trans } for pid=7051 comm="syz.2.452" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.761829][ T7084] tipc: Enabling of bearer rejected, already enabled [ 122.178084][ T7094] nvme nvme0: rdma connection establishment failed (-512) [ 122.343638][ T7094] nvme nvme0: rdma connection establishment failed (-512) [ 122.369172][ T30] audit: type=1400 audit(1793190644.673:406): avc: denied { create } for pid=7111 comm="syz.4.474" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.380141][ T7112] fuse: Bad value for 'fd' [ 122.381027][ T30] audit: type=1400 audit(1793190644.683:407): avc: denied { mounton } for pid=7111 comm="syz.4.474" path="/93/file0" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.384117][ T30] audit: type=1400 audit(1793190644.683:408): avc: denied { setattr } for pid=7111 comm="syz.4.474" name="file0" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.432028][ T30] audit: type=1400 audit(1793190644.733:409): avc: denied { unlink } for pid=5626 comm="syz-executor" name="file0" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.490334][ T7094] nvme nvme0: rdma connection establishment failed (-512) [ 122.657998][ T7128] tipc: Enabled bearer , priority 0 [ 122.718079][ T7094] nvme nvme0: rdma connection establishment failed (-512) [ 122.757065][ T7094] nvme nvme0: rdma connection establishment failed (-512) [ 123.672915][ T7148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.714968][ T7144] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.825873][ T43] tipc: Resetting bearer [ 123.832834][ T7148] tipc: Enabling of bearer rejected, already enabled [ 123.924469][ T7160] tipc: Enabling of bearer rejected, already enabled [ 125.193067][ T30] audit: type=1400 audit(1793190647.493:410): avc: denied { create } for pid=7192 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.221622][ T30] audit: type=1400 audit(1793190647.523:411): avc: denied { read } for pid=7192 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.274160][ T30] audit: type=1400 audit(1793190647.573:412): avc: denied { setopt } for pid=7192 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.274614][ T30] audit: type=1400 audit(1793190647.573:413): avc: denied { write } for pid=7192 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.951743][ T30] audit: type=1400 audit(1793190649.253:414): avc: denied { create } for pid=7232 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.054087][ T30] audit: type=1400 audit(1793190649.353:415): avc: denied { setopt } for pid=7232 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.431950][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.432001][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.116167][ T7274] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 129.907307][ T30] audit: type=1400 audit(1793190652.203:416): avc: denied { ioctl } for pid=7311 comm="syz.1.549" path="socket:[13627]" dev="sockfs" ino=13627 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.247920][ T7337] syzkaller0: entered promiscuous mode [ 131.247945][ T7337] syzkaller0: entered allmulticast mode [ 131.280048][ T7337] tipc: Enabled bearer , priority 0 [ 131.284864][ T7337] tipc: Resetting bearer [ 131.353338][ T7336] tipc: Resetting bearer [ 131.424551][ T7336] tipc: Disabling bearer [ 131.542227][ T7349] tipc: Resetting bearer [ 131.566638][ T7349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.603876][ T7349] tipc: Enabling of bearer rejected, already enabled [ 131.757834][ T30] audit: type=1400 audit(1793190654.053:417): avc: denied { name_bind } for pid=7358 comm="syz.4.568" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 131.761824][ T7359] warning: `syz.4.568' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.906210][ T7370] netlink: 52 bytes leftover after parsing attributes in process `syz.2.571'. [ 132.111616][ T7374] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.150896][ T30] audit: type=1400 audit(1793190654.453:418): avc: denied { append } for pid=7382 comm="syz.4.578" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 132.440082][ T7402] netlink: 14 bytes leftover after parsing attributes in process `syz.0.583'. [ 132.502146][ T7402] bond0 (unregistering): Released all slaves [ 133.019128][ T7400] infiniband syz1: Couldn't create per-port data [ 133.019149][ T7400] siw: device registration error -19 [ 134.391864][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 134.655464][ T7450] netlink: 14 bytes leftover after parsing attributes in process `syz.0.603'. [ 135.058735][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.612'. [ 135.203170][ T7474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.614'. [ 137.250777][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 137.628973][ T7543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.634'. [ 139.302057][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'. [ 139.494267][ T2324] hid-generic 0005:15C2:8000.0002: item fetching failed at offset 0/2 [ 139.494748][ T2324] hid-generic 0005:15C2:8000.0002: probe with driver hid-generic failed with error -22 [ 139.678878][ T2324] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 140.343418][ T2324] usb 4-1: not running at top speed; connect to a high speed hub [ 140.343501][ T2324] usb 4-1: New USB device found: idVendor=12d1, idProduct=60c6, bcdDevice=f9.ad [ 140.344397][ T2324] usb 4-1: config 255 has an invalid interface number: 147 but max is 2 [ 140.344420][ T2324] usb 4-1: config 255 has an invalid interface number: 241 but max is 2 [ 140.344439][ T2324] usb 4-1: config 255 has an invalid interface number: 227 but max is 2 [ 140.344457][ T2324] usb 4-1: config 255 has no interface number 0 [ 140.344472][ T2324] usb 4-1: config 255 has no interface number 1 [ 140.344487][ T2324] usb 4-1: config 255 has no interface number 2 [ 140.344533][ T2324] usb 4-1: config 255 interface 147 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 140.344559][ T2324] usb 4-1: config 255 interface 147 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 140.344582][ T2324] usb 4-1: config 255 interface 147 altsetting 5 endpoint 0x8 has an invalid bInterval 255, changing to 4 [ 140.344618][ T2324] usb 4-1: config 255 interface 241 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 140.344641][ T2324] usb 4-1: config 255 interface 147 has no altsetting 0 [ 140.344657][ T2324] usb 4-1: config 255 interface 241 has no altsetting 0 [ 140.344673][ T2324] usb 4-1: config 255 interface 227 has no altsetting 0 [ 140.345129][ T2324] usb 4-1: language id specifier not provided by device, defaulting to English [ 140.347359][ T2324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.347381][ T2324] usb 4-1: Product: Ч [ 140.347395][ T2324] usb 4-1: Manufacturer:  [ 140.347409][ T2324] usb 4-1: SerialNumber: 츑엶﹈䉄婏坰밖帯䧸缃㡼折હ旐᭏鋜Ɛ毽䭽볳痕㯑憅⻈ロ烵൩䏈뀱竣Ӧ쑏鐕쒐Ӧᦲ只⳿㻪롐茕埇i句 [ 140.393565][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 140.518995][ T30] audit: type=1400 audit(1793190662.823:419): avc: denied { write } for pid=7627 comm="syz.2.657" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.565926][ T7586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.763872][ T7641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.663'. [ 140.810677][ T2324] option 4-1:255.147: GSM modem (1-port) converter detected [ 140.847301][ T2324] usb 4-1: USB disconnect, device number 2 [ 140.878975][ T2324] option 4-1:255.147: device disconnected [ 140.945284][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'. [ 141.103869][ T7657] FAULT_INJECTION: forcing a failure. [ 141.103869][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 141.103900][ T7657] CPU: 1 UID: 0 PID: 7657 Comm: syz.4.670 Not tainted syzkaller #0 PREEMPT(full) [ 141.103923][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 141.103935][ T7657] Call Trace: [ 141.103942][ T7657] [ 141.103950][ T7657] dump_stack_lvl+0x100/0x190 [ 141.103990][ T7657] should_fail_ex.cold+0x5/0xa [ 141.104023][ T7657] should_failslab+0xc2/0x120 [ 141.104046][ T7657] __kmalloc_noprof+0xfc/0x840 [ 141.104076][ T7657] ? lsm_blob_alloc+0x68/0x90 [ 141.104103][ T7657] lsm_blob_alloc+0x68/0x90 [ 141.104126][ T7657] security_sk_alloc+0x2d/0x290 [ 141.104155][ T7657] sk_prot_alloc+0x1d1/0x2a0 [ 141.104182][ T7657] sk_clone+0x7b/0x1700 [ 141.104213][ T7657] sctp_clone_sock+0x34/0x1970 [ 141.104243][ T7657] ? security_socket_post_create+0x85/0x270 [ 141.104275][ T7657] ? sock_create_lite+0x48/0x120 [ 141.104302][ T7657] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 141.104338][ T7657] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 141.104381][ T7657] sctp_getsockopt+0x2fb2/0x7160 [ 141.104402][ T7657] ? avc_has_perm_noaudit+0x56/0x470 [ 141.104428][ T7657] ? find_held_lock+0x2b/0x80 [ 141.104450][ T7657] ? avc_has_perm_noaudit+0x11e/0x470 [ 141.104473][ T7657] ? avc_has_perm_noaudit+0x11e/0x470 [ 141.104498][ T7657] ? __pfx_sctp_getsockopt+0x10/0x10 [ 141.104529][ T7657] ? __pfx_avc_has_perm+0x10/0x10 [ 141.104550][ T7657] ? futex_unqueue+0x13d/0x2c0 [ 141.104577][ T7657] ? lock_acquire+0x1d1/0x380 [ 141.104604][ T7657] ? __might_fault+0xc5/0x140 [ 141.104627][ T7657] ? find_held_lock+0x2b/0x80 [ 141.104647][ T7657] ? __might_fault+0xc5/0x140 [ 141.104668][ T7657] ? __might_fault+0xc5/0x140 [ 141.104697][ T7657] ? _copy_from_user+0x59/0xd0 [ 141.104722][ T7657] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 141.104749][ T7657] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 141.104782][ T7657] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 141.104808][ T7657] do_sock_getsockopt+0x415/0x570 [ 141.104831][ T7657] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 141.104857][ T7657] ? __fget_files+0x34/0x3d0 [ 141.104881][ T7657] ? find_held_lock+0x2b/0x80 [ 141.104910][ T7657] ? __fget_files+0x21f/0x3d0 [ 141.104940][ T7657] __sys_getsockopt+0x148/0x260 [ 141.104968][ T7657] ? __x64_sys_getsockopt+0xbd/0x160 [ 141.104987][ T7657] __x64_sys_getsockopt+0xbd/0x160 [ 141.105006][ T7657] ? do_syscall_64+0xae/0x790 [ 141.105037][ T7657] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.105068][ T7657] do_syscall_64+0x123/0x790 [ 141.105105][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.105126][ T7657] RIP: 0033:0x7f3e1619f559 [ 141.105144][ T7657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.105163][ T7657] RSP: 002b:00007f3e1704e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 141.105189][ T7657] RAX: ffffffffffffffda RBX: 00007f3e16425fa0 RCX: 00007f3e1619f559 [ 141.105203][ T7657] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000004 [ 141.105215][ T7657] RBP: 00007f3e16236b20 R08: 00002000000002c0 R09: 0000000000000000 [ 141.105228][ T7657] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 141.105241][ T7657] R13: 00007f3e16426038 R14: 00007f3e16425fa0 R15: 00007ffd8d966c78 [ 141.105269][ T7657] [ 142.333456][ T7695] netlink: 68 bytes leftover after parsing attributes in process `syz.4.687'. [ 142.524316][ T30] audit: type=1400 audit(1793190664.823:420): avc: denied { nlmsg_read } for pid=7702 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.588597][ T7767] tipc: Enabling of bearer rejected, already enabled [ 143.913209][ T30] audit: type=1400 audit(1793190666.213:421): avc: denied { append } for pid=7794 comm="syz.2.717" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.966547][ T7797] tipc: Enabling of bearer rejected, already enabled [ 144.739685][ T30] audit: type=1400 audit(1793190667.043:422): avc: denied { create } for pid=7824 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.766618][ T30] audit: type=1400 audit(1793190667.063:423): avc: denied { bind } for pid=7824 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.783348][ T7827] tipc: Enabling of bearer rejected, already enabled [ 144.798559][ T30] audit: type=1400 audit(1793190667.093:424): avc: denied { accept } for pid=7824 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.895137][ T7833] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.735'. [ 145.287910][ T30] audit: type=1400 audit(1793190667.563:425): avc: denied { read append } for pid=7845 comm="syz.3.741" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.288156][ T30] audit: type=1400 audit(1793190667.573:426): avc: denied { open } for pid=7845 comm="syz.3.741" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.288293][ T30] audit: type=1400 audit(1793190667.573:427): avc: denied { ioctl } for pid=7845 comm="syz.3.741" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0xc018937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.793223][ T30] audit: type=1400 audit(1793190668.093:428): avc: denied { write } for pid=7851 comm="syz.0.742" path="socket:[14327]" dev="sockfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.107926][ T7856] tipc: Enabling of bearer rejected, already enabled [ 146.186870][ T30] audit: type=1400 audit(1793190668.483:429): avc: denied { watch } for pid=7861 comm="syz.2.747" path="/134" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.205256][ T7863] syzkaller0: entered promiscuous mode [ 146.205275][ T7863] syzkaller0: entered allmulticast mode [ 146.210637][ T7863] tipc: Bearer : already 2 bearers with priority 0 [ 146.210653][ T7863] tipc: Enabling of bearer rejected, cannot adjust to lower [ 146.396865][ T7875] syz.2.753(7875): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 146.564646][ T4188] IPVS: starting estimator thread 0... [ 146.641230][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.753'. [ 146.702228][ T7886] IPVS: using max 44 ests per chain, 105600 per kthread [ 147.276186][ T7893] md: md0 stopped. [ 147.665060][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 147.739222][ T4244] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.739266][ T4244] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.739297][ T4244] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.739327][ T4244] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.801039][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 147.818761][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 147.977250][ T7911] tipc: Enabling of bearer rejected, failed to enable media [ 149.028291][ T7927] tipc: Resetting bearer [ 149.612682][ T7927] tipc: Resetting bearer [ 150.040508][ T4231] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.040555][ T4231] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.040586][ T4231] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.040616][ T4231] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.201311][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 150.505706][ T7960] syzkaller0: entered promiscuous mode [ 150.506806][ T7960] syzkaller0: entered allmulticast mode [ 150.529714][ T7960] tipc: Bearer : already 2 bearers with priority 0 [ 150.529735][ T7960] tipc: Enabling of bearer rejected, cannot adjust to lower [ 150.593879][ T7959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.611083][ T30] audit: type=1400 audit(1793190672.913:430): avc: denied { ioctl } for pid=7964 comm="syz.3.786" path="socket:[15537]" dev="sockfs" ino=15537 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.797257][ T7971] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 150.797295][ T7971] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 150.797336][ T7971] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 150.850188][ T7974] netlink: 14 bytes leftover after parsing attributes in process `syz.2.788'. [ 150.881879][ T7974] bond0 (unregistering): Released all slaves [ 150.980430][ T4231] smbdirect: ib_dev[syz1] removed [ 150.984620][ T7971] siw: device registration error -19 [ 151.160734][ T7985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.793'. [ 151.470648][ T7965] syz.3.786 (7965) used greatest stack depth: 19544 bytes left [ 152.258670][ T8005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.485526][ T8022] FAULT_INJECTION: forcing a failure. [ 152.485526][ T8022] name fail_futex, interval 1, probability 0, space 0, times 1 [ 152.485558][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.2.799 Not tainted syzkaller #0 PREEMPT(full) [ 152.485581][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.485593][ T8022] Call Trace: [ 152.485599][ T8022] [ 152.485607][ T8022] dump_stack_lvl+0x100/0x190 [ 152.485649][ T8022] should_fail_ex.cold+0x5/0xa [ 152.485679][ T8022] get_futex_key+0x1c9/0x13e0 [ 152.485705][ T8022] ? __pfx_get_futex_key+0x10/0x10 [ 152.485722][ T8022] ? wakeup_preempt_fair+0x4fc/0xf60 [ 152.485753][ T8022] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 152.485776][ T8022] futex_wait_setup+0x91/0x540 [ 152.485807][ T8022] __futex_wait+0x19f/0x360 [ 152.485834][ T8022] ? __pfx___futex_wait+0x10/0x10 [ 152.485856][ T8022] ? __pfx_try_to_wake_up+0x10/0x10 [ 152.485881][ T8022] ? futex_hash+0x311/0x400 [ 152.485903][ T8022] ? __pfx_futex_wake_mark+0x10/0x10 [ 152.485934][ T8022] ? find_held_lock+0x2b/0x80 [ 152.485954][ T8022] ? futex_wake+0x4ea/0x5e0 [ 152.485987][ T8022] futex_wait+0xe6/0x370 [ 152.486015][ T8022] ? __pfx_futex_wait+0x10/0x10 [ 152.486060][ T8022] ? rcu_read_lock_any_held+0x6a/0x90 [ 152.486085][ T8022] ? find_held_lock+0x2b/0x80 [ 152.486106][ T8022] ? ksys_write+0x190/0x250 [ 152.486124][ T8022] ? ksys_write+0x190/0x250 [ 152.486144][ T8022] do_futex+0x265/0x440 [ 152.486166][ T8022] ? __pfx_do_futex+0x10/0x10 [ 152.486190][ T8022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.486227][ T8022] __x64_sys_futex+0x34f/0x4d0 [ 152.486252][ T8022] ? fput+0x7c/0x100 [ 152.486273][ T8022] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.486293][ T8022] ? ksys_write+0x1ac/0x250 [ 152.486309][ T8022] ? __pfx_ksys_write+0x10/0x10 [ 152.486332][ T8022] do_syscall_64+0x123/0x790 [ 152.486363][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.486385][ T8022] RIP: 0033:0x7fe522f9f559 [ 152.486402][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.486419][ T8022] RSP: 002b:00007fe523f1e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.486438][ T8022] RAX: ffffffffffffffda RBX: 00007fe523225fa8 RCX: 00007fe522f9f559 [ 152.486451][ T8022] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe523225fa8 [ 152.486462][ T8022] RBP: 00007fe523225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 152.486473][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.486484][ T8022] R13: 00007fe523226038 R14: 00007ffcc21f20d0 R15: 00007ffcc21f21b8 [ 152.486509][ T8022] [ 152.642669][ T30] audit: type=1400 audit(1793190674.943:431): avc: denied { read } for pid=8028 comm="syz.3.804" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.642712][ T30] audit: type=1400 audit(1793190674.943:432): avc: denied { open } for pid=8028 comm="syz.3.804" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.652784][ T30] audit: type=1400 audit(1793190674.943:433): avc: denied { ioctl } for pid=8028 comm="syz.3.804" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x80104592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.810805][ T8038] netlink: 14 bytes leftover after parsing attributes in process `syz.3.806'. [ 152.831914][ T30] audit: type=1400 audit(1793190675.123:434): avc: denied { write } for pid=8039 comm="syz.4.807" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 152.845988][ T8041] usb usb8: usbfs: process 8041 (syz.4.807) did not claim interface 0 before use [ 153.012400][ T30] audit: type=1400 audit(1793190675.313:435): avc: denied { setopt } for pid=8049 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.187800][ T8065] FAULT_INJECTION: forcing a failure. [ 153.187800][ T8065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 153.187838][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.4.815 Not tainted syzkaller #0 PREEMPT(full) [ 153.187861][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.187873][ T8065] Call Trace: [ 153.187880][ T8065] [ 153.187888][ T8065] dump_stack_lvl+0x100/0x190 [ 153.187927][ T8065] should_fail_ex.cold+0x5/0xa [ 153.187959][ T8065] get_futex_key+0x1c9/0x13e0 [ 153.187985][ T8065] ? __pfx_get_futex_key+0x10/0x10 [ 153.188016][ T8065] futex_wake+0xf4/0x5e0 [ 153.188047][ T8065] ? __pfx_futex_wake+0x10/0x10 [ 153.188077][ T8065] ? percpu_counter_add_batch+0xb9/0x230 [ 153.188106][ T8065] ? errseq_sample+0x51/0x70 [ 153.188133][ T8065] ? file_init_path+0x48e/0x670 [ 153.188161][ T8065] do_futex+0x2b2/0x440 [ 153.188185][ T8065] ? __pfx_do_futex+0x10/0x10 [ 153.188208][ T8065] ? fd_install+0x223/0x580 [ 153.188236][ T8065] __x64_sys_futex+0x34f/0x4d0 [ 153.188260][ T8065] ? __sys_socket+0xac/0x260 [ 153.188288][ T8065] ? __pfx___x64_sys_futex+0x10/0x10 [ 153.188322][ T8065] do_syscall_64+0x123/0x790 [ 153.188356][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.188376][ T8065] RIP: 0033:0x7f3e1619f559 [ 153.188393][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.188411][ T8065] RSP: 002b:00007f3e1704e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.188431][ T8065] RAX: ffffffffffffffda RBX: 00007f3e16425fa8 RCX: 00007f3e1619f559 [ 153.188444][ T8065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e16425fac [ 153.188456][ T8065] RBP: 00007f3e16425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 153.188467][ T8065] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 153.188479][ T8065] R13: 00007f3e16426038 R14: 00007ffd8d966b90 R15: 00007ffd8d966c78 [ 153.188506][ T8065] [ 153.503521][ T8073] netlink: 14 bytes leftover after parsing attributes in process `syz.3.819'. [ 153.579069][ T8077] tipc: Enabling of bearer rejected, already enabled [ 154.781662][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 155.014965][ T30] audit: type=1326 audit(1793190677.313:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.0.831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d099f559 code=0x7fc00000 [ 155.358699][ T8115] FAULT_INJECTION: forcing a failure. [ 155.358699][ T8115] name fail_futex, interval 1, probability 0, space 0, times 0 [ 155.358728][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.4.835 Not tainted syzkaller #0 PREEMPT(full) [ 155.358751][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.358763][ T8115] Call Trace: [ 155.358770][ T8115] [ 155.358778][ T8115] dump_stack_lvl+0x100/0x190 [ 155.358818][ T8115] should_fail_ex.cold+0x5/0xa [ 155.358851][ T8115] get_futex_key+0x1c9/0x13e0 [ 155.358876][ T8115] ? __pfx_get_futex_key+0x10/0x10 [ 155.358895][ T8115] ? _copy_from_user+0x59/0xd0 [ 155.358917][ T8115] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 155.358950][ T8115] futex_wake+0xf4/0x5e0 [ 155.358980][ T8115] ? __pfx_futex_wake+0x10/0x10 [ 155.359017][ T8115] do_futex+0x2b2/0x440 [ 155.359040][ T8115] ? __pfx_do_futex+0x10/0x10 [ 155.359063][ T8115] ? __fget_files+0x21f/0x3d0 [ 155.359093][ T8115] __x64_sys_futex+0x34f/0x4d0 [ 155.359118][ T8115] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.359151][ T8115] do_syscall_64+0x123/0x790 [ 155.359183][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.359204][ T8115] RIP: 0033:0x7f3e1619f559 [ 155.359220][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.359236][ T8115] RSP: 002b:00007f3e1704e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.359256][ T8115] RAX: ffffffffffffffda RBX: 00007f3e16425fa8 RCX: 00007f3e1619f559 [ 155.359268][ T8115] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e16425fac [ 155.359279][ T8115] RBP: 00007f3e16425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 155.359289][ T8115] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 155.359301][ T8115] R13: 00007f3e16426038 R14: 00007ffd8d966b90 R15: 00007ffd8d966c78 [ 155.359325][ T8115] [ 155.716836][ T30] audit: type=1326 audit(1793190678.013:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.0.831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6d099f559 code=0x7fc00000 [ 155.812212][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 156.036246][ T30] audit: type=1400 audit(1793190678.333:438): avc: denied { create } for pid=8138 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 156.068580][ T5714] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.519116][ T5714] usb 5-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 156.549534][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.550102][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.926148][ T8149] netlink: 14 bytes leftover after parsing attributes in process `syz.3.847'. [ 157.014881][ T5714] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 157.043763][ T5714] wwan wwan0: port wwan0qmi0 attached [ 157.227332][ T30] audit: type=1400 audit(1793190679.523:439): avc: denied { read write } for pid=8130 comm="syz.4.842" name="cdc-wdm0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 157.238668][ T30] audit: type=1400 audit(1793190679.533:440): avc: denied { open } for pid=8130 comm="syz.4.842" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 157.638995][ T5714] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 96:2c:c9:04:de:1b [ 157.671521][ T30] audit: type=1400 audit(1793190679.973:441): avc: denied { listen } for pid=8158 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.697781][ T30] audit: type=1400 audit(1793190679.983:442): avc: denied { accept } for pid=8158 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.720274][ T988] usb 5-1: USB disconnect, device number 2 [ 157.751280][ T988] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 157.846532][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 157.920715][ T988] wwan wwan0: port wwan0qmi0 disconnected [ 158.249890][ T30] audit: type=1400 audit(1793190680.553:443): avc: denied { block_suspend } for pid=8187 comm="syz.2.860" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.877136][ T8198] netlink: 100 bytes leftover after parsing attributes in process `syz.1.864'. [ 159.123065][ T8204] netlink: 48 bytes leftover after parsing attributes in process `syz.3.865'. [ 159.211913][ T30] audit: type=1400 audit(1793190681.513:444): avc: denied { read write } for pid=8211 comm="syz.0.869" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 159.211969][ T30] audit: type=1400 audit(1793190681.513:445): avc: denied { open } for pid=8211 comm="syz.0.869" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 159.247964][ T30] audit: type=1400 audit(1793190681.513:446): avc: denied { ioctl } for pid=8211 comm="syz.0.869" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 159.422862][ T8223] netlink: 100 bytes leftover after parsing attributes in process `syz.4.877'. [ 161.131423][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 161.918543][ T8261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.918564][ T8261] block device autoloading is deprecated and will be removed. [ 162.039503][ T30] audit: type=1400 audit(1793190684.323:447): avc: denied { create } for pid=8264 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.144716][ T30] audit: type=1400 audit(1793190684.443:448): avc: denied { write } for pid=8268 comm="syz.2.893" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.156005][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.156042][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.474921][ T1229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.668873][ T1229] usb 3-1: Using ep0 maxpacket: 32 [ 162.671093][ T1229] usb 3-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 162.672191][ T1229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.672214][ T1229] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 162.672260][ T1229] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 162.672293][ T1229] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 162.672327][ T1229] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.672349][ T1229] usb 3-1: config 1 interface 1 has no altsetting 0 [ 162.674089][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.674110][ T1229] usb 3-1: Product: syz [ 162.674124][ T1229] usb 3-1: Manufacturer: syz [ 162.674138][ T1229] usb 3-1: SerialNumber: syz [ 162.814546][ T8284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.957559][ T1229] usb 3-1: selecting invalid altsetting 0 [ 163.022570][ T8289] netlink: 14 bytes leftover after parsing attributes in process `syz.1.897'. [ 163.315555][ T8269] input: syz1 as /devices/virtual/input/input6 [ 163.380522][ T1229] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 163.544272][ T1229] usb 3-1: USB disconnect, device number 2 [ 163.765040][ T4946] Bluetooth: Unexpected continuation frame (len 16) [ 163.957882][ T8225] Set syz0 is full, maxelem 65536 reached [ 164.198084][ T30] audit: type=1400 audit(1793190686.503:449): avc: denied { create } for pid=8326 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.200715][ T30] audit: type=1400 audit(1793190686.503:450): avc: denied { connect } for pid=8326 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.537345][ T8348] netlink: 34 bytes leftover after parsing attributes in process `syz.3.922'. [ 164.628928][ T8351] SET target dimension over the limit! [ 166.508273][ T8414] FAULT_INJECTION: forcing a failure. [ 166.508273][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 166.508303][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.3.946 Not tainted syzkaller #0 PREEMPT(full) [ 166.508328][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 166.508340][ T8414] Call Trace: [ 166.508348][ T8414] [ 166.508357][ T8414] dump_stack_lvl+0x100/0x190 [ 166.508396][ T8414] should_fail_ex.cold+0x5/0xa [ 166.508429][ T8414] should_failslab+0xc2/0x120 [ 166.508449][ T8414] __kmalloc_noprof+0xfc/0x840 [ 166.508478][ T8414] ? __list_lru_init+0x100/0x530 [ 166.508514][ T8414] __list_lru_init+0x100/0x530 [ 166.508546][ T8414] sget_fc+0xaca/0x1f60 [ 166.508575][ T8414] ? __pfx_test_keyed_super+0x10/0x10 [ 166.508605][ T8414] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 166.508631][ T8414] ? __pfx_set_anon_super_fc+0x10/0x10 [ 166.508660][ T8414] ? __pfx_sget_fc+0x10/0x10 [ 166.508689][ T8414] ? hook_capable+0x1bc/0x500 [ 166.508717][ T8414] ? kasan_save_track+0x14/0x30 [ 166.508753][ T8414] ? rcu_is_watching+0x13/0xc0 [ 166.508776][ T8414] ? cap_capable+0x107/0x430 [ 166.508804][ T8414] ? __pfx_nfsd_fill_super+0x10/0x10 [ 166.508829][ T8414] get_tree_keyed+0x59/0x1d0 [ 166.508851][ T8414] vfs_get_tree+0x92/0x320 [ 166.508876][ T8414] path_mount+0x7d0/0x2850 [ 166.508907][ T8414] ? __pfx_path_mount+0x10/0x10 [ 166.508935][ T8414] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.508967][ T8414] ? putname+0xb1/0x110 [ 166.508992][ T8414] ? kmem_cache_free+0x127/0x6c0 [ 166.509028][ T8414] ? __x64_sys_mount+0x293/0x310 [ 166.509053][ T8414] __x64_sys_mount+0x293/0x310 [ 166.509079][ T8414] ? __pfx___x64_sys_mount+0x10/0x10 [ 166.509112][ T8414] do_syscall_64+0x123/0x790 [ 166.509145][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.509165][ T8414] RIP: 0033:0x7f345179f559 [ 166.509190][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.509209][ T8414] RSP: 002b:00007f34525a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.509232][ T8414] RAX: ffffffffffffffda RBX: 00007f3451a25fa0 RCX: 00007f345179f559 [ 166.509245][ T8414] RDX: 00002000000004c0 RSI: 0000200000000440 RDI: 0000000000000000 [ 166.509259][ T8414] RBP: 00007f3451836b20 R08: 0000000000000000 R09: 0000000000000000 [ 166.509271][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.509284][ T8414] R13: 00007f3451a26038 R14: 00007f3451a25fa0 R15: 00007ffc912a2468 [ 166.509310][ T8414] [ 166.644743][ T8418] bond0: entered allmulticast mode [ 166.647201][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.764918][ T8418] ip6gretap1: entered allmulticast mode [ 166.772447][ T8418] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 167.149274][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 167.224765][ T30] audit: type=1400 audit(1793190689.513:451): avc: denied { firmware_load } for pid=8426 comm="syz.3.951" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 168.120913][ T8436] syz.3.951 (8436) used greatest stack depth: 19488 bytes left [ 168.291615][ T8453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.291638][ T8453] block device autoloading is deprecated and will be removed. [ 168.292885][ T8457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.961'. [ 168.650182][ T8468] SET target dimension over the limit! [ 169.291492][ T30] audit: type=1400 audit(1793190691.593:452): avc: denied { mount } for pid=8476 comm="syz.4.968" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.325932][ T8481] ip_tables: iptables: counters copy to user failed while replacing table [ 169.327995][ T8481] syz_tun: entered allmulticast mode [ 169.366032][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 169.496354][ T30] audit: type=1400 audit(1793190691.793:453): avc: denied { connect } for pid=8486 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.785262][ T8500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.979'. [ 170.037230][ T8507] syzkaller0: entered promiscuous mode [ 170.037253][ T8507] syzkaller0: entered allmulticast mode [ 170.051566][ T8507] tipc: Bearer : already 2 bearers with priority 0 [ 170.051585][ T8507] tipc: Enabling of bearer rejected, cannot adjust to lower [ 171.084408][ T30] audit: type=1326 audit(1793190693.383:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.3.987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345179f559 code=0x7fc00000 [ 171.085047][ T30] audit: type=1326 audit(1793190693.383:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.3.987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f345179f559 code=0x7fc00000 [ 171.154750][ T8519] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.444391][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 171.444424][ T8533] netlink: 76 bytes leftover after parsing attributes in process `syz.1.990'. [ 171.483098][ T8529] tipc: Resetting bearer [ 171.505089][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.505708][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.811688][ T30] audit: type=1326 audit(1793190694.103:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.3.987" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345179f559 code=0x7fc00000 [ 171.913865][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.925732][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.031749][ T8533] geneve2: entered promiscuous mode [ 172.031774][ T8533] geneve2: entered allmulticast mode [ 172.038992][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.061269][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.064824][ T4188] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.064870][ T4188] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.175020][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 172.188538][ T8546] md/raid1:md2: not clean -- starting background reconstruction [ 172.188555][ T8546] md/raid1:md2: active with 2 out of 3 mirrors [ 172.189552][ T8546] md2: detected capacity change from 0 to 4096 [ 172.219654][ T8559] md: resync of RAID array md2 [ 172.291604][ T8559] md: md2: resync done. [ 172.514608][ T8565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.767000][ T8593] SET target dimension over the limit! [ 174.820105][ T30] audit: type=1400 audit(1793190697.123:457): avc: denied { create } for pid=8594 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.833328][ T30] audit: type=1400 audit(1793190697.133:458): avc: denied { setopt } for pid=8594 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.912239][ T30] audit: type=1400 audit(1793190697.213:459): avc: denied { bind } for pid=8594 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.032419][ T30] audit: type=1400 audit(1793190697.333:460): avc: denied { getattr } for pid=8601 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.174627][ T8599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.556070][ T30] audit: type=1400 audit(1793190697.853:461): avc: denied { read } for pid=8607 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.556624][ T30] audit: type=1400 audit(1793190697.853:462): avc: denied { open } for pid=8607 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.802641][ T30] audit: type=1400 audit(1793190698.103:463): avc: denied { write } for pid=8590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.802859][ T30] audit: type=1400 audit(1793190698.103:464): avc: denied { create } for pid=8590 comm="dhcpcd-run-hook" name="resolv.conf.wlan1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.803276][ T30] audit: type=1400 audit(1793190698.103:465): avc: denied { write } for pid=8590 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan1.ipv4ll" dev="tmpfs" ino=2152 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.831116][ T30] audit: type=1400 audit(1793190698.113:466): avc: denied { append } for pid=8590 comm="dhcpcd-run-hook" name="resolv.conf.wlan1.ipv4ll" dev="tmpfs" ino=2152 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.831593][ T8628] vlan0: entered promiscuous mode [ 175.834528][ T8628] tipc: Enabled bearer , priority 0 [ 175.873497][ T8631] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 175.873530][ T8631] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 175.873565][ T8631] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 175.935213][ T8633] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1017'. [ 176.024130][ T8599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.261080][ T8599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.644219][ T8599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.968904][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.969683][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.104896][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 189.104924][ T30] audit: type=1400 audit(1793190711.403:469): avc: denied { bind } for pid=8645 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.112741][ T8650] Bluetooth: hci0: command 0x0406 tx timeout [ 191.112937][ T8650] Bluetooth: hci2: command 0x0406 tx timeout [ 191.113036][ T8650] Bluetooth: hci3: command 0x0406 tx timeout [ 191.113180][ T8650] Bluetooth: hci1: command 0x0406 tx timeout [ 191.704220][ T8657] SET target dimension over the limit! [ 193.531513][ T43] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.440764][ T1103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.741304][ T4231] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.092575][ T4188] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.956916][ T5713] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 205.270099][ T5713] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 205.381830][ T5713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.532053][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 205.532088][ T5713] usb 3-1: Product: syz [ 205.532108][ T5713] usb 3-1: Manufacturer: syz [ 207.135007][ T5713] usb 3-1: selecting invalid altsetting 1 [ 207.237494][ T5713] dvb_ttusb_budget: ttusb_init_controller: error [ 207.244977][ T5713] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 211.130233][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.146207][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.161338][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.198223][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.216968][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.780443][ T30] audit: type=1400 audit(1793190734.063:470): avc: denied { mounton } for pid=8679 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 212.640733][ T5713] DVB: Unable to find symbol cx22700_attach() [ 213.502704][ T53] Bluetooth: hci5: command tx timeout [ 213.782219][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.971651][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.999812][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.107083][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.186629][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.616459][ T53] Bluetooth: hci5: command tx timeout [ 216.782838][ T53] Bluetooth: hci6: command tx timeout [ 217.660867][ T53] Bluetooth: hci5: command tx timeout [ 218.882635][ T5631] Bluetooth: hci6: command tx timeout [ 219.085038][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.115811][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.151322][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.249903][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.344324][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.745137][ T5631] Bluetooth: hci5: command tx timeout [ 220.443104][ T5713] DVB: Unable to find symbol tda10046_attach() [ 220.443126][ T5713] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 220.664070][ T5713] usb 3-1: USB disconnect, device number 3 [ 220.955725][ T53] Bluetooth: hci6: command tx timeout [ 221.586041][ T53] Bluetooth: hci7: command tx timeout [ 223.018953][ T53] Bluetooth: hci6: command tx timeout [ 223.660485][ T53] Bluetooth: hci7: command tx timeout [ 225.747247][ T53] Bluetooth: hci7: command tx timeout [ 227.820827][ T53] Bluetooth: hci7: command tx timeout [ 228.070928][ T8703] tipc: Enabling of bearer rejected, already enabled [ 238.461024][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 238.467541][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 238.473043][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 238.486335][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 238.498170][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 240.548201][ T5631] Bluetooth: hci8: command tx timeout [ 242.644693][ T5631] Bluetooth: hci8: command tx timeout [ 244.105172][ T8599] tipc: Resetting bearer [ 244.702326][ T5631] Bluetooth: hci8: command tx timeout [ 244.911929][ T8599] tipc: Disabling bearer [ 246.077837][ T5625] tipc: Disabling bearer [ 246.786078][ T5631] Bluetooth: hci8: command tx timeout [ 247.019865][ T5626] tipc: Resetting bearer [ 247.890123][ T5626] tipc: Disabling bearer [ 249.171738][ T4231] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.325565][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.326087][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.814433][ T4231] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.546739][ T4231] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.715777][ T8679] rxe_eth0 speed is unknown, defaulting to 1000 [ 253.952937][ T4231] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.452125][ T4231] bridge_slave_1: left allmulticast mode [ 263.452215][ T4231] bridge_slave_1: left promiscuous mode [ 263.480310][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.200041][ T4231] bridge_slave_0: left allmulticast mode [ 264.200104][ T4231] bridge_slave_0: left promiscuous mode [ 264.241541][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.738607][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 272.332322][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.349161][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.375295][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.400838][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.426537][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.435471][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.443294][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.456033][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.518836][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.540033][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.548234][ T53] Bluetooth: hci0: command tx timeout [ 276.122104][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.138474][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.165460][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.199354][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.244841][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.629332][ T53] Bluetooth: hci0: command tx timeout [ 276.630277][ T5631] Bluetooth: hci1: command tx timeout [ 278.619822][ T5631] Bluetooth: hci3: command tx timeout [ 278.698726][ T5631] Bluetooth: hci1: command tx timeout [ 278.698916][ T5631] Bluetooth: hci0: command tx timeout [ 280.561195][ T8769] tipc: Enabling of bearer rejected, already enabled [ 280.715474][ T53] Bluetooth: hci3: command tx timeout [ 280.781484][ T53] Bluetooth: hci0: command tx timeout [ 280.781648][ T53] Bluetooth: hci1: command tx timeout [ 282.423318][ T4231] tipc: Left network mode [ 282.778276][ T5631] Bluetooth: hci3: command tx timeout [ 282.868613][ T5631] Bluetooth: hci1: command tx timeout [ 284.860237][ T5631] Bluetooth: hci3: command tx timeout [ 286.903324][ T8685] rxe_eth0 speed is unknown, defaulting to 1000 [ 296.963459][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 296.976810][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 297.000070][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 297.024609][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 297.074902][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 299.258562][ T5631] Bluetooth: hci9: command tx timeout [ 301.391356][ T5631] Bluetooth: hci9: command tx timeout [ 301.478425][ T30] audit: type=1400 audit(1793190823.723:471): avc: denied { write } for pid=8810 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 303.429211][ T5631] Bluetooth: hci9: command tx timeout [ 305.508213][ T5631] Bluetooth: hci9: command tx timeout [ 308.785524][ T8674] syz_tun (unregistering): left allmulticast mode [ 308.958590][ T8674] tipc: Disabling bearer [ 311.773158][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.773827][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.343028][ T5713] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 312.641740][ T5713] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=1.00 [ 312.736090][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.908799][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.908844][ T5713] usb 3-1: Product: syz [ 312.908874][ T5713] usb 3-1: Manufacturer: syz [ 312.908904][ T5713] usb 3-1: SerialNumber: syz [ 313.203908][ T30] audit: type=1400 audit(1793190835.503:472): avc: denied { write } for pid=8783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.729451][ T5713] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 313.729487][ T5713] cdc_wdm 3-1:1.0: Unknown control protocol [ 315.892642][ T24] usb 3-1: USB disconnect, device number 4 [ 317.696406][ T30] audit: type=1400 audit(1793190839.993:473): avc: denied { write } for pid=8836 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.932706][ T8691] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.134078][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.102177][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 331.348739][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 331.425287][ T24] usb 3-1: New USB device found: idVendor=056a, idProduct=0045, bcdDevice=0.00 [ 331.490695][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 331.490914][ T24] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 331.490946][ T24] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 331.490977][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 331.491186][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.618642][ T24] usb 3-1: config 0 descriptor?? [ 332.165209][ T24] usb 3-1: string descriptor 0 read error: -71 [ 332.371823][ T24] usbhid 3-1:0.0: can't add hid device: -22 [ 332.372580][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 332.544315][ T24] usb 3-1: USB disconnect, device number 5 [ 334.302204][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 335.329330][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.337332][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.363665][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.401760][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.409370][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.544212][ T5631] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 336.558238][ T5631] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 336.569656][ T5631] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 336.617807][ T5631] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 336.648684][ T5631] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 337.508283][ T5631] Bluetooth: hci2: command tx timeout [ 338.556745][ T4946] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 338.590088][ T4946] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 338.600466][ T4946] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 338.655976][ T4946] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 338.684087][ T4946] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 338.859853][ T4946] Bluetooth: hci10: command tx timeout [ 339.429029][ T4946] Bluetooth: hci6: command 0x0406 tx timeout [ 339.598526][ T53] Bluetooth: hci2: command tx timeout [ 340.779232][ T53] Bluetooth: hci11: command tx timeout [ 340.937924][ T53] Bluetooth: hci10: command tx timeout [ 341.658772][ T53] Bluetooth: hci2: command tx timeout [ 342.861053][ T4946] Bluetooth: hci11: command tx timeout [ 343.019014][ T4946] Bluetooth: hci10: command tx timeout [ 343.482841][ T8718] rxe_eth0 speed is unknown, defaulting to 1000 [ 343.740340][ T4946] Bluetooth: hci2: command tx timeout [ 344.542139][ T4946] Bluetooth: hci7: command 0x0406 tx timeout [ 344.941189][ T53] Bluetooth: hci11: command tx timeout [ 345.099220][ T53] Bluetooth: hci10: command tx timeout [ 347.055330][ T53] Bluetooth: hci11: command tx timeout [ 355.813448][ T30] audit: type=1400 audit(1793190878.113:474): avc: denied { write } for pid=8861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.297745][ T4946] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 357.305428][ T4946] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 357.357415][ T4946] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 357.427179][ T4946] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 357.458647][ T4946] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 359.581245][ T4946] Bluetooth: hci12: command tx timeout [ 361.581077][ T5731] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 361.662292][ T4946] Bluetooth: hci12: command tx timeout [ 361.859418][ T5731] usb 3-1: New USB device found: idVendor=16e3, idProduct=f9e9, bcdDevice=0.58 [ 361.905232][ T5731] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 361.905264][ T5731] usb 3-1: config 0 has no interface number 0 [ 361.905694][ T5731] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 65535, setting to 64 [ 361.905844][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.202505][ T5731] usb 3-1: config 0 descriptor?? [ 363.095117][ T30] audit: type=1400 audit(1793190885.393:475): avc: denied { write } for pid=8925 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.749666][ T53] Bluetooth: hci12: command tx timeout [ 364.154615][ T5731] usb 3-1: can't set config #0, error -71 [ 364.292599][ T5731] usb 3-1: USB disconnect, device number 6 [ 365.018168][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 365.818804][ T4946] Bluetooth: hci12: command tx timeout [ 367.922782][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.941190][ T8801] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.261526][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.262044][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.787146][ T4231] hsr_slave_0: left promiscuous mode [ 377.812803][ T4231] hsr_slave_1: left promiscuous mode [ 377.835591][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.835686][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.882129][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.882180][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.017953][ T4231] veth1_macvtap: left promiscuous mode [ 378.018192][ T4231] veth0_macvtap: left promiscuous mode [ 378.019861][ T4231] veth1_vlan: left promiscuous mode [ 378.023018][ T4231] veth0_vlan: left promiscuous mode [ 382.749177][ T4231] team0 (unregistering): Port device team_slave_1 removed [ 382.953249][ T4231] team0 (unregistering): Port device team_slave_0 removed [ 387.924645][ T8764] rxe_eth0 speed is unknown, defaulting to 1000 [ 389.831636][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 389.850149][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 389.874976][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 389.909052][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 389.946386][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 392.256960][ T53] Bluetooth: hci13: command tx timeout [ 394.308746][ T4946] Bluetooth: hci13: command tx timeout [ 394.586418][ T5631] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 394.603198][ T5631] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 394.637032][ T5631] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 394.715502][ T5631] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 394.754273][ T5631] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 395.752930][ T4946] Bluetooth: hci0: command 0x0406 tx timeout [ 396.388702][ T53] Bluetooth: hci13: command tx timeout [ 396.760220][ T4946] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 396.779417][ T4946] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 396.793712][ T4946] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 396.823717][ T4946] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 396.843714][ T4946] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 396.869901][ T4946] Bluetooth: hci14: command tx timeout [ 398.328544][ T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 398.338021][ T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 398.358428][ T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 398.404956][ T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 398.435035][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 398.459341][ T5631] Bluetooth: hci13: command tx timeout [ 398.948176][ T5627] Bluetooth: hci14: command tx timeout [ 398.949106][ T53] Bluetooth: hci15: command tx timeout [ 400.622599][ T53] Bluetooth: hci16: command tx timeout [ 400.863376][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 400.864146][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 401.037023][ T53] Bluetooth: hci14: command tx timeout [ 401.038069][ T5631] Bluetooth: hci15: command tx timeout [ 402.699188][ T4946] Bluetooth: hci16: command tx timeout [ 403.103516][ T4946] Bluetooth: hci15: command tx timeout [ 403.103644][ T4946] Bluetooth: hci14: command tx timeout [ 404.778073][ T5631] Bluetooth: hci16: command tx timeout [ 405.179527][ T5631] Bluetooth: hci15: command tx timeout [ 406.864622][ T5631] Bluetooth: hci16: command tx timeout [ 418.886767][ T8760] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.334375][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 420.349250][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 420.356634][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 420.434270][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 420.456008][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 421.339548][ T4946] Bluetooth: hci9: command 0x0406 tx timeout [ 422.705001][ T5631] Bluetooth: hci17: command tx timeout [ 424.779687][ T5631] Bluetooth: hci17: command tx timeout [ 426.132286][ T4231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.858644][ T5631] Bluetooth: hci17: command tx timeout [ 427.296119][ T4231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.766022][ T30] audit: type=1400 audit(1793190950.053:476): avc: denied { write } for pid=8974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.552878][ T4231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.937855][ T5631] Bluetooth: hci17: command tx timeout [ 429.514196][ T4231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.516114][ T30] audit: type=1400 audit(1793190954.803:477): avc: denied { write } for pid=9017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.677026][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.677562][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.108332][ T4231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.746744][ T4231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.126366][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 436.655379][ T4231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.766130][ T4231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.268737][ T8768] rxe_eth0 speed is unknown, defaulting to 1000 [ 441.981518][ T4231] bridge_slave_1: left allmulticast mode [ 441.981569][ T4231] bridge_slave_1: left promiscuous mode [ 441.985040][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.064523][ T4231] bridge_slave_0: left allmulticast mode [ 442.064577][ T4231] bridge_slave_0: left promiscuous mode [ 442.079904][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.171438][ T4231] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 450.287543][ T4231] ip6gretap1 (unregistering): left allmulticast mode [ 451.476316][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.495388][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.541473][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.580116][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.616667][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.739447][ T5631] Bluetooth: hci4: command tx timeout [ 455.638168][ T30] audit: type=1400 audit(1793190977.913:478): avc: denied { write } for pid=9034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.832403][ T5631] Bluetooth: hci4: command tx timeout [ 456.861539][ T4946] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 456.879880][ T4946] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 456.895396][ T4946] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 456.934133][ T4946] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 456.963775][ T4946] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 457.600863][ T4946] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 457.610324][ T4946] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 457.634127][ T4946] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 457.673369][ T4946] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 457.692818][ T4946] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 457.909458][ T5631] Bluetooth: hci4: command tx timeout [ 459.105590][ T5631] Bluetooth: hci18: command tx timeout [ 459.182705][ T4231] bond0 (unregistering): Released all slaves [ 459.828299][ T5631] Bluetooth: hci19: command tx timeout [ 459.982399][ T5631] Bluetooth: hci4: command tx timeout [ 460.566749][ T30] audit: type=1400 audit(1793190982.863:479): avc: denied { write } for pid=9063 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.804864][ T8649] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 460.822344][ T8649] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 460.849665][ T8649] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 460.955549][ T8649] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 460.993942][ T8649] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 461.178765][ T8649] Bluetooth: hci18: command tx timeout [ 461.899834][ T8649] Bluetooth: hci19: command tx timeout [ 462.299370][ T8649] Bluetooth: hci11: command 0x0406 tx timeout [ 462.301539][ T4946] Bluetooth: hci2: command 0x0406 tx timeout [ 462.301768][ T8650] Bluetooth: hci10: command 0x0406 tx timeout [ 463.104310][ T5631] Bluetooth: hci20: command tx timeout [ 463.259087][ T5631] Bluetooth: hci18: command tx timeout [ 463.985619][ T5631] Bluetooth: hci19: command tx timeout [ 464.814568][ T8874] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.821920][ T10] infiniband syz1: ib_query_port failed (-19) [ 464.999602][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 465.187883][ T5631] Bluetooth: hci20: command tx timeout [ 465.365081][ T5631] Bluetooth: hci18: command tx timeout [ 466.060568][ T5631] Bluetooth: hci19: command tx timeout [ 467.265578][ T5631] Bluetooth: hci20: command tx timeout [ 469.348481][ T5631] Bluetooth: hci20: command tx timeout [ 480.890047][ T53] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 480.896924][ T53] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 480.905196][ T53] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 480.919951][ T53] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 480.929972][ T53] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 482.778377][ T53] Bluetooth: hci12: command 0x0406 tx timeout [ 483.018019][ T5631] Bluetooth: hci21: command tx timeout [ 483.589311][ T8866] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.097897][ T5631] Bluetooth: hci21: command tx timeout [ 485.185044][ T30] audit: type=1400 audit(1793191007.483:480): avc: denied { write } for pid=9083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.177952][ T5631] Bluetooth: hci21: command tx timeout [ 487.529257][ T30] audit: type=1400 audit(1793191009.823:481): avc: denied { write } for pid=9120 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.259831][ T5631] Bluetooth: hci21: command tx timeout [ 489.852620][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 492.144127][ T8863] rxe_eth0 speed is unknown, defaulting to 1000 [ 496.128397][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.128914][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.586804][ T8946] rxe_eth0 speed is unknown, defaulting to 1000 [ 498.046097][ T30] audit: type=1400 audit(1793191020.333:482): avc: denied { write } for pid=9129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.981129][ T30] audit: type=1400 audit(1793191022.243:483): avc: denied { write } for pid=9140 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.865309][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 511.095058][ T53] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 511.112452][ T53] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 511.132770][ T53] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 511.170578][ T53] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 511.201725][ T53] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 513.499425][ T8649] Bluetooth: hci22: command tx timeout [ 513.499867][ T8649] Bluetooth: hci13: command 0x0406 tx timeout [ 514.673877][ T8915] rxe_eth0 speed is unknown, defaulting to 1000 [ 515.581419][ T5631] Bluetooth: hci22: command tx timeout [ 517.658213][ T5631] Bluetooth: hci22: command tx timeout [ 518.624628][ T5631] Bluetooth: hci14: command 0x0406 tx timeout [ 519.051341][ T5631] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 519.076065][ T5631] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 519.092188][ T5631] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 519.128849][ T5631] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 519.191567][ T5631] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 519.738900][ T53] Bluetooth: hci22: command tx timeout [ 521.132344][ T5631] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 521.153398][ T5631] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 521.168678][ T5631] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 521.208661][ T5631] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 521.239523][ T5631] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 521.339129][ T53] Bluetooth: hci23: command tx timeout [ 523.349657][ T5627] Bluetooth: hci24: command tx timeout [ 523.428757][ T5627] Bluetooth: hci23: command tx timeout [ 523.745949][ T5627] Bluetooth: hci15: command 0x0406 tx timeout [ 523.746137][ T5627] Bluetooth: hci16: command 0x0406 tx timeout [ 524.246323][ T5631] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 524.273641][ T5631] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 524.280701][ T5631] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 524.309436][ T5631] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 524.340902][ T5631] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 524.665792][ T30] audit: type=1400 audit(1793191046.943:484): avc: denied { write } for pid=9151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.419604][ T53] Bluetooth: hci24: command tx timeout [ 525.499035][ T53] Bluetooth: hci23: command tx timeout [ 526.541612][ T53] Bluetooth: hci25: command tx timeout [ 527.514960][ T53] Bluetooth: hci24: command tx timeout [ 527.578996][ T53] Bluetooth: hci23: command tx timeout [ 528.643239][ T53] Bluetooth: hci25: command tx timeout [ 529.591209][ T53] Bluetooth: hci24: command tx timeout [ 530.698836][ T53] Bluetooth: hci25: command tx timeout [ 530.750506][ T30] audit: type=1400 audit(1793191053.033:485): avc: denied { write } for pid=9198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.779327][ T53] Bluetooth: hci25: command tx timeout [ 535.911972][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 537.393224][ T8954] rxe_eth0 speed is unknown, defaulting to 1000 [ 541.380245][ T5631] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 541.388899][ T5631] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 541.396663][ T5631] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 541.415240][ T5631] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 541.425649][ T5631] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 543.498029][ T5631] Bluetooth: hci26: command tx timeout [ 544.222638][ T5631] Bluetooth: hci17: command 0x0406 tx timeout [ 545.579106][ T53] Bluetooth: hci26: command tx timeout [ 547.659070][ T53] Bluetooth: hci26: command tx timeout [ 549.738036][ T53] Bluetooth: hci26: command tx timeout [ 552.383225][ T32] INFO: task syz-executor:8801 blocked for more than 143 seconds. [ 552.383266][ T32] Not tainted syzkaller #0 [ 552.383292][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.383317][ T32] task:syz-executor state:D stack:24088 pid:8801 tgid:8801 ppid:1 task_flags:0x400140 flags:0x00080003 [ 552.383388][ T32] Call Trace: [ 552.383399][ T32] [ 552.383492][ T32] __schedule+0x125e/0x6990 [ 552.384154][ T32] ? __pfx___schedule+0x10/0x10 [ 552.384218][ T32] ? find_held_lock+0x2b/0x80 [ 552.384371][ T32] ? schedule+0x225/0x2c0 [ 552.384750][ T32] schedule+0xdd/0x2c0 [ 552.384907][ T32] schedule_preempt_disabled+0x13/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.384951][ T32] rwsem_down_write_slowpath+0x4c6/0x12f0 [ 552.385225][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 552.385540][ T32] ? lock_acquire+0x1d1/0x380 [ 552.385777][ T32] ? __pfx___might_resched+0x10/0x10 [ 552.386028][ T32] down_write+0x1bb/0x1f0 [ 552.386117][ T32] ? __pfx_down_write+0x10/0x10 [ 552.403873][ T32] rdma_dev_exit_net+0x174/0x6b0 [ 552.404089][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 552.404184][ T32] ? __pfx___might_resched+0x10/0x10 [ 552.404286][ T32] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 552.404388][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 552.404552][ T32] ops_undo_list+0x2ee/0xab0 [ 552.404731][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 552.404917][ T32] ? ops_init+0x2fa/0x5f0 [ 552.405073][ T32] setup_net+0x1fa/0x3a0 [ 552.405184][ T32] ? __pfx_setup_net+0x10/0x10 [ 552.418389][ T32] ? bpf_lsm_namespace_init+0x9/0x10 [ 552.418638][ T32] copy_net_ns+0x340/0x7a0 [ 552.418777][ T32] create_new_namespaces+0x3ea/0xac0 [ 552.419082][ T32] unshare_nsproxy_namespaces+0xf6/0x210 [ 552.419199][ T32] ksys_uns ** replaying previous printk message ** [ 552.419199][ T32] ksys_unshare+0x44f/0x980 [ 552.419272][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 552.419433][ T32] ? __pfx_do_faccessat+0x10/0x10 [ 552.419746][ T32] __x64_sys_unshare+0x31/0x40 [ 552.432376][ T32] do_syscall_64+0x123/0x790 [ 552.432519][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.432575][ T32] RIP: 0033:0x7f15875a0827 [ 552.432663][ T32] RSP: 002b:00007ffc1495f638 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 552.432705][ T32] RAX: ffffffffffffffda RBX: 00007f1587825f40 RCX: 00007f15875a0827 [ 552.432728][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 552.432751][ T32] RBP: 00007f15878267b8 R08: 0000000000000000 R09: 0000000000000000 [ 552.432774][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 552.432797][ T32] R13: 0000000000000003 R14: 00007ffc1495f878 R15: 0000000000000000 [ 552.433224][ T32] [ 552.433280][ T32] [ 552.433280][ T32] Showing all locks held in the system: [ 552.433304][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 552.433320][ T32] #0: ffff88813ff6c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 552.433397][ T32] #1: ffffc90000117d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.433489][ T32] #2: ffff888028e7b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 552.433609][ T32] locks held by pr/ttyS0/31: 2, last CPU#1: [ 552.433630][ T32] #0: ffffffff8ffd7718 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 552.433761][ T32] #1: ffffffff9cf379d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 552.443704][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 552.443722][ T32] #0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 552.443811][ T32] locks held by kcompactd0/35: 1, last CPU#0: [ 552.443829][ T32] #0: ffff88807d045388 (&anon_vma->rwsem){++++}-{4:4}, at: rmap_walk_anon+0x73b/0x9a0 [ 552.443926][ T32] locks held by kworker/u8:3/50: 4, on CPU#1: [ 552.443946][ T32] #0: ffff88801d795148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 552.444068][ T32] #1: ffffc90000bb7d08 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.444199][ T32] #2: ffff88807e554730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 552.444346][ T32] #3: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: disable_device+0xbf/0x280 [ 552.444427][ T32] locks held by kworker/u8:5/167: 3, last CPU#0: [ 552.444444][ T32] #0: ffff88813ff6c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 552.444534][ T32] #1: ffffc90002f57d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.444639][ T32] #2: ffff88807ec0c258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 552.444789][ T32] locks held by kworker/u8:13/4188: 2, on CPU#1: [ 552.444812][ T32] #0: ffff88813ff6c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 552.444952][ T32] #1: ffffc90010407d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.445052][ T32] locks held by kworker/u8:14/4231: 4, on CPU#1: [ 552.445068][ T32] #0: ffff88801dec8948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 552.445151][ T32] #1: ffffc900104d7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.453762][ T32] #2: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 552.453884][ T32] #3: ffffffff8fff78b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0xec/0x790 [ 552.454036][ T32] locks held by kworker/u8:15/4236: 3, on CPU#1: [ 552.454061][ T32] #0: ffff88801d792148 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 552.454151][ T32] #1: ffffc9000db57d08 ((work_completion)(&ndev_work->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 552.454234][ T32] #2: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: ib_enum_all_roce_netdevs+0x89/0x150 [ 552.454340][ T32] locks held by syslogd/4978: 1, last CPU#0: [ 552.454360][ T32] #0: ffff88807e999f78 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x298/0xd40 [ 552.454483][ T32] locks held by klogd/4985: 1, last CPU#0: [ 552.454505][ T32] #0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 552.454640][ T32] locks held by getty/5382: 2, on CPU#0: [ 552.454664][ T32] #0: ffff88802b8a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 552.454787][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 552.454873][ T32] locks held by syz-executor/8679: 2, on CPU#0: [ 552.454890][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.454992][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x261/0x6b0 [ 552.455145][ T32] locks held by syz-executor/8685: 2, on CPU#0: [ 552.463695][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.463805][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x1f2/0x6b0 [ 552.463929][ T32] locks held by syz-executor/8691: 2, on CPU#0: [ 552.463952][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.464106][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x1f2/0x6b0 [ 552.464219][ T32] locks held by syz-executor/8718: 2, on CPU#1: [ 552.464235][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.464316][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x1f2/0x6b0 [ 552.464415][ T32] locks held by syz-executor/8760: 2, on CPU#0: [ 552.464436][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.464550][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.464684][ T32] locks held by syz-executor/8764: 2, on CPU#1: [ 552.464708][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.464844][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.464922][ T32] locks held by syz-executor/8768: 2, on CPU#0: [ 552.464939][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.465034][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.475382][ T32] locks held by syz-executor/8801: 2, on CPU#0: [ 552.475408][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.475541][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.475689][ T32] locks held by syz-executor/8863: 2, on CPU#1: [ 552.475711][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.475784][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.475878][ T32] locks held by syz-executor/8866: 2, on CPU#1: [ 552.475897][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.492328][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.492437][ T32] locks held by syz-executor/8874: 2, on CPU#1: [ 552.492458][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.492579][ T32] #1: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 552.492720][ T32] locks held by syz-executor/8915: 3, on CPU#0: [ 552.492745][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.492904][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.493039][ T32] #2: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 552.493137][ T32] locks held by syz-executor/8946: 3, on CPU#0: [ 552.493157][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.493267][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.493398][ T32] #2: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 552.493549][ T32] locks held by syz-executor/8954: 4, last CPU#0: [ 552.493576][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.513715][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.513809][ T32] #2: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 552.513908][ T32] #3: ffff8880369c5020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 552.514029][ T32] locks held by syz-executor/8957: 4, on CPU#0: [ 552.514051][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.514182][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.514330][ T32] #2: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 552.514412][ T32] #3: ffff8880369c5020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 552.514503][ T32] locks held by syz-executor/8960: 4, on CPU#1: [ 552.514521][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.514625][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.514749][ T32] #2: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 552.514887][ T32] #3: ffff8880369c5020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 552.515019][ T32] locks held by syz-executor/9001: 4, on CPU#1: [ 552.515034][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.515113][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.535037][ T32] #2: ffffffff91b3c2c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 552.535172][ T32] #3: ffff8880369c5020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 552.535256][ T32] locks held by syz-executor/9046: 2, on CPU#1: [ 552.535273][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.535368][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.535482][ T32] locks held by syz-executor/9057: 2, on CPU#1: [ 552.535503][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.535630][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.535776][ T32] locks held by syz-executor/9059: 2, on CPU#0: [ 552.535802][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.535880][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.535970][ T32] locks held by syz-executor/9066: 2, on CPU#0: [ 552.535993][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.536096][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.536220][ T32] locks held by syz-executor/9106: 2, on CPU#0: [ 552.536242][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.536378][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.551518][ T32] locks held by syz-executor/9156: 2, on CPU#1: [ 552.551536][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.551619][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.551721][ T32] locks held by syz-executor/9170: 2, on CPU#1: [ 552.551741][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.551857][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.551996][ T32] locks held by syz-executor/9177: 2, on CPU#0: [ 552.552020][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.552156][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.552235][ T32] locks held by syz-executor/9186: 2, on CPU#1: [ 552.552253][ T32] #0: ffffffff91f0d368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 552.552345][ T32] #1: ffffffff91b3c548 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 552.552456][ T32] locks held by modprobe/9239: 1, last CPU#0: [ 552.552477][ T32] #0: ffff8880299c1bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f0/0x490 [ 552.552604][ T32] locks held by sed/9240: 1, last CPU#0: [ 552.552627][ T32] #0: ffff88807ddd6540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa40 [ 552.552794][ T32] [ 552.552808][ T32] ============================================= [ 552.552808][ T32] [ 552.552819][ T32] NMI backtrace for cpu 0 [ 552.552833][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.552856][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 552.552870][ T32] Call Trace: [ 552.552888][ T32] [ 552.552912][ T32] dump_stack_lvl+0x100/0x190 [ 552.553056][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 552.553215][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.553338][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 552.553449][ T32] sys_info+0x141/0x190 [ 552.553520][ T32] watchdog+0xd0f/0x10c0 [ 552.553852][ T32] ? __pfx_watchdog+0x10/0x10 [ 552.553928][ T32] ? __kthread_parkme+0x18f/0x230 [ 552.554132][ T32] ? kthread+0x13a/0x450 [ 552.554183][ T32] ? __pfx_watchdog+0x10/0x10 [ 552.554234][ T32] kthread+0x373/0x450 [ 552.554315][ T32] ? __pfx_kthread+0x10/0x10 [ 552.554394][ T32] ret_from_fork+0x730/0xd60 [ 552.554510][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 552.554674][ T32] ? __switch_to+0x800/0x10e0 [ 552.554786][ T32] ? __pfx_kthread+0x10/0x10 [ 552.554869][ T32] ret_from_fork_asm+0x1a/0x30 [ 552.555317][ T32] [ 552.555406][ T32] Sending NMI from CPU 0 to CPUs 1: [ 552.555440][ C1] NMI backtrace for cpu 1 [ 552.555456][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 552.555483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 552.555498][ C1] RIP: 0010:preempt_count_sub+0x4b/0x150 [ 552.555543][ C1] Code: 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 d6 00 00 00 8b 0d 85 13 ee 1a 85 c9 75 14 65 48 8b 05 21 9a e0 13 39 d8 72 1b <81> fb fe 00 00 00 76 6f f7 db 48 63 db 65 48 01 1d 08 9a e0 13 5b [ 552.555563][ C1] RSP: 0018:ffffc90000a77938 EFLAGS: 00000002 [ 552.555590][ C1] RAX: 8000000000000002 RBX: 0000000000000001 RCX: 0000000000000000 [ 552.555607][ C1] RDX: 0000000000000004 RSI: ffffffff8c833500 RDI: 0000000000000001 [ 552.555624][ C1] RBP: 0000016d6fc3cd86 R08: 0000000000000000 R09: 00000000000007b6 [ 552.555641][ C1] R10: 0000000000000003 R11: 205d323354202020 R12: 0000000000000001 [ 552.555658][ C1] R13: 0000000000000af1 R14: fffffbfff39e6f95 R15: dffffc0000000000 [ 552.555677][ C1] FS: 0000000000000000(0000) GS:ffff888122590000(0000) knlGS:0000000000000000 [ 552.555700][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.555719][ C1] CR2: 00007f027803940e CR3: 000000004935c000 CR4: 00000000003526f0 [ 552.555738][ C1] Call Trace: [ 552.555762][ C1] [ 552.555797][ C1] delay_tsc+0x6a/0xc0 [ 552.555915][ C1] wait_for_lsr+0xf3/0x210 [ 552.556092][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 552.556252][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 552.556292][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 552.556438][ C1] serial8250_console_write+0x1108/0x14f0 [ 552.556659][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 552.556698][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 552.556780][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 552.557074][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 552.557221][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 552.557299][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 552.557365][ C1] ? do_raw_spin_lock+0xf0/0x260 [ 552.557622][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 552.557720][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 552.557934][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 552.557994][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 552.558328][ C1] nbcon_kthread_func+0x5ef/0x7f0 [ 552.558492][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 552.558757][ C1] ? __kthread_parkme+0x18f/0x230 [ 552.558869][ C1] ? kthread+0x13a/0x450 [ 552.558902][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 552.558943][ C1] kthread+0x373/0x450 [ 552.559008][ C1] ? __pfx_kthread+0x10/0x10 [ 552.559159][ C1] ret_from_fork+0x730/0xd60 [ 552.559227][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 552.559327][ C1] ? __switch_to+0x800/0x10e0 [ 552.559426][ C1] ? __pfx_kthread+0x10/0x10 [ 552.559581][ C1] ret_from_fork_asm+0x1a/0x30 [ 552.559949][ C1] [ 552.639225][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 554.296250][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 554.305363][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 554.315417][ T32] Call Trace: [ 554.318715][ T32] [ 554.321671][ T32] dump_stack_lvl+0x100/0x190 [ 554.326520][ T32] vpanic+0x2dc/0x6f8 [ 554.330673][ T32] panic+0xd1/0xe0 [ 554.334430][ T32] ? __pfx_panic+0x10/0x10 [ 554.339063][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 554.345315][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 554.351515][ T32] ? watchdog.cold+0x20/0x26d [ 554.356312][ T32] watchdog.cold+0x31/0x26d [ 554.361196][ T32] ? __pfx_watchdog+0x10/0x10 [ 554.365920][ T32] ? __kthread_parkme+0x18f/0x230 [ 554.371121][ T32] ? kthread+0x13a/0x450 [ 554.375390][ T32] ? __pfx_watchdog+0x10/0x10 [ 554.380099][ T32] kthread+0x373/0x450 [ 554.384244][ T32] ? __pfx_kthread+0x10/0x10 [ 554.388927][ T32] ret_from_fork+0x730/0xd60 [ 554.393610][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 554.398867][ T32] ? __switch_to+0x800/0x10e0 [ 554.403665][ T32] ? __pfx_kthread+0x10/0x10 [ 554.408344][ T32] ret_from_fork_asm+0x1a/0x30 [ 554.413592][ T32] [ 554.416800][ T32] Kernel Offset: disabled [ 554.421127][ T32] Rebooting in 86400 seconds..